
$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/7717CED6419911EA9B9A146BC4F9AE02.roa
File: 7717CED6419911EA9B9A146BC4F9AE02.roa (raw, json)
Hash identifier: nX/3MrGsr2dg/wDbjfsMNISArkomLCu8vleG60nxaCo=
Subject key identifier: 4B:84:A2:9D:8B:6B:05:79:60:39:13:E7:72:20:24:7C:4D:50:23:CF
Certificate issuer: /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Certificate serial: 0B6B
Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/7717CED6419911EA9B9A146BC4F9AE02.roa
Signing time: Sun 02 Nov 2025 19:08:42 +0000
ROA not before: Sun 02 Nov 2025 19:08:42 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 132827
IP address blocks: 103.11.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2923 (0xb6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91148C8, serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Validity
Not Before: Nov 2 19:08:42 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6907ac3a-55fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:d4:3d:e9:95:0d:c7:b3:db:e3:2e:01:d1:
2d:44:ef:f2:90:0f:d9:6b:93:8a:99:56:86:92:8c:
c2:ff:a7:6d:6c:06:05:dd:37:37:fe:fc:4b:f9:39:
5b:b3:b4:87:51:63:e9:47:56:00:c0:79:74:4e:4f:
3d:df:76:dd:1c:9b:6a:a5:02:be:a5:c1:d8:b7:f7:
f7:3d:d3:c0:00:e4:58:6a:b8:bb:1b:25:cd:7c:54:
0f:c3:4d:06:54:2e:f0:93:4e:63:4b:e1:75:5f:e6:
e0:76:be:bb:f5:b4:f7:a6:a2:11:86:14:10:06:5e:
c5:a3:4f:8f:c6:83:55:a0:d3:4a:1a:55:e2:a9:0f:
5a:a6:8d:ce:c9:33:c8:bd:09:72:c2:a5:30:5d:00:
15:ed:27:8f:ab:0f:1c:6c:e7:6d:15:c1:b4:61:2d:
60:86:09:d6:38:07:dc:9d:d1:a1:8c:bd:55:ea:8e:
6a:f3:c0:94:7c:1a:83:75:7d:bc:2a:c3:2c:5e:f2:
f4:d0:6b:27:dc:6f:37:93:e5:e0:a0:35:84:59:1f:
6d:a5:25:e1:ca:cd:ba:0c:3e:bd:76:d5:1d:b6:ad:
e0:be:9b:73:9b:a1:8b:c6:37:c2:57:d0:f8:6c:63:
da:ed:2d:13:dd:3a:f8:ee:2d:94:bc:ff:b3:0e:f8:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:84:A2:9D:8B:6B:05:79:60:39:13:E7:72:20:24:7C:4D:50:23:CF
X509v3 Authority Key Identifier:
keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/7717CED6419911EA9B9A146BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:1e:1c:c1:ad:f6:1f:33:13:45:0d:34:09:56:0c:42:53:23:
f8:1c:b5:dd:36:0e:39:53:60:ec:a0:c8:33:5e:e4:5c:89:fe:
59:b1:71:85:1a:35:00:a3:f0:44:e9:a9:c8:3d:ec:fb:be:8f:
5f:74:bd:c3:f1:a2:ec:3a:ce:37:6a:05:b6:cb:1e:69:0a:a8:
bf:a7:06:f0:89:22:2b:a6:4d:5f:d1:ad:89:ff:a7:8c:37:84:
2c:d8:1b:65:7c:e4:8b:98:cd:bd:6c:ca:56:2c:b2:cb:00:10:
a2:0e:08:60:fe:f3:cf:da:8e:10:e9:b3:67:f3:ea:60:80:ca:
fd:45:03:3c:94:36:8e:3d:4b:51:fc:f1:7c:c6:c2:97:04:0c:
5f:41:98:36:00:57:56:f9:bd:75:78:81:45:a5:08:3b:b6:08:
a6:14:06:65:c9:14:21:4b:2c:a9:20:71:28:c3:a2:05:64:21:
56:60:d5:27:08:e6:47:76:28:5a:de:45:d7:54:12:16:23:bf:
79:f2:e4:6d:b5:87:72:f1:80:9e:1a:10:a8:f4:c3:ec:2a:1a:
3b:01:f0:bf:19:91:6f:e1:ff:94:ef:3e:d3:24:eb:25:0d:a1:
fd:25:68:2b:fd:3d:35:d3:fe:85:bd:bb:0d:f4:51:ff:ef:3f:
a7:1b:df:38
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ4QzgxMTAvBgNVBAUTKDU0NkY5NjNBRUE2RDZFNzZCOTExMDA1MjYzQzY4QTUx
RkI4OTI3QjcwHhcNMjUxMTAyMTkwODQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA3YWMzYS01NWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAztfUPemVDcez2+MuAdEtRO/ykA/Za5OKmVaGkozC/6dtbAYF3Tc3/vxL+Tlb
s7SHUWPpR1YAwHl0Tk8933bdHJtqpQK+pcHYt/f3PdPAAORYari7GyXNfFQPw00G
VC7wk05jS+F1X+bgdr679bT3pqIRhhQQBl7Fo0+PxoNVoNNKGlXiqQ9apo3OyTPI
vQlywqUwXQAV7SePqw8cbOdtFcG0YS1ghgnWOAfcndGhjL1V6o5q88CUfBqDdX28
KsMsXvL00Gsn3G83k+XgoDWEWR9tpSXhys26DD69dtUdtq3gvptzm6GLxjfCV9D4
bGPa7S0T3Tr47i2UvP+zDvhWkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEuEop2L
awV5YDkT53IgJHxNUCPPMB8GA1UdIwQYMBaAFFRvljrqbW52uREAUmPGilH7iSe3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDhDOC8zMzY0RDMxNjQw
Q0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJuYTVFUUJTWThhS1VmdUpK
N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZHLVdPdXB0Ym5hNUVRQlNZOGFLVWZ1Sko3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTQ4QzgvMzM2NEQzMTY0MENBMTFFQTg5OTJCODVEQzRGOUFFMDIvNzcxN0NFRDY0
MTk5MTFFQTlCOUExNDZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnC3gwDQYJKoZIhvcNAQELBQADggEBAE8eHMGt9h8zE0UN
NAlWDEJTI/gctd02DjlTYOygyDNe5FyJ/lmxcYUaNQCj8ETpqcg97Pu+j190vcPx
ouw6zjdqBbbLHmkKqL+nBvCJIiumTV/RrYn/p4w3hCzYG2V85IuYzb1sylYssssA
EKIOCGD+88/ajhDps2fz6mCAyv1FAzyUNo49S1H88XzGwpcEDF9BmDYAV1b5vXV4
gUWlCDu2CKYUBmXJFCFLLKkgcSjDogVkIVZg1ScI5kd2KFreRddUEhYjv3ny5G21
h3LxgJ4aEKj0w+wqGjsB8L8ZkW/h/5TvPtMk6yUNof0laCv9PTXT/oW9uw30Uf/v
P6cb3zg=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:37:13 2025 by rpki-client