
$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/EF8CB49CD78F11EC91680D49C4F9AE02.roa
File: EF8CB49CD78F11EC91680D49C4F9AE02.roa (raw, json)
Hash identifier: m1T9GaVF/kOA3y3lDclBiCBdGMqPbCm1SzZbjGctr8o=
Subject key identifier: 3D:29:E1:92:F3:5D:44:E3:72:51:12:1F:2F:01:6C:7C:F7:9A:64:4B
Certificate issuer: /CN=A91772FA/serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522
Certificate serial: 0316
Authority key identifier: 3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/EF8CB49CD78F11EC91680D49C4F9AE02.roa
Signing time: Wed 07 May 2025 01:07:56 +0000
ROA not before: Wed 07 May 2025 01:07:56 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.186.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl
rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:51:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790 (0x316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91772FA, serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522
Validity
Not Before: May 7 01:07:56 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=681ab26b-7b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:13:53:73:89:a1:b3:1a:53:b0:c5:22:9a:
3f:5e:82:ae:b2:c5:2d:28:3b:4a:85:86:ec:27:30:
8f:bc:43:52:53:95:3a:0a:34:d5:ab:8f:7e:06:b5:
91:a5:ee:41:01:4a:63:27:9a:74:26:a3:56:15:67:
b5:a8:0a:18:51:5a:20:b8:13:d6:e6:44:30:78:c5:
c1:9f:ed:2c:fb:12:d0:94:1f:29:52:7b:54:04:1a:
d6:80:cd:40:9d:ae:86:69:0e:fb:00:fe:0a:d6:99:
76:56:e8:06:bf:10:2f:13:f4:d9:1e:98:48:6e:93:
25:32:77:a8:ee:ef:e8:7c:4c:f9:be:04:01:33:43:
fa:62:17:b7:2f:48:51:71:ad:8c:5f:1b:90:38:4c:
26:44:c6:4d:27:63:24:71:4e:0d:91:bc:65:37:00:
d7:30:fc:f5:28:21:e4:10:9e:4c:1a:e3:bc:f9:27:
29:32:b3:41:0b:cb:b7:ea:7e:93:0d:6f:a5:3e:5f:
b6:f7:73:56:3c:6b:87:5f:b5:4c:a3:b2:0e:35:51:
ea:0c:5c:62:03:18:05:c0:58:92:7f:45:67:58:93:
83:07:80:01:fb:09:43:df:09:9c:df:1d:9a:a0:73:
bf:bc:86:be:f6:b6:b7:d1:64:e0:fa:a0:52:2b:2d:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:29:E1:92:F3:5D:44:E3:72:51:12:1F:2F:01:6C:7C:F7:9A:64:4B
X509v3 Authority Key Identifier:
keyid:3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/EF8CB49CD78F11EC91680D49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.205.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b1:56:04:26:1c:97:6e:f4:4a:e7:37:f6:3a:71:b5:ac:24:
2a:bf:16:b7:a8:79:67:bb:c0:1d:bc:76:6d:ae:7e:53:36:2d:
1a:d3:96:d2:28:96:7f:b0:33:fd:75:a5:f8:74:89:12:2a:ad:
51:f5:28:28:b5:0e:23:ff:84:4e:5b:76:70:41:3b:24:96:03:
cb:96:70:19:c0:a6:16:60:50:a8:7c:96:8a:9c:a7:fb:12:a1:
b7:33:5f:61:d4:dd:f3:3d:67:95:ca:35:3d:0f:09:9d:0d:8b:
1d:f0:f1:2d:cb:78:15:11:36:d0:4a:26:90:13:69:4f:a0:a8:
27:89:98:92:61:10:f6:99:5b:82:ea:c6:01:92:b7:2c:9a:84:
c0:4e:f1:14:61:68:90:86:52:0c:98:38:62:53:71:47:d2:1a:
72:4b:02:d8:da:fe:6d:71:b1:18:a1:67:27:49:49:8e:4f:5e:
1f:9c:73:cc:d4:e1:13:9f:45:f1:98:8a:3c:69:02:61:58:a4:
ef:7b:5e:42:fc:a1:72:2e:2d:77:e4:fc:94:14:8e:b8:cd:52:
ee:8c:67:a8:7f:4f:71:12:e0:37:b4:51:1f:38:80:87:f7:49:
3e:75:45:a6:68:d4:9a:cc:c5:6d:6a:77:4a:fe:12:0c:a1:6a:
64:43:a0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:18:21 2025 by rpki-client