
$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1069D50EB54B11F092E79246C4F9AE02.roa
File: 1069D50EB54B11F092E79246C4F9AE02.roa (raw, json)
Hash identifier: oPyKzL4O0xlhZZ92P0pzMtzovY+UYDC46Jkmm8P2idY=
Subject key identifier: 5A:E0:DF:86:2B:78:C3:41:85:E4:73:02:B0:8C:2F:4E:35:33:E4:E9
Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial: 081C
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1069D50EB54B11F092E79246C4F9AE02.roa
Signing time: Thu 30 Oct 2025 04:44:05 +0000
ROA not before: Thu 30 Oct 2025 04:44:05 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151622
IP address blocks: 103.8.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Validity
Not Before: Oct 30 04:44:05 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6902ed15-c74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:32:cb:fe:a4:3c:1b:f0:11:5f:46:99:91:
71:55:71:be:5a:4e:6c:cf:24:b3:6f:5d:f8:11:77:
00:b3:9a:78:89:dc:a4:68:fe:82:59:b9:84:50:25:
dd:54:7f:03:e9:12:16:23:12:a5:24:c0:b3:63:87:
86:cd:9f:18:00:cb:63:f7:e0:e4:49:e5:18:78:84:
ff:33:a6:c3:ed:f5:7d:79:01:30:29:a7:ad:dd:59:
89:26:31:28:5a:6b:93:85:c6:a9:c6:90:20:e3:be:
41:15:75:e0:fe:cb:8d:21:58:97:e2:76:ca:6f:6c:
91:17:fb:7d:23:a9:fa:e6:03:67:51:ca:43:80:15:
fd:67:70:96:49:57:fd:65:77:85:10:b0:30:95:d0:
a1:a0:81:1b:0c:c5:a9:af:c6:b8:9c:05:3a:57:f1:
c2:9a:3b:d3:73:0a:7e:41:62:dd:e0:23:57:92:f9:
c2:5a:1e:bb:94:00:1c:d1:60:a1:8f:8b:b5:87:42:
e8:05:87:4e:9c:81:63:e0:73:38:cb:8f:d6:7e:9e:
53:9c:b5:99:33:f0:77:1b:e8:0b:02:c5:a6:11:13:
2d:c5:a7:85:52:0e:f8:da:53:15:39:ea:a9:03:83:
4b:9c:a1:8a:d7:a3:b1:91:ce:b4:e7:81:f5:5b:54:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:DF:86:2B:78:C3:41:85:E4:73:02:B0:8C:2F:4E:35:33:E4:E9
X509v3 Authority Key Identifier:
keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1069D50EB54B11F092E79246C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.8.23.0/24
Signature Algorithm: sha256WithRSAEncryption
90:40:c3:6a:32:ab:27:c8:d2:f5:15:c0:3f:ca:a9:14:d3:29:
57:ef:d4:6f:9c:b2:5e:4e:a5:c4:cf:f6:7f:f5:ef:98:d7:e7:
87:99:7b:e9:e6:5b:5f:07:4a:79:80:71:49:90:17:f3:32:60:
6d:21:36:db:4a:45:c6:e3:a1:90:7c:94:e8:09:bb:c9:d4:17:
bf:05:37:84:a9:58:29:74:19:90:04:f6:a2:d3:16:ac:9f:49:
e4:b4:0a:9b:41:79:bc:1a:e8:d8:5f:95:c0:d2:5f:5e:3c:49:
76:d8:e0:17:f5:57:83:18:a7:5a:35:0d:b9:23:de:aa:80:03:
c9:f0:35:68:3b:1d:09:db:e4:0e:a8:76:f4:78:5d:2b:85:29:
fa:04:e9:82:9c:c9:7b:f8:c6:05:b7:f6:bd:d8:2e:3e:ce:d6:
1d:a2:c5:0b:eb:2e:11:03:0e:cc:02:2c:25:d6:0b:c8:6c:b1:
2a:47:bc:c4:b6:e6:8c:3b:0d:f5:59:0c:34:94:55:e1:c0:80:
2a:2b:d5:82:10:7e:76:91:e4:5c:04:65:b3:8a:a1:6c:6d:e8:
5f:78:3f:dd:d9:78:70:f9:11:d5:e5:00:3f:cf:5c:4a:b6:f5:
6a:af:be:1a:5f:a1:99:f9:8e:7d:24:da:28:b9:ae:c4:70:29:
50:25:ba:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:53:54 2025 by rpki-client