
$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/4E4AF4A2C2B111EBABFFA212C4F9AE02.roa
File: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (raw, json)
Hash identifier: OwVRnVKX5TIRRxRa7tYPZCkquxRI/+jnc5rYmXmYkKM=
Subject key identifier: FF:87:F1:BF:42:16:C7:DF:E3:03:2B:DA:00:30:FE:EF:D6:16:7A:4A
Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
Certificate serial: 0801
Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/4E4AF4A2C2B111EBABFFA212C4F9AE02.roa
Signing time: Fri 02 May 2025 21:32:45 +0000
ROA not before: Fri 02 May 2025 21:32:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140610
IP address blocks: 103.247.199.0/24 maxlen: 24
203.89.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl
rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 21:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2049 (0x801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
Validity
Not Before: May 2 21:32:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681539fc-35c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:d7:95:cb:9e:f1:0b:f6:70:a6:57:82:f2:
c6:cc:37:96:7d:d5:07:68:94:d3:7e:09:d4:db:ed:
c5:ea:80:9b:a8:42:51:65:2d:a7:2c:69:d8:fc:90:
9c:d7:e1:5e:78:7f:37:dd:49:cd:21:64:42:c3:b0:
00:4e:53:d1:69:c3:aa:c7:7e:24:80:b5:02:21:1a:
8b:67:7c:72:f2:e5:67:9f:86:e0:51:b3:e9:90:28:
b0:7b:5e:ab:ea:42:65:e0:a3:9c:44:e6:5c:14:64:
07:fe:e3:99:1f:27:c5:bb:d8:18:08:9f:71:3b:9b:
14:de:77:b4:f6:46:85:fc:c4:28:25:ad:3b:64:a1:
c5:c7:c9:d9:1e:08:44:35:03:92:80:18:d9:85:20:
d8:0c:08:87:87:02:79:76:2a:45:db:1b:38:43:7c:
c7:12:46:2c:fc:05:7b:34:54:b3:d2:4e:6a:94:ed:
1f:3e:48:42:a3:3d:59:dc:13:fd:5f:04:90:7e:dc:
9b:15:e3:f6:09:0f:bc:a8:8c:5b:93:bc:68:7c:97:
80:a9:34:d2:ab:30:f7:ba:52:60:7b:d0:41:ab:10:
bf:88:53:50:7a:90:8c:57:b5:19:85:47:3e:6e:1e:
6b:6f:b8:e9:5b:cd:81:01:3d:15:5b:0c:79:5d:ec:
11:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:87:F1:BF:42:16:C7:DF:E3:03:2B:DA:00:30:FE:EF:D6:16:7A:4A
X509v3 Authority Key Identifier:
keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/4E4AF4A2C2B111EBABFFA212C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.247.199.0/24
203.89.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:7b:f9:f7:2c:79:6b:2f:99:c2:a9:37:a6:b9:47:8a:c7:c7:
c7:4f:e2:57:82:20:e5:a3:eb:7c:e5:03:43:72:ab:d4:d9:a0:
db:bc:d8:e3:9a:7f:fc:d3:1d:09:b4:34:46:65:5b:6b:05:39:
fa:36:3f:5a:7a:da:13:fe:45:64:12:ea:92:51:2b:a0:34:2b:
01:d5:1a:98:78:2f:17:cf:98:93:fa:51:6a:73:84:78:ad:e9:
0a:e0:9c:dc:e2:c9:9c:5a:00:1b:d6:05:5f:e9:2c:ed:bb:1a:
9b:b7:93:73:54:a4:ee:6b:77:bc:6f:88:67:b7:31:05:ee:4e:
4e:8b:a5:8e:1d:97:9e:18:af:73:11:52:cc:dd:1e:04:5e:0c:
82:79:63:cc:69:1e:5a:ef:38:8c:90:5f:93:71:12:77:0a:7a:
fe:b6:d4:19:9b:8c:6f:b9:e5:80:89:83:b4:56:61:36:08:9a:
d3:22:4e:ea:d6:c8:b1:c7:e6:a5:42:f6:89:11:f2:60:02:9d:
92:a6:54:ec:ad:fe:06:21:cb:18:bf:87:68:35:f8:71:2a:8a:
08:8d:df:84:7f:13:f2:58:e6:11:02:76:77:d0:48:be:32:5b:
a3:61:36:41:1b:c9:ea:71:53:67:14:6c:8b:5f:94:41:b7:c1:
58:64:07:70
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE
QzlEMTRDQTIwHhcNMjUwNTAyMjEzMjQ1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODE1MzlmYy0zNWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0UfXlcue8Qv2cKZXgvLGzDeWfdUHaJTTfgnU2+3F6oCbqEJRZS2nLGnY/JCc
1+FeeH833UnNIWRCw7AATlPRacOqx34kgLUCIRqLZ3xy8uVnn4bgUbPpkCiwe16r
6kJl4KOcROZcFGQH/uOZHyfFu9gYCJ9xO5sU3ne09kaF/MQoJa07ZKHFx8nZHghE
NQOSgBjZhSDYDAiHhwJ5dipF2xs4Q3zHEkYs/AV7NFSz0k5qlO0fPkhCoz1Z3BP9
XwSQftybFeP2CQ+8qIxbk7xofJeAqTTSqzD3ulJge9BBqxC/iFNQepCMV7UZhUc+
bh5rb7jpW82BAT0VWwx5XewRqwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP+H8b9C
Fsff4wMr2gAw/u/WFnpKMB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw
MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjM4M0IvRkJCQTlFOUNFMDIzMTFFQTk5MjJERTQyQzRGOUFFMDIvNEU0QUY0QTJD
MkIxMTFFQkFCRkZBMjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABn98cDBADLWZYwDQYJKoZIhvcNAQELBQADggEBAKh7+fcs
eWsvmcKpN6a5R4rHx8dP4leCIOWj63zlA0Nyq9TZoNu82OOaf/zTHQm0NEZlW2sF
Ofo2P1p62hP+RWQS6pJRK6A0KwHVGph4LxfPmJP6UWpzhHit6QrgnNziyZxaABvW
BV/pLO27Gpu3k3NUpO5rd7xviGe3MQXuTk6LpY4dl54Yr3MRUszdHgReDIJ5Y8xp
HlrvOIyQX5NxEncKev621BmbjG+55YCJg7RWYTYImtMiTurWyLHH5qVC9okR8mAC
nZKmVOyt/gYhyxi/h2g1+HEqigiN34R/E/JY5hECdnfQSL4yW6NhNkEbyepxU2cU
bItflEG3wVhkB3A=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:48:29 2025 by rpki-client