
$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/19E46D60D0F711EC8673072FC4F9AE02.roa
File: 19E46D60D0F711EC8673072FC4F9AE02.roa (raw, json)
Hash identifier: eS0SkthbbyWxVM1PH+Y2UO1xSi4Vr2C2N13i593TCX4=
Subject key identifier: 20:17:9A:42:72:BD:FE:E5:3D:0E:25:70:54:B3:9C:F4:96:71:19:0D
Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Certificate serial: 0363
Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/19E46D60D0F711EC8673072FC4F9AE02.roa
Signing time: Sun 31 Aug 2025 02:18:37 +0000
ROA not before: Sun 31 Aug 2025 02:18:37 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 131253
IP address blocks: 103.244.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867 (0x363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Validity
Not Before: Aug 31 02:18:37 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68b3b0fd-14dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:46:46:a1:7a:94:86:e0:37:c5:4e:bf:4e:
0d:a2:36:ad:b5:3d:dc:f2:8f:c6:76:15:7b:02:b7:
3a:44:2e:28:3b:99:96:d8:24:d6:ec:81:98:d3:31:
c6:5a:97:ea:c1:8c:ef:ff:d8:33:0b:bf:72:32:13:
51:ce:34:fa:69:e4:00:12:ba:8d:d0:71:96:b6:50:
a2:d5:ce:78:03:de:de:07:b0:cd:eb:2a:a6:c5:d2:
23:74:d7:50:c4:61:c1:e9:8a:ef:4e:1b:94:76:9c:
5a:5a:4c:62:a4:4b:6f:bb:c9:d8:19:6f:53:39:02:
15:47:25:84:fc:cd:c7:58:ea:b3:fa:5a:8f:21:2f:
33:34:c8:c8:0e:41:77:4b:db:6b:66:88:c5:fe:d4:
36:b9:c6:78:8b:77:b4:33:2b:59:96:de:b0:02:91:
81:a5:b9:d7:ab:32:67:60:17:72:1b:57:0b:c9:0d:
69:ae:ea:64:3a:5c:bd:09:8b:72:9b:42:8d:93:07:
a9:3a:6c:9a:d8:1d:4b:6d:0c:7b:98:7b:d0:f5:6b:
19:93:57:bd:be:75:28:66:52:00:50:50:8b:93:49:
60:c5:85:76:8d:d1:13:5d:b7:45:70:6b:33:8a:f8:
7f:48:12:f7:c2:6e:d5:c6:07:7c:a7:64:21:91:6f:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:17:9A:42:72:BD:FE:E5:3D:0E:25:70:54:B3:9C:F4:96:71:19:0D
X509v3 Authority Key Identifier:
keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/19E46D60D0F711EC8673072FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.193.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:f6:6a:50:e1:74:89:ab:a9:f0:40:22:be:98:51:39:b7:87:
b9:23:ce:8b:ce:8f:a0:de:ef:d5:73:1e:7c:20:18:56:78:49:
97:69:fb:ea:af:88:05:84:62:a4:5a:8f:60:52:42:6b:7d:d0:
5c:0e:6d:77:66:81:19:db:2b:b2:51:c2:65:40:c2:02:8f:44:
ca:22:15:4d:01:63:eb:af:ce:26:6c:fc:61:87:f0:97:84:02:
37:b3:fa:21:cc:86:c8:a9:30:75:a1:5f:76:94:b1:e1:dc:31:
8b:89:ce:2b:67:67:eb:0a:0d:ef:2c:34:7e:50:02:06:20:5a:
6c:f6:fd:a8:ca:75:5a:d4:60:8a:a2:f1:3b:a7:87:8e:bd:36:
f4:df:50:28:6a:7f:a9:03:9c:47:29:c7:6d:4a:a5:02:db:96:
97:33:6b:6f:8f:bb:89:69:97:28:56:10:8b:5c:53:ed:d1:00:
75:28:e4:79:35:0e:75:42:19:6a:d5:bf:65:85:b6:32:53:c3:
35:9c:03:f1:7b:38:d0:64:12:af:0c:cc:c3:1b:99:c3:23:d8:
f8:d8:7d:62:5e:2a:e9:97:56:74:f3:65:9f:d2:24:89:c0:a7:
4a:c1:89:01:39:cc:b3:ad:d9:96:10:48:b7:0b:90:85:fe:2f:
14:a1:64:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:33 2025 by rpki-client