
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7982D8DAA12A11ECBB6E0681C4F9AE02.roa
File: 7982D8DAA12A11ECBB6E0681C4F9AE02.roa (raw, json)
Hash identifier: jeCNmEfIGMHYR8Cczhahi21hZLCLN+kqVS4CnbUJm6g=
Subject key identifier: 42:AB:B4:6B:92:F7:72:CC:D2:CA:F7:70:D3:E9:13:8E:B0:64:8A:0E
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4E44
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7982D8DAA12A11ECBB6E0681C4F9AE02.roa
Signing time: Thu 28 Aug 2025 14:57:58 +0000
ROA not before: Thu 28 Aug 2025 14:57:58 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 63744
IP address blocks: 103.216.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20036 (0x4e44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:57:58 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b06e76-56b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:66:66:1e:cf:85:09:dc:d4:7c:d5:04:30:
ac:c5:5f:35:49:14:2d:63:d8:77:fa:d4:35:b4:61:
a7:81:bc:a9:e3:6e:eb:cd:26:f9:85:f5:ad:4b:f7:
7b:47:e1:54:be:f6:2e:b6:76:f4:e8:39:b3:3c:33:
11:18:d5:24:ce:1e:e8:62:ca:ec:cb:9f:87:21:1e:
9c:fb:56:e7:31:9d:ea:33:4e:ee:ac:7e:68:bc:03:
db:57:47:6c:31:56:d3:82:11:06:19:e2:34:5e:43:
a9:bc:39:c2:4c:7b:65:8c:9f:83:33:f1:d6:7e:07:
a6:0a:f3:b6:e6:49:f6:e3:00:52:ac:61:f9:96:2a:
9e:92:14:85:35:d2:a9:0a:bd:ee:49:28:b6:03:3a:
5c:df:93:e6:f3:00:37:a1:82:b7:a5:28:c4:94:91:
e0:6c:30:cd:20:52:c0:6c:df:4a:50:89:19:b7:c7:
cd:36:a9:c1:d3:92:33:66:4b:44:f9:1b:11:8b:f4:
90:63:d9:b5:e6:c5:d4:2f:0b:be:73:37:e6:8f:41:
d8:e0:e9:8f:b7:ed:29:06:53:60:31:04:4d:af:6c:
ef:84:85:f4:2a:13:48:4d:85:c0:9f:29:b9:51:a4:
bb:6b:97:51:71:83:ff:42:bc:20:9b:bf:17:50:9b:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AB:B4:6B:92:F7:72:CC:D2:CA:F7:70:D3:E9:13:8E:B0:64:8A:0E
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7982D8DAA12A11ECBB6E0681C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.216.128.0/22
Signature Algorithm: sha256WithRSAEncryption
89:00:9b:c4:8c:da:27:f3:1a:14:3d:72:01:da:d8:99:12:24:
5c:ba:91:1a:6e:17:c3:a0:eb:d1:06:1e:fe:89:a2:27:94:57:
da:24:c1:93:3b:d4:7e:df:7c:a0:f3:96:40:71:01:42:00:33:
94:5b:f2:14:31:ba:42:9e:10:f4:eb:96:9a:71:25:0c:5b:84:
68:a7:b2:5b:bb:03:5f:fe:da:c2:18:f0:bc:0b:9c:bf:c2:e6:
69:44:31:df:66:c7:f2:78:1c:a6:5b:9f:3b:3c:18:86:4b:bb:
45:c6:5c:10:cf:98:ff:52:e0:bb:8b:4e:62:7a:a5:c4:ed:12:
1f:9b:4e:60:01:e5:b9:d9:0c:b2:18:00:d6:49:b0:e9:9d:56:
1a:23:e6:e2:29:1f:91:9a:1a:22:79:8e:ff:e4:43:44:bd:a3:
58:f7:f6:27:b1:3d:ee:b2:11:d0:f7:43:5a:8b:98:92:79:16:
8a:31:f8:25:09:f4:9b:d7:b6:65:e7:0f:06:7f:4d:1f:04:5c:
49:27:37:f5:4a:c4:3d:ac:69:92:ac:f4:60:c3:ae:29:c3:ea:
a0:b5:84:f3:8f:30:7c:18:e1:ea:df:23:11:d1:a6:c2:f2:63:
15:aa:01:20:24:79:92:e2:27:c7:d7:64:7e:5a:f9:24:00:11:
62:99:2c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:37:07 2025 by rpki-client