
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A8EF2B58A89A11EFA52A9970C4F9AE02.roa
File: A8EF2B58A89A11EFA52A9970C4F9AE02.roa (raw, json)
Hash identifier: 0yuiUuTSODKUKXLNsgQCShKjboLS3TAY6lYLYOs9OQU=
Subject key identifier: F3:9A:0F:E5:02:06:07:18:0B:D2:24:02:B2:C1:54:70:99:D0:89:BB
Certificate issuer: /CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
Certificate serial: 5B
Authority key identifier: 30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A8EF2B58A89A11EFA52A9970C4F9AE02.roa
Signing time: Mon 05 May 2025 02:39:18 +0000
ROA not before: Mon 05 May 2025 02:39:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136969
IP address blocks: 103.188.92.0/23 maxlen: 23
103.188.92.0/24 maxlen: 24
103.188.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl
rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EC2D, serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
Validity
Not Before: May 5 02:39:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681824d6-4a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:e3:5e:37:ad:71:0b:00:0c:34:a0:f1:f6:
46:e2:49:14:9b:b1:11:1c:64:2c:9e:16:fb:ff:ca:
b7:62:d8:18:65:24:e6:a9:e0:0e:8a:8c:e3:79:07:
9d:7c:52:56:28:b4:57:7a:1c:25:32:b5:c0:15:67:
f7:5a:49:fe:e7:36:cd:29:8b:45:7a:1e:72:27:4c:
ce:06:7e:9a:d6:23:b5:31:96:42:cb:8d:66:39:93:
6e:6b:91:f5:c4:e4:f7:7f:fd:6f:ad:9d:09:ef:a8:
ad:09:bc:9e:60:69:4b:54:86:c2:b6:e1:be:47:4d:
2d:ef:5a:f7:48:59:ad:e9:07:7e:35:90:67:2e:76:
47:b9:4d:58:80:ce:b0:51:00:37:4e:4a:f5:79:af:
df:94:4b:9e:90:5f:d0:53:bd:c5:91:d5:00:72:05:
36:c5:a5:4d:be:d7:4d:1c:93:98:73:4a:39:bd:60:
e9:86:b1:b1:9c:2f:b8:c6:c1:a8:6e:4f:64:ee:bb:
8d:dc:26:cb:24:a9:4a:0a:53:06:bd:bd:94:01:d5:
79:22:14:3e:1e:fc:5a:8a:7f:a6:20:b6:b1:46:d6:
50:dc:a1:a1:a6:d0:8b:58:45:cc:0c:a9:85:b0:76:
03:be:27:83:90:6c:0a:ab:81:4e:01:c2:e4:fc:73:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9A:0F:E5:02:06:07:18:0B:D2:24:02:B2:C1:54:70:99:D0:89:BB
X509v3 Authority Key Identifier:
keyid:30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A8EF2B58A89A11EFA52A9970C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.188.92.0/23
Signature Algorithm: sha256WithRSAEncryption
93:fa:53:82:17:e8:1f:5e:42:52:2f:d5:61:7b:e2:b9:eb:fa:
da:4c:30:38:a7:f6:13:5a:fe:a3:6b:29:82:0a:79:d0:96:e9:
43:59:a9:e7:be:5a:c9:e9:39:78:60:33:fd:06:4d:c3:f9:85:
a2:c4:ba:7a:64:2f:8a:66:f5:4e:94:51:77:d1:53:a1:c4:a3:
84:9a:bd:2b:a3:43:7c:85:11:e0:97:7a:2d:93:ec:e4:a9:8c:
72:e7:10:5a:f1:75:b0:37:2d:55:64:e2:07:31:a6:71:0d:ca:
98:c9:a3:02:df:d7:a2:e6:dc:35:3b:12:73:2d:b2:00:0f:71:
5f:52:c5:10:a2:49:21:b2:fd:43:07:9e:5b:50:6d:b1:3c:2c:
1e:64:26:b6:79:f4:eb:f3:1c:99:36:15:7c:70:ff:1f:c1:21:
99:6f:fd:19:99:7e:92:8d:f8:25:01:20:dd:89:fd:be:d5:d8:
63:69:2c:59:15:63:1f:43:2f:e8:00:2e:fb:44:f9:f2:ec:3b:
8d:f5:83:85:89:d1:d1:e3:5d:66:d7:6c:c3:3f:0c:06:99:36:
cb:4e:69:da:40:86:ab:6b:72:b3:77:2c:13:eb:ea:c9:82:ce:
19:9a:5d:e2:e6:ae:91:79:be:75:0c:5a:9c:e9:70:c5:01:8e:
f8:73:4f:15
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RUMyRDExMC8GA1UEBRMoMzA0RDY0RTNGMTA1MTI5N0U0QjYyQUM3REUzNDgwRjQ3
QTI5QUUwRjAeFw0yNTA1MDUwMjM5MThaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4MTgyNGQ2LTRhMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjmONeN61xCwAMNKDx9kbiSRSbsREcZCyeFvv/yrdi2BhlJOap4A6KjON5B518
UlYotFd6HCUytcAVZ/daSf7nNs0pi0V6HnInTM4GfprWI7UxlkLLjWY5k25rkfXE
5Pd//W+tnQnvqK0JvJ5gaUtUhsK24b5HTS3vWvdIWa3pB341kGcudke5TViAzrBR
ADdOSvV5r9+US56QX9BTvcWR1QByBTbFpU2+100ck5hzSjm9YOmGsbGcL7jGwahu
T2Tuu43cJsskqUoKUwa9vZQB1XkiFD4e/FqKf6YgtrFG1lDcoaGm0ItYRcwMqYWw
dgO+J4OQbAqrgU4BwuT8czftAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU85oP5QIG
BxgL0iQCssFUcJnQibswHwYDVR0jBBgwFoAUME1k4/EFEpfktirH3jSA9Hoprg8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFQzJELzgyQjcyNUU4QkNF
MzExRUQ4NDlGOTMzMUM0RjlBRTAyL01FMWs0X0VGRXBma3RpckgzalNBOUhvcHJn
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTUUxazRfRUZFcGZrdGlySDNqU0E5SG9wcmc4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUMyRC84MkI3MjVFOEJDRTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9BOEVGMkI1OEE4
OUExMUVGQTUyQTk5NzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWe8XDANBgkqhkiG9w0BAQsFAAOCAQEAk/pTghfoH15CUi/V
YXviuev62kwwOKf2E1r+o2spggp50JbpQ1mp575ayek5eGAz/QZNw/mFosS6emQv
imb1TpRRd9FTocSjhJq9K6NDfIUR4Jd6LZPs5KmMcucQWvF1sDctVWTiBzGmcQ3K
mMmjAt/XoubcNTsScy2yAA9xX1LFEKJJIbL9QweeW1BtsTwsHmQmtnn06/McmTYV
fHD/H8EhmW/9GZl+ko34JQEg3Yn9vtXYY2ksWRVjH0Mv6AAu+0T58uw7jfWDhYnR
0eNdZtdswz8MBpk2y05p2kCGq2tys3csE+vqyYLOGZpd4uaukXm+dQxanOlwxQGO
+HNPFQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:19:33 2025 by rpki-client