
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/12C3076850E111F09D297C74C4F9AE02.roa
File: 12C3076850E111F09D297C74C4F9AE02.roa (raw, json)
Hash identifier: VPPWSocLnuSKtcVnd5S6tAbC+12jEdjVyuRLBXg6FF0=
Subject key identifier: 0C:FA:8E:5B:0C:09:21:0C:F9:6F:4D:08:84:19:FF:E4:33:39:32:E1
Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial: 0815
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/12C3076850E111F09D297C74C4F9AE02.roa
Signing time: Wed 22 Oct 2025 22:10:20 +0000
ROA not before: Wed 22 Oct 2025 22:10:20 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 134734
IP address blocks: 103.156.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2069 (0x815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Validity
Not Before: Oct 22 22:10:20 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68f9564c-4758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:c1:52:f5:14:20:75:a6:28:b9:b5:d4:e7:
16:3b:b9:39:6e:4e:c7:34:09:7a:8b:a9:89:ae:6a:
72:8c:50:85:20:89:71:04:6d:f7:1f:5f:94:a4:5c:
a2:d5:a6:7d:03:6e:b4:7f:46:7a:38:d4:e1:aa:30:
4d:f4:0a:7e:c7:02:67:db:64:54:dd:d5:fc:2c:61:
84:37:ab:e6:36:1d:f6:74:d5:f5:bc:10:fc:b1:08:
47:1a:ec:1c:e4:fa:f4:6c:0d:2f:5c:46:a2:80:71:
34:0c:da:2d:dc:26:d4:f3:de:bf:ba:1a:9c:e3:59:
a4:fb:a5:6c:be:b4:01:05:f1:85:b5:8f:08:97:8b:
a7:e4:5b:1e:3b:0f:3d:7c:88:68:ba:2d:da:c8:72:
fb:7e:55:ea:2a:4b:75:89:74:bf:b6:48:4d:85:e3:
9c:bc:69:ed:29:9f:21:4b:07:9c:c4:b4:ea:a9:7b:
72:94:55:b6:8f:49:67:ea:f1:fc:81:a2:72:a5:5b:
78:0c:3c:9f:25:0b:35:b1:14:e2:61:90:d7:48:f9:
52:0b:0f:4b:04:40:cc:9e:07:bf:e5:a0:57:90:37:
90:f3:e2:6d:b4:d8:5a:39:a0:ca:54:a2:5b:5a:7a:
8a:42:9a:d3:b6:5f:b4:a5:0e:ff:bc:cf:b2:d2:88:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FA:8E:5B:0C:09:21:0C:F9:6F:4D:08:84:19:FF:E4:33:39:32:E1
X509v3 Authority Key Identifier:
keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/12C3076850E111F09D297C74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.176.0/24
Signature Algorithm: sha256WithRSAEncryption
30:17:e2:75:31:16:c6:ff:dd:cb:2d:54:f7:c6:6a:b9:1b:22:
52:58:2b:96:2b:f2:a5:c9:e0:03:ed:83:af:cb:de:69:05:e8:
84:02:a2:2c:33:f8:d6:b7:f8:d9:ed:ec:eb:dd:01:d8:44:9e:
94:44:0b:56:fd:4d:35:8f:3a:b3:c6:a3:6b:5a:2a:e6:5e:24:
03:ed:5a:63:f9:ab:4a:72:fd:f4:69:ad:a2:14:66:e5:5f:40:
7e:df:bb:ec:6a:93:b3:94:5d:45:eb:67:aa:12:d5:7b:98:18:
b1:68:e8:26:19:32:b9:a6:17:05:6b:fa:71:51:e0:f0:98:85:
3c:d0:09:2e:16:9c:cb:6b:c4:0d:7b:1d:0e:5d:07:cf:c2:da:
47:ce:54:59:43:8b:4f:c7:33:ea:25:68:ac:93:56:c2:10:5c:
15:e8:81:7b:2d:79:69:66:4c:a8:f4:1c:ac:4f:3d:29:fd:67:
ab:56:44:09:ef:8a:05:e3:57:9d:43:83:01:c8:16:91:2b:0d:
29:38:a3:b9:27:8c:65:9b:97:5a:54:de:26:5a:03:75:d5:9a:
3c:08:d6:5d:dc:74:fb:0f:5f:a5:fb:b5:f1:2f:97:70:1a:b1:
e9:68:e9:21:51:bf:ee:6d:07:de:ed:e1:9a:49:34:45:7d:eb:
ed:54:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:08:10 2025 by rpki-client