
$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/6901B0861DF211ED95A51A3EC4F9AE02.roa
File: 6901B0861DF211ED95A51A3EC4F9AE02.roa (raw, json)
Hash identifier: 0XIDOV8UwVvmlax4boMgDyUwaF1U/8jmEUNtClSqDZc=
Subject key identifier: 54:63:08:90:B9:B1:6D:DC:02:EF:80:6E:AA:61:D5:E2:20:15:4E:A6
Certificate issuer: /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
Certificate serial: 0277
Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/6901B0861DF211ED95A51A3EC4F9AE02.roa
Signing time: Mon 11 Aug 2025 02:08:37 +0000
ROA not before: Mon 11 Aug 2025 02:08:37 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 150164
IP address blocks: 103.142.0.0/23 maxlen: 24
2001:df1:2440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl
rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
Validity
Not Before: Aug 11 02:08:37 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=689950a4-cc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:e4:c6:f9:cb:33:25:7f:92:c5:d7:33:7d:
06:f2:a2:9a:7c:f9:f4:83:5d:97:47:50:3b:26:fd:
d7:17:c6:c3:f8:b2:4e:9f:14:6a:64:a7:7e:b8:95:
07:0a:35:55:ca:1c:a3:ad:45:50:1e:bb:57:9a:90:
af:5f:ee:ec:b1:73:51:39:9b:f9:7c:10:e3:90:9e:
15:5f:0e:aa:59:ea:84:0b:cc:0e:c2:7a:c0:b3:cf:
5c:d4:6c:ee:7a:08:56:51:b2:70:b6:4e:b1:e3:ef:
34:c6:e9:a4:87:65:01:80:c8:06:d0:1c:cf:af:48:
5a:57:2e:f2:86:95:c7:0f:19:c2:98:da:4a:57:16:
de:a6:4f:3e:a8:15:f6:11:2c:05:f1:fd:95:9d:62:
4d:5d:a0:33:cf:83:f0:6a:ac:5c:61:66:42:1e:cd:
65:09:31:67:f6:64:e8:ef:74:13:1a:25:af:36:f4:
b6:d1:cd:4e:f4:ae:21:0d:f2:90:dc:f5:ed:99:cc:
9c:f3:c7:ea:94:94:8f:7a:a6:83:cd:95:a4:07:da:
34:2f:e1:c1:bc:87:2d:2a:75:5c:8e:ec:bf:8e:a9:
a7:e4:52:74:f9:bf:e6:53:c2:8b:b9:a1:2c:74:71:
d5:a7:1e:68:75:2a:f7:26:3b:e6:18:05:82:c9:66:
35:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:63:08:90:B9:B1:6D:DC:02:EF:80:6E:AA:61:D5:E2:20:15:4E:A6
X509v3 Authority Key Identifier:
keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/6901B0861DF211ED95A51A3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.0.0/23
IPv6:
2001:df1:2440::/48
Signature Algorithm: sha256WithRSAEncryption
b3:92:8a:96:b4:2c:3a:77:7f:da:f5:3b:14:e0:53:5c:5d:c5:
5c:80:a7:87:e4:c9:ac:d7:e6:8b:ef:22:47:1a:f3:37:90:e7:
c6:8a:41:b6:a8:c9:e6:c7:3f:52:41:fb:8d:b1:bb:68:94:33:
8f:7a:94:65:4c:97:42:b4:2e:1b:5d:ac:31:f8:de:e8:86:a2:
54:57:85:bd:4f:e8:e4:63:66:fc:25:9c:d7:ed:de:88:f9:6e:
e3:8c:87:f8:7e:97:3e:77:ec:b2:22:18:79:0c:e7:90:5d:68:
20:be:15:fe:bf:71:86:9c:ab:1c:36:92:cf:4c:f3:4c:60:87:
d1:9d:28:04:98:3d:3d:0e:eb:e5:a2:ef:ae:50:ab:5c:cb:96:
5c:7a:f3:29:5e:87:f4:b0:63:a3:b8:3c:4a:d8:c8:27:1e:eb:
68:97:61:ea:e1:d5:76:75:96:55:92:ed:73:bd:33:36:4e:4b:
aa:84:bd:2c:ff:fe:df:78:cd:cc:14:bd:1b:46:2d:38:4e:10:
1f:eb:89:98:24:33:13:39:d2:74:f2:a8:8c:6b:f4:c4:ec:e0:
3c:52:ba:01:46:52:55:52:5a:b7:2b:c1:31:fc:3d:9a:13:c1:
7f:3d:9c:db:6a:8a:20:74:9a:5b:8e:19:ab:3b:dd:70:d6:ca:
6b:3d:08:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:50:09 2025 by rpki-client