
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa
File: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (raw, json)
Hash identifier: fVV5tH5xnHJ5RPLy9jThqMkcctu4xGaw9Zeg+LUw1yQ=
Subject key identifier: E4:02:4C:FB:68:EE:BD:57:8A:75:77:B0:2C:B1:93:F0:DD:55:F5:DA
Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Certificate serial: 0E23
Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa
Signing time: Thu 28 Aug 2025 18:08:36 +0000
ROA not before: Thu 28 Aug 2025 18:08:36 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 134148
IP address blocks: 103.5.242.0/23 maxlen: 24
2401:c7c0:21a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl
rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 18:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3619 (0xe23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Validity
Not Before: Aug 28 18:08:36 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b09b24-7511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:05:42:4f:eb:91:14:07:0e:94:b5:83:65:
1c:94:b3:e1:d7:1a:8f:e9:ed:63:a7:52:3a:91:5e:
66:79:c4:26:ce:1f:eb:71:46:8e:02:55:53:e0:91:
9e:c5:87:99:47:b1:cd:89:8f:5b:33:7e:10:13:8d:
9c:16:a1:44:3f:7e:c5:57:ed:6c:6c:a4:1d:1f:0c:
96:85:10:a9:60:e3:57:3d:09:43:fc:ff:d9:5e:fd:
1b:eb:d2:1c:c6:a8:b8:70:8a:30:4c:6e:62:87:3d:
72:71:6d:fd:6b:92:41:3c:af:85:45:d8:ca:d6:21:
e8:e3:d4:9c:85:19:a4:a9:9f:61:fe:9f:43:c4:94:
36:f5:6e:92:2b:68:e0:7a:ef:46:e4:e9:87:dd:e6:
fa:57:b9:d3:31:c9:af:a6:b1:21:66:61:66:7e:fc:
dc:13:9e:1a:fa:50:d8:ea:5a:32:c5:45:83:8f:35:
66:0d:af:0f:e9:7a:ac:b3:33:91:d6:07:de:99:dd:
d0:c3:5e:ab:1c:c2:91:00:de:59:51:50:fe:4e:6d:
70:27:60:71:46:1d:93:9d:67:f5:33:36:e3:e8:f5:
2b:fd:71:13:34:04:79:71:db:c0:c6:99:04:5e:2a:
5e:3c:90:61:1d:cc:c3:e1:e7:48:d1:28:e1:8e:1b:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:02:4C:FB:68:EE:BD:57:8A:75:77:B0:2C:B1:93:F0:DD:55:F5:DA
X509v3 Authority Key Identifier:
keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.242.0/23
IPv6:
2401:c7c0:21a::/48
Signature Algorithm: sha256WithRSAEncryption
04:92:32:29:ee:f9:3c:4c:4e:ff:2b:e1:c8:cb:5b:08:be:64:
d8:b7:4d:6e:4a:89:21:a5:9d:16:0f:b8:fd:7e:9e:d5:77:ce:
78:93:f4:36:5c:56:cc:bb:9e:3f:8e:b5:80:f6:06:02:a6:fb:
bd:2c:bd:ed:00:87:28:22:c1:9f:c3:8b:27:36:04:1a:40:75:
49:bc:5b:6f:10:2d:86:c9:c7:80:e6:2e:66:5c:e3:a8:58:2a:
eb:fc:a5:6d:2e:f0:37:43:1f:a3:70:6e:b5:53:10:df:63:13:
64:bb:5a:97:60:45:f5:3a:1f:62:d8:b5:1c:ae:9f:08:b4:47:
b7:04:4e:a0:0e:57:90:58:9b:0e:3e:33:ca:f1:4d:80:c6:30:
0e:d9:71:48:ee:04:0f:20:fa:d3:95:3a:14:82:c7:97:8d:8f:
6e:81:ab:21:3d:78:d7:e9:dd:3b:11:85:26:59:69:de:30:b5:
fc:d2:59:ea:b3:f1:5e:48:d3:d6:9a:14:c5:85:ba:5d:7a:f8:
e4:22:b2:8c:d4:eb:59:cc:bb:f3:a9:9f:0d:08:93:bd:b2:5e:
67:62:60:0b:53:c3:d6:1e:3b:14:a9:33:ea:dd:bd:76:62:f5:
5a:1d:37:1c:5a:0c:b4:59:60:8f:dc:d7:e6:2a:af:ea:63:cc:
63:77:27:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:05 2025 by rpki-client