
$ rpki-client -vvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/C303879E415111EDBC3A1D19C4F9AE02.roa
File: C303879E415111EDBC3A1D19C4F9AE02.roa (raw, json)
Hash identifier: xW+yKhl4DzZnOJoS6Xn0l4WHvXiDoALnGTFCf25+bew=
Subject key identifier: C6:80:D2:DD:2B:88:6B:95:50:5B:FA:BE:0E:7C:62:6B:2B:04:E4:0D
Certificate issuer: /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Certificate serial: 02B2
Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/C303879E415111EDBC3A1D19C4F9AE02.roa
Signing time: Tue 23 Sep 2025 02:20:29 +0000
ROA not before: Tue 23 Sep 2025 02:20:29 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 0
IP address blocks: 103.55.161.0/24 maxlen: 24
2001:dec:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690 (0x2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Validity
Not Before: Sep 23 02:20:29 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68d203ed-5393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:67:4c:1e:b4:87:d1:be:7a:2b:a9:ef:90:
07:10:00:b9:01:35:98:e5:76:02:a1:77:51:96:b1:
af:e2:dd:dc:1b:12:8c:ea:b3:5a:d6:ed:0a:90:ea:
5b:a4:2c:85:53:58:03:fb:e9:c2:bd:c8:4e:df:db:
0a:e4:e5:5f:90:af:ed:ea:0d:ba:6f:b1:25:46:65:
74:e9:69:ea:dd:69:c2:8d:bc:16:40:1c:f2:79:e4:
a3:3a:41:70:89:a9:35:50:93:75:43:e9:df:5d:7c:
7a:d6:86:f0:c9:f7:a7:dc:45:b6:7d:4f:17:50:9c:
01:79:76:36:b0:f9:16:4c:02:64:5d:b5:9e:f1:03:
bd:de:f8:42:8f:64:1b:e3:60:1a:6f:9f:fe:8a:67:
41:eb:31:25:11:f4:4d:37:b3:13:e4:06:66:7a:2f:
be:45:4b:c4:33:3e:3a:4b:6d:33:f1:c5:58:4d:45:
c4:cb:cc:bf:96:89:8b:5c:c7:5f:66:72:5a:90:e6:
7d:6e:43:20:d7:1d:00:23:d1:7c:22:fe:1e:0d:a9:
2f:13:c9:97:bf:f3:34:72:18:f5:5e:1f:42:72:51:
11:2f:31:de:68:02:2a:82:7e:20:64:ea:48:17:82:
5e:31:d6:d3:33:8b:dc:ed:3c:a1:61:83:68:02:93:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:80:D2:DD:2B:88:6B:95:50:5B:FA:BE:0E:7C:62:6B:2B:04:E4:0D
X509v3 Authority Key Identifier:
keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/C303879E415111EDBC3A1D19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.55.161.0/24
IPv6:
2001:dec:c000::/48
Signature Algorithm: sha256WithRSAEncryption
8b:88:7b:e4:9b:a0:c3:38:32:38:de:f3:ea:15:c4:b8:f5:e5:
8f:a1:e1:bb:ad:05:e1:a7:a4:86:ca:84:05:27:0c:7c:59:e7:
e2:8b:37:cb:46:68:02:84:18:8e:2b:13:ef:ed:95:2a:e7:07:
9f:0e:eb:4f:cb:5d:c7:56:da:4c:be:98:f5:27:35:cc:8f:79:
8f:27:10:36:d0:11:64:33:c9:18:d3:d6:5c:b3:a5:24:be:2c:
b2:15:0d:5c:58:fb:bb:7e:d5:5e:ba:a0:5c:cd:3b:9d:e9:e1:
f9:e9:36:d6:40:37:2b:64:ec:26:6f:a9:d3:79:88:4b:d9:34:
d4:80:e6:35:42:86:28:8f:b7:46:ee:60:09:34:a5:ea:e1:bb:
60:7b:16:8f:2e:78:cd:5c:79:52:c2:73:b6:6b:47:e8:43:02:
3f:8e:5b:e2:73:53:92:36:7b:90:5b:f6:0a:0c:52:79:12:f1:
f0:23:0e:ff:e1:39:6e:0a:db:61:d5:ae:54:7f:25:71:17:56:
69:ce:82:eb:8a:0a:c7:81:84:6b:5e:b7:d0:a7:1a:11:28:45:
4d:7b:57:93:ed:68:5c:f5:f7:df:e2:42:0a:27:c0:36:cb:82:
22:5e:50:fa:86:6e:71:24:30:06:cc:74:27:ff:07:e0:db:80:
a1:41:e4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:16:07 2025 by rpki-client