
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/69949320ADF611EE8DB5921FC4F9AE02.roa
File: 69949320ADF611EE8DB5921FC4F9AE02.roa (raw, json)
Hash identifier: r7MJbTbv/RCX5/kzewliRZWabqOHszJzAWHaHcN+VcY=
Subject key identifier: DB:E0:2C:DB:19:E6:EA:FB:9E:9B:49:9D:E8:E5:F4:D8:79:52:AC:44
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4DA4
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/69949320ADF611EE8DB5921FC4F9AE02.roa
Signing time: Thu 28 Aug 2025 14:55:41 +0000
ROA not before: Thu 28 Aug 2025 14:55:41 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150905
IP address blocks: 103.78.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19876 (0x4da4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:55:41 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b06dec-e6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:f7:af:85:bf:8f:a8:2b:c0:be:b0:d5:50:
bd:53:8e:17:f3:98:7b:c3:7e:2a:48:e3:03:80:cd:
9e:02:fa:52:c9:39:ca:b7:b2:f5:9b:79:24:63:e4:
4a:05:2d:1c:93:07:06:c8:44:ad:c4:45:09:ba:9c:
cc:ee:99:0a:5a:17:f0:2c:1c:9b:3e:48:c8:63:69:
3f:91:60:60:e5:15:32:ba:ee:f8:19:bd:28:c7:37:
0e:9a:7e:27:a1:22:7b:25:dc:f7:2e:3b:dd:99:14:
36:e9:f9:ab:a7:53:22:5f:bb:f9:0d:e5:bb:ff:d5:
72:6b:40:fe:aa:f7:75:eb:33:25:a4:22:9a:f7:0a:
59:7c:b2:11:a3:50:91:0f:4d:f3:b1:6d:84:4b:4f:
8e:0a:08:34:58:30:53:04:6e:e5:cd:d2:48:45:fa:
77:a6:ca:b8:bc:08:be:d1:26:12:17:c7:1f:4c:44:
5a:48:ed:2e:22:a2:b6:19:63:7d:1a:65:17:33:b9:
5c:21:b4:5c:c4:a0:fc:ec:13:bd:d6:8b:fb:5c:6b:
72:d3:e7:1d:30:27:d6:16:32:0b:69:ae:b3:6b:33:
53:1b:9c:9c:13:d7:32:29:36:2a:de:90:3f:fd:3d:
b8:a1:3a:ce:4b:f0:b2:88:d5:4c:dc:d3:fb:4e:88:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E0:2C:DB:19:E6:EA:FB:9E:9B:49:9D:E8:E5:F4:D8:79:52:AC:44
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/69949320ADF611EE8DB5921FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.6.0/23
Signature Algorithm: sha256WithRSAEncryption
41:6d:ea:17:9d:c4:e0:82:38:92:92:5c:02:57:20:e2:01:e8:
7f:a7:05:87:54:42:3e:06:3b:b6:11:0f:a5:76:04:0c:0f:10:
ba:ad:02:42:a9:47:c6:da:26:f3:67:fe:aa:fb:b1:10:b0:9f:
db:5b:0e:b6:93:e2:1d:9f:99:5f:0a:53:d0:32:95:0b:a2:85:
b9:e0:cd:cc:39:e0:41:67:a3:70:f0:02:8f:27:b3:04:d3:18:
53:68:05:a3:04:51:db:73:6c:c0:a4:24:c4:ec:e3:db:95:74:
76:b8:a8:ca:5d:97:1b:e8:1a:f2:08:61:c3:ad:a8:9e:23:b4:
7d:33:de:10:42:56:98:fb:58:7c:fc:41:20:73:71:a5:81:50:
52:43:ed:b0:f6:0f:33:cc:39:92:4b:8c:5c:b4:3d:05:46:b1:
2a:05:14:f0:5a:ec:b1:ff:8b:0b:3a:3b:d5:7a:12:83:75:cc:
d5:47:85:01:60:e2:15:7d:1b:ca:bf:a2:da:67:7f:c0:d0:dc:
81:17:ca:12:df:5d:8b:d9:d4:a4:3a:65:63:2f:27:fb:e7:ea:
b2:6e:10:ef:71:0a:4e:9c:36:a0:f5:b8:c6:87:60:a0:20:82:
eb:79:ff:7e:26:5b:4a:27:c6:3f:58:41:6d:68:dd:02:5e:2a:
c4:04:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:01:24 2025 by rpki-client