
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/4F153D60719511F0A684963CC4F9AE02.roa
File: 4F153D60719511F0A684963CC4F9AE02.roa (raw, json)
Hash identifier: Qdk0XM/e7CFwGkgkffYJcSQIfyDDrObbUxfebzUoWFI=
Subject key identifier: 2E:5D:56:2F:53:C3:F3:5C:B5:84:8E:F9:2E:49:EB:7C:1A:85:71:48
Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial: 0B8F
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/4F153D60719511F0A684963CC4F9AE02.roa
Signing time: Sun 02 Nov 2025 19:08:51 +0000
ROA not before: Sun 02 Nov 2025 19:08:51 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 132827
IP address blocks: 103.11.6.0/24 maxlen: 24
103.11.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2959 (0xb8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Validity
Not Before: Nov 2 19:08:51 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6907ac42-f55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:51:d8:15:5c:6a:15:f7:2b:c1:97:c4:69:
ff:fd:a5:f7:7b:a3:ad:13:22:77:c8:7f:fc:23:b4:
0e:32:1b:45:ea:b8:b3:45:59:1a:3f:3a:c9:ae:d2:
c3:db:f7:7a:ee:83:1f:11:8d:72:cd:83:ff:59:cf:
36:e1:46:99:9d:b0:e0:1f:18:1f:65:72:01:b2:92:
b0:6a:17:61:d4:31:dc:b5:13:da:5b:ba:e3:8a:b4:
c1:73:57:f4:a8:b9:a1:66:42:7f:90:47:40:9d:d4:
6b:44:ee:71:18:78:55:45:5d:40:a2:f5:d7:5e:35:
53:f8:6e:5b:5f:24:7c:a7:ef:0f:ea:ee:32:8a:74:
b6:8c:c3:07:ca:90:b2:7c:3c:29:69:ac:3e:d6:0e:
ac:a8:b7:81:58:ae:bc:f6:fc:28:b4:91:33:0e:03:
61:8f:02:39:e4:02:fc:40:3d:e1:50:1c:3b:98:de:
a0:52:f8:0a:94:b2:d2:5a:ef:a5:17:9f:b7:4b:82:
ca:81:3c:e0:e6:6c:8d:42:ba:6f:b3:48:e8:72:d0:
30:0e:c4:ae:2a:08:fb:77:cc:7f:fe:97:ce:7d:ca:
77:26:75:46:9f:86:98:6a:4d:1b:29:5e:14:8b:c9:
17:65:68:82:5d:1a:c8:60:13:47:a7:3a:17:ef:78:
91:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5D:56:2F:53:C3:F3:5C:B5:84:8E:F9:2E:49:EB:7C:1A:85:71:48
X509v3 Authority Key Identifier:
keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/4F153D60719511F0A684963CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.6.0/23
Signature Algorithm: sha256WithRSAEncryption
30:4e:6a:4c:40:82:69:26:59:eb:23:1a:4e:dc:f0:57:65:62:
f2:d4:70:34:65:eb:dc:d7:da:bb:42:60:e4:2c:f7:0b:ff:fa:
21:5b:c1:d1:f7:73:35:5f:23:11:ca:bb:2d:af:15:2d:ba:41:
fb:f2:77:be:d7:2a:b1:fa:0b:bd:8e:32:57:4c:66:f3:bf:09:
c6:7c:ed:f2:b7:5b:84:31:57:49:85:89:e9:af:6b:97:e6:8b:
77:f4:f6:3c:af:14:6a:b4:26:2d:35:27:4b:ba:a3:51:89:99:
20:db:d1:bb:9d:65:44:23:17:d5:39:f9:03:7f:8d:ce:92:7a:
5f:6e:2e:ac:8e:0b:38:cb:34:9b:26:23:98:7a:ca:e9:ea:d1:
66:04:35:c3:c3:b5:68:08:c9:dd:eb:0f:42:2d:ca:a0:de:0f:
f7:bc:b8:9f:72:55:d2:b1:a1:79:d8:26:06:3f:55:8e:db:1f:
dd:e8:f1:08:f3:aa:82:ef:68:e7:17:23:22:f6:a8:f2:23:12:
65:c1:a3:68:c6:3b:1d:f7:a7:27:05:10:a3:9d:da:39:97:fe:
49:ff:b3:19:2c:1e:b4:d5:59:22:4f:c0:19:2c:4a:e7:c3:ac:
26:12:d4:da:94:47:0c:33:32:10:5d:f4:ea:86:b2:7d:55:18:
84:30:76:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:43:29 2025 by rpki-client