
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6EEC31C996711EC9741246AC4F9AE02.roa
File: F6EEC31C996711EC9741246AC4F9AE02.roa (raw, json)
Hash identifier: Ku43tP7PlnC/ZFnOsD175m2n9QuXUxLcFNggYyHhSSk=
Subject key identifier: 8F:87:1D:AA:74:9E:63:6F:EB:37:12:9B:3D:47:82:0D:FA:32:A8:AE
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4CC7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6EEC31C996711EC9741246AC4F9AE02.roa
Signing time: Thu 28 Aug 2025 14:52:36 +0000
ROA not before: Thu 28 Aug 2025 14:52:36 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 131390
IP address blocks: 103.242.52.0/22 maxlen: 24
2001:df2:4dc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19655 (0x4cc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:52:36 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b06d34-a99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:c6:77:cd:b3:f9:be:81:40:60:bf:69:7f:
6d:ff:6d:d7:0d:5a:2f:5b:3e:c6:d4:56:c4:8f:8b:
7a:33:df:86:44:18:ac:da:07:e3:84:4a:35:e6:d5:
87:3d:d1:0d:df:a1:d4:0a:e9:09:c4:8c:6b:b5:8b:
60:3e:81:91:7d:b5:6d:0c:9b:bb:20:86:70:f9:6a:
95:42:c1:d5:b8:b9:e5:83:a5:68:0f:5a:18:03:3e:
2c:e1:0f:72:36:c5:ae:33:15:eb:65:d5:fe:9d:4e:
3a:4d:4e:fd:89:dd:c1:c3:5e:c9:c2:95:7a:ac:b9:
55:05:59:28:db:84:29:95:00:32:14:3c:d2:56:23:
b4:30:22:c5:cd:32:81:6d:b5:2d:ae:ad:59:3c:3c:
10:df:c9:20:30:b1:e1:46:62:9d:e8:29:9c:69:6c:
4e:90:c1:58:59:cf:47:6b:53:80:89:06:35:ec:f0:
16:6d:a8:87:b4:c8:d9:6e:69:85:f4:38:75:50:90:
ff:df:78:ba:e3:57:13:46:fb:15:a6:22:8e:4f:85:
7b:f9:ca:64:5b:c1:41:d5:04:c0:a2:ba:43:be:ff:
8b:5f:ba:10:2e:30:cb:44:99:3d:87:5d:cd:fe:6d:
bf:09:ef:96:96:33:14:83:bd:28:eb:c4:31:0f:04:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:87:1D:AA:74:9E:63:6F:EB:37:12:9B:3D:47:82:0D:FA:32:A8:AE
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6EEC31C996711EC9741246AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.242.52.0/22
IPv6:
2001:df2:4dc0::/48
Signature Algorithm: sha256WithRSAEncryption
57:de:e8:ce:96:c0:e1:a6:f5:d6:50:8b:df:b0:2f:19:1c:fe:
18:5d:20:87:79:ae:5b:3b:e1:0b:aa:aa:3c:9a:e8:e6:78:40:
3d:61:84:3c:23:f2:52:f2:5f:b3:f9:9a:b6:93:e4:0e:53:70:
05:09:a8:ff:25:c5:4f:34:7e:54:b1:00:6d:00:1c:40:a5:e7:
48:f3:88:9e:80:3c:08:d8:03:f7:64:07:b6:22:4e:05:81:57:
6d:8d:76:11:45:93:10:f1:2e:81:37:62:d6:8a:b9:df:c6:cc:
d3:7d:77:09:33:8b:2b:a6:84:38:1f:b5:cb:53:95:db:73:48:
b1:66:6f:f4:34:73:29:de:90:81:00:08:21:fd:6d:35:a8:6d:
f0:cf:02:01:40:3d:fd:6a:60:59:39:8d:00:78:f9:07:95:22:
2e:d2:f6:6c:eb:45:03:db:c4:44:0e:14:c4:7f:46:de:e6:ea:
24:b3:ac:35:c2:be:5f:b8:06:e9:c5:aa:2c:c9:0a:9c:6a:f5:
45:70:b3:21:15:4b:6b:c5:01:67:b8:bc:35:73:56:d2:69:04:
23:59:b2:f4:47:40:ea:9b:be:88:fa:02:f4:c8:b1:92:cb:02:
51:15:54:c6:2e:3f:cc:07:3c:ee:b1:8e:66:ad:e5:52:1b:f8:
1c:27:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:59:06 2025 by rpki-client