
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/83B1E1429AAB11F0AFE54B2AC4F9AE02.roa
File: 83B1E1429AAB11F0AFE54B2AC4F9AE02.roa (raw, json)
Hash identifier: Icni8QrD3hEMnP73pFsXdDlj1WFuqvMCFG34iC1Bf2Y=
Subject key identifier: E9:2C:37:EB:70:86:62:7D:BF:0E:D0:09:80:C2:ED:42:9A:6F:77:49
Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial: 0B94
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/83B1E1429AAB11F0AFE54B2AC4F9AE02.roa
Signing time: Sun 02 Nov 2025 19:08:54 +0000
ROA not before: Sun 02 Nov 2025 19:08:54 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 202736
IP address blocks: 103.245.234.0/24 maxlen: 24
103.245.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 19:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2964 (0xb94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Validity
Not Before: Nov 2 19:08:54 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6907ac46-2331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:db:bc:03:41:c0:89:42:d3:bb:c4:23:98:
90:bd:65:c1:4e:55:dd:0a:55:ca:9e:24:a4:94:63:
71:df:af:1c:e1:18:36:03:d3:8d:35:47:f6:e0:db:
70:da:a9:5b:73:68:6b:53:6f:22:17:ac:39:71:19:
a2:a4:37:41:71:cf:04:bc:ce:05:27:62:08:a2:fd:
47:21:49:44:61:cf:76:cd:c1:15:95:25:c5:37:e2:
b4:ef:49:cc:93:1c:c9:4f:05:e2:b5:ef:e9:72:30:
0a:c1:81:68:7d:93:f0:a1:15:8e:03:54:5e:c1:82:
6b:6e:04:6e:77:70:30:d7:a7:0a:fa:bc:fb:68:3a:
a2:b4:81:f0:5a:c2:10:05:bb:c6:0b:01:a7:bb:f5:
1f:54:1b:3e:f7:21:f3:fd:01:97:e7:14:de:da:92:
48:ab:85:e6:98:dd:88:e4:24:68:3f:77:f1:2f:32:
01:98:5c:5d:d3:80:3f:38:8d:71:59:b9:12:e6:ff:
5f:7a:b9:40:7b:e5:3b:da:df:76:e9:8f:03:7f:d3:
f9:70:4c:3a:c1:b5:88:7d:91:f9:77:18:16:ca:9f:
d1:ba:c3:96:37:01:9e:c4:77:7e:f8:61:db:e0:d2:
b8:45:05:fb:1d:d1:11:d7:16:67:0d:25:1e:e7:1c:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2C:37:EB:70:86:62:7D:BF:0E:D0:09:80:C2:ED:42:9A:6F:77:49
X509v3 Authority Key Identifier:
keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/83B1E1429AAB11F0AFE54B2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.245.234.0/23
Signature Algorithm: sha256WithRSAEncryption
11:77:99:d9:fb:55:60:ea:54:04:54:fc:21:2f:0e:7d:e4:09:
5c:71:a0:0f:91:10:a9:64:e2:4a:b6:60:4f:cb:70:ac:0d:0a:
a8:33:5e:14:55:6f:b8:70:07:73:2b:f7:ad:60:7d:3d:2f:b0:
91:25:99:ff:08:da:70:b5:d0:f6:07:c3:3e:61:e9:c8:ae:f4:
8d:59:1c:79:47:a9:da:c0:6c:0c:09:b4:fd:9f:90:69:67:bb:
aa:e0:bb:03:03:f8:97:a9:5b:bd:6d:23:77:78:00:61:fd:fe:
f9:0d:6e:dc:fa:54:74:1e:b6:ea:05:82:93:7a:2a:63:05:b4:
95:5a:13:87:25:e6:e3:f2:40:91:66:29:bb:cb:45:b0:1c:6a:
07:8e:2e:3c:b9:11:09:ae:0a:2b:cf:2d:56:03:66:73:9a:23:
87:d5:2c:70:f4:7e:80:88:ff:6a:b0:22:cb:9a:cb:24:e8:cb:
fa:46:2d:6d:16:43:52:40:f2:26:28:2a:b2:d0:e0:d3:7f:bf:
a1:4b:b3:92:ce:50:c9:70:51:e7:f9:61:53:18:98:6d:42:ef:
9f:df:3b:de:0d:11:ab:a4:9f:a7:d0:c9:41:e4:b0:a5:86:04:
31:14:f5:44:f0:53:9f:f9:fd:77:76:3c:62:7a:59:37:16:14:
ee:c1:a5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:13:01 2025 by rpki-client