
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/1FCC64AC719511F090F7F83BC4F9AE02.roa
File: 1FCC64AC719511F090F7F83BC4F9AE02.roa (raw, json)
Hash identifier: +qiRWdfwGXcRGa6NIVUYddvy0ip5kmJS9wXziS3iiJs=
Subject key identifier: D0:63:19:02:45:FF:7D:47:CC:3B:38:8A:FB:D7:9A:37:0C:B7:63:3F
Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial: 0B93
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/1FCC64AC719511F090F7F83BC4F9AE02.roa
Signing time: Sun 02 Nov 2025 19:08:54 +0000
ROA not before: Sun 02 Nov 2025 19:08:54 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 17408
IP address blocks: 103.14.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2963 (0xb93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Validity
Not Before: Nov 2 19:08:54 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6907ac46-30bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:2e:9c:b9:84:a6:d9:43:91:f6:1c:89:1c:
9f:17:0c:a9:da:b9:4c:5d:e6:0c:18:6a:c3:74:72:
70:9e:51:ce:61:c0:f0:d2:04:fb:ba:eb:5d:b6:47:
33:ba:62:6f:26:9a:c5:a3:eb:e9:fd:49:92:66:ee:
7e:9f:77:d5:79:bd:b9:ee:2f:a4:4b:36:47:ee:d3:
0b:16:ac:2e:6b:51:af:85:50:8d:84:e2:6f:14:08:
bb:5f:16:b8:e9:07:52:f2:91:fb:c6:f9:8a:c7:01:
2b:51:99:e4:53:95:d9:73:c9:d7:eb:5c:d0:5f:89:
45:51:d7:4f:40:37:2b:c1:57:1a:09:74:1d:18:2f:
2a:7a:fc:a0:9a:b5:39:35:22:24:20:e7:8d:cf:37:
8c:06:77:40:60:0f:1a:46:db:0f:a1:0d:2f:c9:98:
07:80:54:00:1a:e0:6b:90:ad:58:ed:a1:64:0f:57:
87:84:c5:cd:5a:e6:2e:e0:4a:1e:e4:60:35:ff:e2:
c6:d0:0a:99:99:fd:df:8d:71:00:04:82:ac:8b:08:
3c:41:69:c5:de:dd:25:aa:a1:a4:fc:aa:95:0c:ac:
e6:8d:27:5d:f6:b9:61:03:29:6c:4b:56:be:e9:fd:
e9:c4:6b:cc:19:8f:4b:ca:70:ab:dc:0b:0c:cf:51:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:63:19:02:45:FF:7D:47:CC:3B:38:8A:FB:D7:9A:37:0C:B7:63:3F
X509v3 Authority Key Identifier:
keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/1FCC64AC719511F090F7F83BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.176.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:0e:06:8a:9b:10:0c:7c:ee:56:35:fb:9c:2e:d3:b5:46:ac:
d3:3f:6e:f0:56:c8:b4:38:68:9f:30:43:d0:37:09:92:78:0e:
ed:0f:bb:8e:30:72:58:0a:ae:d1:c1:be:27:e7:12:59:7f:de:
6d:43:68:b3:c3:da:a1:12:46:ac:2f:f0:5d:83:84:51:ac:09:
55:75:18:b7:a5:39:5c:7f:6f:7f:f2:f1:fe:e2:f6:e9:c0:96:
fd:7f:61:83:49:38:6f:88:8f:37:a3:91:9a:59:64:37:8c:80:
3d:21:be:7e:84:3e:6c:82:c9:9c:05:71:cb:8e:6e:b4:e8:42:
c6:61:db:ab:09:ea:7c:05:c1:03:27:27:2f:aa:a1:26:cd:24:
f3:22:8f:21:bc:86:f9:12:e6:be:15:07:fb:8f:50:23:b6:cd:
68:db:1d:27:96:06:e8:b9:6d:46:14:aa:da:f4:b1:87:8d:f5:
a3:b2:97:80:63:bf:10:e9:61:a5:1b:07:da:b3:c1:99:7d:fa:
7e:f5:b0:1c:50:b2:d8:6b:15:74:6d:0b:10:ce:68:bf:a9:ce:
fd:73:ba:44:2e:70:62:b5:7f:76:f1:48:8c:e8:b9:4a:77:85:
d8:89:84:c6:4b:e0:18:1a:49:07:e6:dd:9d:ee:dd:56:aa:47:
a3:41:96:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:16:58 2025 by rpki-client