
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/132D82FC6F5311EFA28F470DC4F9AE02.roa
File: 132D82FC6F5311EFA28F470DC4F9AE02.roa (raw, json)
Hash identifier: 6ua60ZFv4yMON+VXB98oAIdiNofvpqoRR7M7oXyYVBQ=
Subject key identifier: 17:D4:75:35:3F:E8:DF:B1:40:18:7A:EF:61:66:DE:8C:89:96:17:2E
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4D0B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/132D82FC6F5311EFA28F470DC4F9AE02.roa
Signing time: Thu 28 Aug 2025 14:53:35 +0000
ROA not before: Thu 28 Aug 2025 14:53:35 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135959
IP address blocks: 103.126.160.0/22 maxlen: 24
2001:df7:7e80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19723 (0x4d0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:53:35 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b06d6f-b69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1f:65:b7:dc:df:ff:6d:53:34:ba:ad:76:38:
59:f7:5d:ba:8d:ce:2f:1a:7e:10:3c:1e:f1:89:ff:
f1:fe:cf:46:01:3c:04:ee:e0:2c:72:23:31:55:3f:
28:9a:e0:1b:5c:e9:3b:ae:9d:a3:1a:ba:1c:65:90:
03:cb:a9:5c:b7:bf:78:39:c4:15:d7:13:e5:ef:e1:
66:af:d9:2d:ed:03:bd:2f:a2:9a:fb:24:50:b9:ac:
8e:04:66:48:c4:08:1a:70:c5:46:61:c5:e5:04:ac:
8a:47:98:55:2f:5a:f0:be:11:a0:4d:52:d4:02:dc:
b8:eb:cc:38:ad:af:05:b1:23:01:83:71:30:ef:4b:
ad:e3:f1:b6:85:f6:76:91:03:b8:2c:60:41:d5:cb:
e2:74:ea:fd:60:75:6e:e8:12:e4:10:1f:9c:7d:8b:
ca:6f:17:a2:98:6f:e9:50:f6:39:60:90:5f:c4:3d:
df:96:75:33:5e:cf:cb:e0:47:8c:06:e2:45:0d:3e:
3e:fb:3b:1c:d6:07:d5:f1:38:fd:4b:4e:d6:97:a4:
c3:f8:92:b3:e3:39:54:fd:43:65:93:f1:b5:08:c3:
2a:ae:38:28:9b:b7:56:2f:06:50:1f:2c:ab:0d:75:
ff:b6:cb:bf:da:5d:95:f1:83:e4:e7:e2:ae:d1:eb:
e6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D4:75:35:3F:E8:DF:B1:40:18:7A:EF:61:66:DE:8C:89:96:17:2E
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/132D82FC6F5311EFA28F470DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.160.0/22
IPv6:
2001:df7:7e80::/48
Signature Algorithm: sha256WithRSAEncryption
94:81:ce:20:40:f6:8b:e9:de:6a:3b:93:31:64:34:b0:06:af:
71:53:88:3a:6e:05:86:88:64:43:e3:88:76:49:bb:30:26:b3:
86:f2:2c:1c:cd:fc:a6:7d:ba:5a:fe:4f:c0:6c:b0:b5:4e:b4:
48:e6:c5:b9:b0:5a:65:58:fb:8e:5f:8c:5a:45:de:9b:80:c3:
5b:9d:90:5a:07:47:6c:fb:8b:f8:d7:f1:b7:52:66:7a:27:e8:
71:17:9c:b1:5e:5b:95:1a:04:d9:20:67:b9:e2:b9:d7:ca:5f:
e5:f7:30:46:e7:0f:b7:fc:bc:20:80:e5:6e:b0:7f:65:8e:7b:
5d:5f:fa:8c:62:ca:a8:a0:96:b5:3f:27:63:e2:b6:f4:e1:ee:
a6:f4:b0:77:60:36:e9:ce:d9:32:d6:0c:d1:8e:94:8b:8a:b5:
52:d6:f7:a4:38:76:56:65:25:54:42:88:c4:3a:91:40:bc:ce:
53:5d:d9:51:98:d1:2d:8e:db:01:b8:a8:17:e1:37:7c:d4:ad:
0c:5f:ec:fd:c1:75:36:8f:3c:7e:e2:c3:77:a1:11:44:74:ef:
a6:13:c1:28:50:6e:91:90:bb:87:cf:59:e2:77:c2:e2:cc:5d:
9c:77:e8:d0:79:1f:d8:c4:09:03:9d:a2:ae:f8:e8:e0:88:5d:
90:2e:8e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:02:51 2025 by rpki-client