
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/59231DCC2A6911F0BA904B1BC4F9AE02.roa
File: 59231DCC2A6911F0BA904B1BC4F9AE02.roa (raw, json)
Hash identifier: VGXhbd/nTIeBA0RsQGIGC5YqQwoabT0+oQu4vlet+kk=
Subject key identifier: A6:F6:9A:80:83:DD:E3:61:0D:B9:F4:8B:AE:FE:FE:6A:7E:2A:BF:73
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4DDC
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/59231DCC2A6911F0BA904B1BC4F9AE02.roa
Signing time: Thu 28 Aug 2025 14:56:27 +0000
ROA not before: Thu 28 Aug 2025 14:56:27 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153447
IP address blocks: 103.180.134.0/23 maxlen: 24
116.118.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19932 (0x4ddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:56:27 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b06e1b-b279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:b1:a7:77:b1:a3:5c:60:a4:50:00:d0:e5:
e5:07:d7:75:a8:9b:83:47:73:2f:bd:fb:ff:1a:c0:
37:64:ab:b5:2f:47:32:01:56:67:12:b6:dc:bc:eb:
09:5b:6b:d5:a4:1d:5a:87:7f:4a:e2:f7:b0:b4:ce:
4d:e2:98:83:40:57:96:8c:d4:fd:1f:95:93:db:5a:
88:91:cf:c8:23:ac:d7:8b:0a:50:85:ba:84:5c:31:
4b:59:d4:20:2f:3a:a8:36:5b:17:ba:7f:3a:6d:84:
3a:16:b9:56:9a:8f:06:f3:57:09:78:7f:89:1d:54:
0f:50:27:4f:6b:fd:a9:b1:86:85:0e:b5:87:60:54:
54:50:4c:f1:14:c2:14:6b:46:4f:a9:56:b0:db:33:
ed:8b:a2:02:19:34:16:43:2b:57:fe:47:bd:03:a5:
d1:cb:5f:9c:3f:67:fb:0c:a6:42:cc:b2:0b:36:14:
46:db:a4:ef:54:ee:be:4d:c6:48:9e:23:15:40:d6:
84:bd:fc:90:59:3b:78:1b:21:12:a4:13:16:6b:60:
b6:76:40:89:f3:67:53:63:ff:f1:5a:a0:b1:e1:09:
7d:6c:66:a8:26:72:2d:1c:e1:54:02:f4:97:61:a7:
52:bc:b2:75:30:83:36:0d:70:4b:c6:e2:f6:69:ca:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F6:9A:80:83:DD:E3:61:0D:B9:F4:8B:AE:FE:FE:6A:7E:2A:BF:73
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/59231DCC2A6911F0BA904B1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.134.0/23
116.118.60.0/22
Signature Algorithm: sha256WithRSAEncryption
50:6b:f5:30:1c:14:55:c3:d5:50:c6:aa:b2:cf:f2:d4:c6:4a:
05:79:cb:2b:fa:db:55:bd:22:32:f5:41:6e:7d:ac:cf:7c:43:
a2:01:70:31:88:ee:ae:f8:08:e4:64:88:d8:3f:1a:04:93:14:
0d:35:0b:c2:b6:8d:e9:07:f2:4c:a9:ed:7c:4d:4e:48:24:7d:
03:ed:22:df:6d:73:e8:ac:cc:f7:0c:2f:03:cd:5a:e5:eb:0e:
05:52:f2:2b:4a:b3:3d:52:cd:7d:84:eb:f4:6f:a5:8b:3a:d2:
40:58:c3:c9:b0:9b:43:e3:81:03:ca:09:ad:80:2d:05:16:6b:
b3:4d:71:f4:4e:5f:1f:5b:c2:2f:d2:c1:e2:e4:6f:69:2a:14:
b6:27:27:3e:cf:b9:fd:43:bf:15:e2:5d:66:36:2c:1f:8d:4d:
d8:e5:84:48:0e:6a:8c:d9:3a:e7:4d:cb:07:a4:0f:6e:b6:37:
28:50:0c:a9:d3:7f:98:02:25:10:aa:8c:a0:97:58:8a:9d:f2:
2b:13:28:ba:47:44:ea:75:d4:53:b9:e8:53:44:fc:ac:f5:63:
54:6a:a2:28:98:b1:e4:59:9e:84:4c:ea:9e:f6:3e:25:42:92:
58:45:9d:a8:2c:ae:70:e8:e7:be:a5:fc:5a:bc:98:c1:cd:9b:
20:85:26:a9
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICTdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIwNmUxYi1iMjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoamxp3exo1xgpFAA0OXlB9d1qJuDR3Mvvfv/GsA3ZKu1L0cyAVZnErbcvOsJ
W2vVpB1ah39K4vewtM5N4piDQFeWjNT9H5WT21qIkc/II6zXiwpQhbqEXDFLWdQg
LzqoNlsXun86bYQ6FrlWmo8G81cJeH+JHVQPUCdPa/2psYaFDrWHYFRUUEzxFMIU
a0ZPqVaw2zPti6ICGTQWQytX/ke9A6XRy1+cP2f7DKZCzLILNhRG26TvVO6+TcZI
niMVQNaEvfyQWTt4GyESpBMWa2C2dkCJ82dTY//xWqCx4Ql9bGaoJnItHOFUAvSX
YadSvLJ1MIM2DXBLxuL2acophQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKb2moCD
3eNhDbn0i67+/mp+Kr9zMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNTkyMzFEQ0My
QTY5MTFGMEJBOTA0QjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAFntIYDBAJ0djwwDQYJKoZIhvcNAQELBQADggEBAFBr9TAc
FFXD1VDGqrLP8tTGSgV5yyv621W9IjL1QW59rM98Q6IBcDGI7q74CORkiNg/GgST
FA01C8K2jekH8kyp7XxNTkgkfQPtIt9tc+iszPcMLwPNWuXrDgVS8itKsz1SzX2E
6/RvpYs60kBYw8mwm0PjgQPKCa2ALQUWa7NNcfROXx9bwi/SweLkb2kqFLYnJz7P
uf1DvxXiXWY2LB+NTdjlhEgOaozZOudNywekD262NyhQDKnTf5gCJRCqjKCXWIqd
8isTKLpHROp11FO56FNE/Kz1Y1RqoiiYseRZnoRM6p72PiVCklhFnagsrnDo576l
/Fq8mMHNmyCFJqk=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:33:15 2025 by rpki-client