
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/B722FC542A0411EB992DD32EC4F9AE02.roa
File: B722FC542A0411EB992DD32EC4F9AE02.roa (raw, json)
Hash identifier: wsrS8Hj9tlKWrRYJKi3rNPfDpEOnN9QMK0e9qX0Cib4=
Subject key identifier: 35:2A:98:A6:C4:8E:EF:0F:5D:7A:C6:F5:B9:EF:EE:21:7E:5E:4C:36
Certificate issuer: /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial: 0732
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/B722FC542A0411EB992DD32EC4F9AE02.roa
Signing time: Wed 02 Apr 2025 21:53:56 +0000
ROA not before: Wed 02 Apr 2025 21:53:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4768
IP address blocks: 103.7.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842 (0x732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Validity
Not Before: Apr 2 21:53:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67edb1f3-c4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:01:d9:f4:72:f1:21:45:d0:9e:75:9f:14:
15:44:13:d4:8c:c8:01:10:49:43:bc:f0:62:17:6c:
b7:16:b5:fa:a1:65:37:ac:aa:79:1f:b5:38:83:3d:
75:a6:ed:0c:cc:9e:92:36:39:1b:76:b6:16:10:ef:
0e:75:3f:d1:ea:2a:d1:e9:d0:f9:2f:d8:43:ad:3d:
ce:70:a6:9e:e3:17:ed:ee:53:a6:d5:c1:e8:04:7d:
fd:8a:e2:bc:0b:0d:5c:2a:0c:37:71:70:af:45:d8:
de:08:70:3d:77:f7:ed:32:45:56:3b:12:70:6d:ea:
6a:7c:c5:91:ad:7e:8f:b4:c0:22:7d:5f:15:6b:52:
84:9f:ac:53:64:65:86:75:d2:04:bf:43:52:b7:ca:
8b:be:1e:90:aa:64:18:d6:0a:07:3c:b3:54:26:6a:
7e:1c:94:04:89:16:53:9f:e1:bb:e3:6b:f0:b3:b6:
ba:81:dc:b3:89:33:59:a2:97:66:01:86:c7:98:78:
10:b5:19:ae:33:d9:df:c9:de:b1:63:b6:94:df:88:
37:d2:04:84:7e:d1:a9:6b:75:d4:46:2c:6e:ce:60:
2f:0c:22:4d:95:bd:87:92:2c:15:98:31:6d:41:cb:
5b:6f:a8:6f:ad:4d:1d:1a:dd:0a:62:36:1f:f3:f0:
13:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2A:98:A6:C4:8E:EF:0F:5D:7A:C6:F5:B9:EF:EE:21:7E:5E:4C:36
X509v3 Authority Key Identifier:
keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/B722FC542A0411EB992DD32EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.7.96.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:56:90:45:52:93:24:be:6e:1a:fb:05:44:d1:89:71:24:a8:
0d:12:f4:8a:6b:f5:95:3d:33:a6:3f:4f:ed:14:55:b0:91:d0:
e9:72:a3:86:b6:45:40:87:f4:d1:8d:99:b9:7c:e9:7b:48:5e:
7e:c2:5a:a9:c5:ce:01:b5:0c:bc:7a:aa:9a:e3:10:08:64:70:
3f:41:7f:f7:c6:29:cf:f0:bd:14:9a:b3:f5:4e:2a:88:cb:14:
f2:09:a5:df:76:4c:4f:25:44:ee:3d:41:fd:fc:c9:15:84:7f:
d3:54:a1:3d:bd:a1:ac:0b:ee:7e:41:04:22:12:a1:26:75:88:
71:2a:35:48:03:e3:92:37:8d:34:22:1a:46:c9:a9:9d:51:f3:
ed:47:09:90:b4:ff:20:9b:b0:76:41:b4:8e:cb:40:64:b1:88:
fb:65:11:50:94:d0:d3:b1:92:10:fd:4c:68:93:9f:c5:72:f9:
fe:00:5b:1a:06:de:08:8e:69:02:17:6c:ae:12:e8:65:84:af:
b9:86:a2:79:61:0c:c5:75:2f:db:d4:bb:fd:10:b7:d4:98:e7:
a9:46:3d:d1:90:9d:db:b1:e6:8c:4a:ff:0a:27:ed:39:1c:bc:
93:ba:c8:83:7b:56:4a:35:68:38:00:47:93:24:3d:1a:e0:e0:
32:ab:e2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:58:15 2025 by rpki-client