
$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/8977329C6BFA11F0A5B94819C4F9AE02.roa
File: 8977329C6BFA11F0A5B94819C4F9AE02.roa (raw, json)
Hash identifier: sVLnWaTceqxJcUl04loII1R7iIc0w84MM4tNrptQICk=
Subject key identifier: DC:54:ED:1D:A4:CD:D5:F6:A0:70:F2:D7:C9:B6:6C:0E:BB:25:94:7C
Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
Certificate serial: 07EE
Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/8977329C6BFA11F0A5B94819C4F9AE02.roa
Signing time: Tue 30 Sep 2025 21:53:54 +0000
ROA not before: Tue 30 Sep 2025 21:53:54 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 1221
IP address blocks: 103.58.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl
rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 22:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030 (0x7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
Validity
Not Before: Sep 30 21:53:54 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68dc5172-9c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4e:33:61:65:89:25:2d:bb:5c:ec:39:b3:8c:
cb:c9:04:54:0f:d3:28:67:80:88:a4:b2:e4:5c:c9:
07:94:b0:2f:c2:00:e7:37:33:11:15:f8:b0:3e:a9:
c1:91:87:f0:22:88:ad:74:21:c8:6a:f0:95:cf:a1:
02:46:40:da:d0:24:0e:da:59:69:90:01:00:af:9a:
10:53:31:c1:6f:ea:c5:c0:39:32:04:c7:2f:e0:9f:
5a:67:15:99:0d:46:9b:92:07:ce:32:2b:43:77:3b:
fb:6b:2c:67:10:aa:f4:13:d7:f2:e7:9a:02:dd:6f:
3f:ff:e8:17:99:27:a6:1c:32:fe:01:03:b9:bc:5e:
e7:0e:fc:39:fd:d3:1f:51:78:22:e1:8d:e3:9d:24:
93:4e:13:2b:33:8a:35:8f:5d:f5:6b:9d:27:9a:28:
ca:82:16:db:39:c8:9f:f7:db:f3:1f:6b:89:0a:0d:
1e:d3:a8:40:67:20:39:3c:62:ad:f3:d6:75:34:c2:
e6:d5:40:b0:da:b3:67:8b:6e:83:91:79:c6:f2:62:
e5:b4:0d:16:0e:ad:64:a5:45:ae:26:2d:47:67:8f:
9a:6a:dc:8a:7c:13:31:97:03:4e:7c:74:f1:ab:d2:
c1:1f:14:1c:8d:f7:7a:71:f4:bd:ac:4a:a1:41:10:
84:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:54:ED:1D:A4:CD:D5:F6:A0:70:F2:D7:C9:B6:6C:0E:BB:25:94:7C
X509v3 Authority Key Identifier:
keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/8977329C6BFA11F0A5B94819C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.58.212.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b8:ed:34:24:ec:0a:b0:c9:0c:a2:bd:bc:ce:7b:58:fc:2d:
8e:8d:2c:b7:a9:7b:b8:c2:49:c1:88:b8:85:42:fe:03:54:5a:
ad:a7:ae:3d:3a:dd:ef:2d:bf:7b:fb:16:92:d8:0b:2c:71:2c:
f3:3a:1e:81:61:20:b5:db:e7:a4:1c:19:e4:ef:05:59:98:09:
a4:46:d9:9d:c7:95:c6:71:83:2d:04:85:84:2d:c1:f5:0c:00:
0a:76:74:05:91:db:71:e7:04:38:54:a3:82:01:e0:ca:1e:3e:
fd:fd:de:39:3c:0d:6f:26:fd:36:54:75:e5:f8:94:0d:e6:e4:
fe:16:01:71:6a:26:7b:cd:d9:9f:48:40:14:b8:57:47:f2:6f:
89:24:00:b8:55:fd:db:75:68:e8:4f:c3:5c:31:c7:f2:dd:7c:
5e:f2:b0:de:7f:b1:33:fc:3f:86:4a:51:0f:d9:56:7d:d1:ca:
76:2e:99:9d:4b:cc:e2:cc:e9:bc:f7:0e:49:fa:15:a3:34:51:
cd:fb:8e:35:81:7e:cd:56:15:ba:a7:ee:bc:32:df:a3:42:8d:
d8:eb:9e:ad:2f:2b:8d:b2:59:11:56:54:e3:24:a6:31:b4:64:
fc:28:15:20:35:aa:00:d9:a3:2d:6d:e6:18:1c:ac:8e:cf:4a:
f4:0f:e3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:13:29 2025 by rpki-client