
$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/69DD27F6A66111F0BF55D666C4F9AE02.roa
File: 69DD27F6A66111F0BF55D666C4F9AE02.roa (raw, json)
Hash identifier: GX+AW8ueL4QUC5f9XTmLIBQG0hxveckbMLPTPWw+Kk8=
Subject key identifier: 47:E1:F6:BA:3C:03:43:CF:E2:B8:CB:3A:F6:7D:90:FE:C2:61:15:84
Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial: 029D
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/69DD27F6A66111F0BF55D666C4F9AE02.roa
Signing time: Sat 11 Oct 2025 05:16:17 +0000
ROA not before: Sat 11 Oct 2025 05:16:17 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 139358
IP address blocks: 103.82.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Validity
Not Before: Oct 11 05:16:17 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=68e9e821-1798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:14:1a:55:35:65:fb:55:1b:c7:7d:ee:6c:fb:
e9:0a:d2:5c:49:6d:38:22:72:56:df:44:b6:18:97:
b0:9f:fa:d7:b4:d6:4b:02:2b:f5:cf:3b:04:78:1d:
14:e0:10:bd:9e:dd:0f:21:6e:59:5b:3b:15:50:fb:
d0:5f:e4:0a:fc:e7:95:9e:cb:94:92:76:84:08:b4:
c3:9a:77:ce:85:6d:bc:02:b3:79:ba:ac:c7:2e:f3:
a0:fc:14:1b:a7:81:d9:6b:79:38:fa:7d:2c:c9:2d:
7d:a7:38:47:32:35:dd:07:9c:43:09:35:a7:ff:ac:
aa:46:5c:97:b4:19:5b:ef:d9:16:a5:19:b1:b7:41:
a6:b9:39:83:6a:8b:44:67:09:ff:9b:1e:d7:56:1f:
07:1c:cd:4a:b6:d4:0b:41:79:68:9e:6a:48:54:28:
ab:3f:e1:eb:4c:96:b6:12:dd:d0:28:9e:dd:bc:fa:
37:07:1f:86:70:8e:8d:45:09:75:f0:17:7c:31:44:
ec:83:da:0e:d8:53:a5:41:26:91:df:d5:30:d6:37:
c4:da:25:d7:dc:1c:d0:29:4b:50:af:a2:fa:e6:23:
68:47:11:ad:20:44:d7:6d:14:a0:6e:11:b1:78:bb:
b4:7c:17:0a:d9:1c:1c:25:38:b6:ce:a4:76:ef:5f:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E1:F6:BA:3C:03:43:CF:E2:B8:CB:3A:F6:7D:90:FE:C2:61:15:84
X509v3 Authority Key Identifier:
keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/69DD27F6A66111F0BF55D666C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.169.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b6:6d:bb:9b:c4:e3:b2:02:3a:10:b4:61:e5:45:13:6c:f9:
e3:dd:c8:33:58:1c:1c:8f:53:f4:c8:10:79:b0:15:59:ae:73:
21:c7:ec:07:a1:c0:eb:24:11:e0:2e:b9:27:3d:be:7e:cf:f7:
0e:c0:c9:79:c1:91:19:e5:1c:65:96:13:ab:49:c5:f7:6f:b0:
78:55:d7:36:40:3c:60:19:ff:10:48:64:87:90:ac:ed:2a:7c:
0f:3c:5c:ce:39:b6:6f:bb:ae:c1:3b:df:04:07:5e:7e:6c:09:
8f:e4:14:36:98:8f:33:37:d7:ef:ee:25:1c:6a:b5:c3:9b:86:
9e:97:a7:4b:0e:f1:20:bb:cc:c3:8d:d1:c1:46:81:d6:32:fe:
2a:b6:69:07:09:c3:5d:cc:6c:44:bd:fc:c5:3e:91:dc:76:16:
65:20:2c:49:e2:af:1c:c5:36:1e:1a:85:69:ce:a8:1e:06:59:
0e:ed:17:94:90:cb:ed:95:7d:a1:b4:66:49:da:82:1c:f3:26:
9e:e6:62:55:04:52:89:7e:d8:9f:4c:6b:cb:2b:13:35:0d:d1:
a2:01:91:b1:55:d7:8c:e8:75:17:99:df:7d:e7:ea:73:f5:04:
04:b9:1b:7f:0a:79:63:30:4e:f6:76:67:a9:24:fe:7c:47:71:
13:66:b4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:00:04 2025 by rpki-client