
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/12FE8876315D11EC953A8215C4F9AE02.roa
File: 12FE8876315D11EC953A8215C4F9AE02.roa (raw, json)
Hash identifier: 7UJP8UFfXK4x+wVDwW/KJkNYmcljto6cpXuXFRxTkOA=
Subject key identifier: 84:9A:2C:DE:99:5F:26:17:82:0D:05:82:5E:D0:32:06:AD:BB:B6:2A
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4CD6
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/12FE8876315D11EC953A8215C4F9AE02.roa
Signing time: Thu 28 Aug 2025 14:52:49 +0000
ROA not before: Thu 28 Aug 2025 14:52:49 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 131412
IP address blocks: 103.237.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19670 (0x4cd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:52:49 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b06d41-26ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:74:33:5b:3e:48:90:00:c7:77:97:cf:b5:
c6:13:23:89:30:3b:83:64:64:7d:2f:92:68:2a:89:
8c:14:e8:db:3e:e9:3e:86:ba:8a:5f:ea:ed:2a:e1:
3b:55:22:3c:be:90:ec:27:00:0d:19:ef:6b:fe:9f:
fc:d2:9c:f1:fc:c0:4f:a5:9b:0d:60:ef:29:3c:30:
cd:48:84:fa:e7:c5:52:e2:14:d3:b0:b4:cb:36:19:
87:d2:2d:e0:1d:c8:25:4c:b6:8c:4a:51:e1:76:6c:
49:a1:2f:cb:fa:42:c8:2e:22:7d:dd:30:16:a8:b6:
5e:36:23:3d:69:e2:c4:03:df:5d:e0:e2:37:31:3c:
f4:51:d8:12:f9:e2:8a:2a:e7:c1:0c:df:1c:96:6f:
66:51:1a:6b:0f:3e:d4:3e:c4:bc:24:92:b0:cc:ed:
f9:4d:a3:c8:49:6a:90:6a:b6:ee:4c:fe:d0:e6:a3:
4f:57:7e:53:91:f5:c6:87:51:8f:7f:1d:0b:b4:b8:
5e:c6:46:af:4d:ee:26:56:49:ae:d3:c8:65:20:82:
44:cc:9e:00:d9:ba:1f:02:35:a6:68:b5:e0:40:8f:
34:27:2e:cf:a2:3f:11:76:f2:08:28:8b:a8:c8:3f:
e7:9f:bf:80:2f:cc:c5:82:a0:79:b5:55:f3:5b:66:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9A:2C:DE:99:5F:26:17:82:0D:05:82:5E:D0:32:06:AD:BB:B6:2A
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/12FE8876315D11EC953A8215C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.60.0/22
Signature Algorithm: sha256WithRSAEncryption
10:53:f7:8a:16:7c:3a:ab:5c:6c:82:e0:e7:91:de:20:1f:5d:
a1:44:5e:5a:2a:45:94:33:52:4f:f1:dc:bd:46:86:ff:b0:19:
b9:c7:00:3b:65:a9:43:0b:b5:e3:65:b7:9f:b7:be:bb:ac:5f:
70:e5:21:09:35:4e:b0:8a:9b:fb:49:61:e6:fe:e2:aa:00:bf:
d2:48:84:56:54:ae:75:03:f9:98:e2:1a:66:64:f1:0b:08:e2:
4d:42:40:9e:cf:94:6c:d3:2a:5f:3d:74:48:76:64:72:c3:fb:
54:91:4e:a0:68:90:7d:96:67:4f:65:a3:62:b8:c2:dc:25:26:
4c:1a:62:ff:a1:ab:dc:39:c7:14:40:79:0b:7e:99:90:18:c6:
b3:23:ab:10:58:ea:ef:1e:da:fb:d9:8e:e7:26:8d:a5:d9:dd:
f5:e0:02:e8:f8:d7:6a:da:64:38:d9:db:2c:a5:ee:bd:fa:0b:
1d:ac:df:a5:90:6b:52:d1:8a:35:8a:d4:68:82:cf:41:fe:db:
87:fb:2c:bb:a9:eb:8f:fe:58:2b:bb:9d:22:33:bf:d2:85:2e:
a5:70:9b:76:70:cb:21:75:ca:ba:69:2a:b1:74:a8:ec:5a:25:
17:8e:88:e0:02:8f:54:9c:4b:0a:42:63:2d:bd:bb:f9:71:41:
3f:81:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:32:43 2025 by rpki-client