
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/B50ECD32A57E11EEB4533738C4F9AE02.roa
File: B50ECD32A57E11EEB4533738C4F9AE02.roa (raw, json)
Hash identifier: 1HSPz5fptSUhMZGOqCo4GWHbK/jQcYLJDQgsd3l//0k=
Subject key identifier: CB:6B:AA:1C:2F:FB:D9:76:8A:A6:BA:68:7F:0D:42:D7:D2:F6:DD:D1
Certificate issuer: /CN=A917EB96/serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
Certificate serial: 0185
Authority key identifier: C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/B50ECD32A57E11EEB4533738C4F9AE02.roa
Signing time: Wed 23 Jul 2025 04:09:53 +0000
ROA not before: Wed 23 Jul 2025 04:09:53 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 23688
IP address blocks: 103.230.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl
rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 05:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB96, serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
Validity
Not Before: Jul 23 04:09:53 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68806091-3779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:07:b7:26:0d:33:61:00:b4:ac:5d:a5:7b:2b:
ad:a2:c6:d1:e3:6a:8d:da:34:87:b6:da:93:69:fd:
97:58:b2:c7:0a:01:34:fc:9e:ba:7a:73:72:d1:42:
7d:9d:1a:27:14:a2:87:6b:e1:62:be:1a:cf:2a:38:
95:c5:d5:a6:ef:ea:84:2b:cd:a6:f0:3e:bf:4b:81:
d8:3d:ec:c4:db:bb:11:b9:e3:dd:b6:f1:5e:dd:7f:
20:00:e5:95:2e:a7:5b:fa:af:ec:77:bb:f7:be:ae:
16:b6:cc:45:2c:9b:1c:c4:03:7b:92:08:17:be:77:
31:dc:17:56:db:4c:7a:59:56:51:e0:55:9e:1e:f5:
2c:d1:e8:ee:03:68:38:f6:32:8d:c6:61:5a:a1:4c:
cc:5b:e0:bc:43:3a:a4:58:6c:6c:58:bd:79:a5:5e:
ce:0e:23:09:77:99:c6:22:14:b1:4b:d7:d2:98:a8:
10:82:74:63:5a:a8:68:3d:92:a7:fb:ce:07:a1:41:
78:92:19:51:14:7a:c6:70:ab:4d:12:06:93:04:a1:
9c:26:98:4d:81:f7:13:d3:0b:81:29:bc:a5:be:c7:
48:07:1e:a2:be:c9:e1:da:a2:a7:72:4b:22:43:2a:
79:a9:b5:4c:b2:2b:7c:da:f5:21:5d:6b:07:86:c1:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6B:AA:1C:2F:FB:D9:76:8A:A6:BA:68:7F:0D:42:D7:D2:F6:DD:D1
X509v3 Authority Key Identifier:
keyid:C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/B50ECD32A57E11EEB4533738C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.40.0/23
Signature Algorithm: sha256WithRSAEncryption
93:f4:0f:f2:c4:45:78:3a:01:75:d9:da:05:ea:74:c4:1b:0d:
b7:30:bf:38:c7:79:af:ab:f2:e9:72:eb:58:06:22:53:4d:f3:
7d:da:6e:42:99:62:18:66:b7:89:dd:7c:30:e6:f4:d9:b7:60:
2a:e3:1c:70:c9:54:61:19:8e:f3:67:6c:92:f7:fd:db:bd:c5:
0d:a0:b4:bc:3c:a4:11:82:bd:b7:8c:84:e8:c4:c5:b9:6f:a8:
59:87:c3:54:2a:a7:04:22:ef:71:4e:db:23:d1:e0:d1:12:c4:
9f:8f:5e:99:97:db:fa:6e:52:71:5b:1a:47:52:a2:f6:1b:c1:
97:71:a6:7f:48:2a:89:4c:15:d7:bd:bd:ef:d7:8c:7a:3e:d6:
dd:61:86:21:43:12:ef:69:9a:04:91:14:cf:5c:c3:ff:8a:bb:
4d:10:f9:5f:3a:5b:f2:bf:4e:21:19:33:79:81:24:ae:f6:73:
c9:a1:bb:b5:59:78:78:79:c7:b5:a5:fb:a0:d4:a5:32:6b:90:
f9:4e:3e:9e:1a:c5:18:f0:10:56:62:ad:c6:26:94:62:d7:83:
a8:0c:c7:f5:b6:47:b4:c1:85:9a:d8:2f:de:f7:bd:85:e0:02:
2e:a6:c0:36:30:26:5c:94:8a:c0:50:c6:81:8e:20:47:be:f2:
f0:2f:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:27:33 2025 by rpki-client