
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/92A9A67EB40211F09714C855C4F9AE02.roa
File: 92A9A67EB40211F09714C855C4F9AE02.roa (raw, json)
Hash identifier: B5buB00YWWO2A2xnD3M5vrisGIi+aFvWdlZltMnylng=
Subject key identifier: 7F:23:92:38:D6:AF:2E:48:75:66:16:07:D4:C7:17:52:75:4A:26:D2
Certificate issuer: /CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
Certificate serial: 0A47
Authority key identifier: 85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/92A9A67EB40211F09714C855C4F9AE02.roa
Signing time: Tue 28 Oct 2025 13:32:39 +0000
ROA not before: Tue 28 Oct 2025 13:32:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151391
IP address blocks: 103.150.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl
rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2631 (0xa47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5BCD, serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
Validity
Not Before: Oct 28 13:32:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6900c5f7-40bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:07:2a:f8:1d:3b:b4:ec:d8:5b:f8:e6:dc:
25:cb:62:6a:09:d6:65:c1:d1:55:a4:18:97:08:4a:
2d:68:1d:3e:b5:88:c2:81:0e:f1:8e:1a:b3:95:fe:
5f:b8:89:d4:d8:65:1f:77:56:08:32:f1:6d:83:15:
75:3d:75:57:c9:ed:eb:f8:f7:79:69:a8:7e:9b:93:
a9:8c:90:58:5e:0d:2a:0e:fa:58:19:01:68:de:43:
5d:59:a0:4c:15:0c:43:97:58:fe:b1:16:8a:81:20:
04:95:94:86:98:34:58:ec:47:97:3a:00:1e:fd:cb:
a6:22:b7:80:54:e3:a5:e7:4a:ce:9f:12:24:4e:e3:
b5:79:eb:dc:ff:bd:d9:0f:03:46:e1:8a:1f:3b:ea:
69:9d:94:ef:fb:8e:cd:e9:38:c4:c8:9d:23:79:35:
d0:97:20:42:22:db:c0:4e:f6:34:93:35:c5:b7:0a:
a6:ad:ea:ed:ef:b2:f4:bd:46:e4:94:57:42:a9:43:
7e:21:72:28:ab:62:aa:c2:08:eb:73:de:a5:bc:e7:
9f:fa:d5:b8:b8:db:a4:fc:55:b4:60:0f:40:a4:ca:
70:72:d4:06:63:f8:c5:c0:e4:7e:0f:dc:64:69:43:
83:02:08:5a:09:a8:0e:e1:89:5a:3a:cc:12:45:f2:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:23:92:38:D6:AF:2E:48:75:66:16:07:D4:C7:17:52:75:4A:26:D2
X509v3 Authority Key Identifier:
keyid:85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/92A9A67EB40211F09714C855C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.65.0/24
Signature Algorithm: sha256WithRSAEncryption
58:4a:f5:c7:cf:bf:d8:51:3e:c5:99:de:09:b7:09:c8:2f:ee:
d8:98:20:9a:f1:8f:30:6d:dd:8f:10:ed:db:ca:f8:a8:bb:45:
92:1f:b7:3f:19:bf:ef:47:f4:6f:af:34:e7:5b:63:1b:07:cd:
24:87:51:49:e0:6b:39:8a:51:8c:16:72:89:b2:fc:93:f4:59:
ce:a9:a3:4e:14:28:00:3f:d2:5b:6c:83:45:2f:65:6c:0b:90:
c1:9f:76:34:64:e8:1e:86:31:57:ec:74:3e:6b:16:e9:23:b2:
cb:a4:0b:ea:4c:ae:32:a6:5c:94:60:4c:d8:3f:5b:75:e4:5a:
d1:63:9a:a8:39:12:b6:15:0f:a0:c7:01:d7:a0:d9:f3:cb:68:
de:e2:4b:97:df:01:fa:31:8a:e2:5d:c3:98:dd:ae:d9:80:78:
1c:c6:6b:c5:08:6e:41:83:ab:dc:d8:2b:f2:82:ca:f9:91:f2:
a7:ba:36:9c:88:07:0e:cd:c6:57:89:e7:f7:12:b0:4a:74:e2:
ef:d2:86:48:ba:b0:7f:ea:d7:e9:ec:d5:c4:3e:05:54:94:24:
f3:b4:33:09:92:06:5f:92:b3:e4:1f:cc:97:2b:d4:06:14:85:
9c:d2:e5:20:80:f0:9a:42:6c:7a:7d:00:56:e5:4b:6c:44:1c:
b5:f8:97:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:35:06 2025 by rpki-client