
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/79395BE68EB311EF9A8DFC3CC4F9AE02.roa
File: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (raw, json)
Hash identifier: RU2Bp78eGDXSscZxxDiygRwZ64V3JmS10+rUng9roo8=
Subject key identifier: F0:3B:48:90:66:38:31:E7:02:01:32:44:45:B2:FA:2E:68:AE:9E:FF
Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Certificate serial: 0E77
Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/79395BE68EB311EF9A8DFC3CC4F9AE02.roa
Signing time: Mon 18 Aug 2025 18:27:17 +0000
ROA not before: Mon 18 Aug 2025 18:27:17 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 64513
IP address blocks: 43.231.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3703 (0xe77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Validity
Not Before: Aug 18 18:27:17 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68a37085-e60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:60:39:8b:38:28:2c:d4:34:d3:73:5d:b0:a3:
d2:fa:a2:f5:24:8c:19:fb:95:95:90:32:bd:e9:1a:
db:25:b2:d0:2f:08:51:9e:82:02:80:0e:49:32:5e:
9a:71:df:1f:ff:0c:85:6c:e3:71:1f:8f:ef:26:30:
49:62:76:46:80:bc:ae:37:84:9c:62:f4:c1:97:1f:
06:e1:f7:80:0f:8f:d8:28:5a:19:35:bd:10:be:1b:
25:35:c6:c1:11:72:32:92:46:d7:84:a8:76:23:2e:
7d:53:f5:cf:d9:8a:db:c9:25:d5:33:6a:5e:03:86:
02:03:56:84:34:0a:3a:57:4d:2c:58:d6:de:35:98:
e8:b4:f0:3a:d8:0f:2e:2d:35:13:2c:7a:9a:57:7b:
02:79:fe:42:86:2f:8a:71:ee:2b:06:ba:ca:d7:1b:
3a:fd:1e:53:f3:43:27:40:72:8e:8c:62:d1:d7:a6:
a4:2f:16:4f:c7:8c:90:35:56:7b:44:2d:0d:91:dd:
5b:17:ae:b0:00:d5:bd:51:c9:01:ad:af:06:65:2f:
81:48:da:7f:4c:ee:b9:74:2a:62:05:d6:78:7d:68:
c1:f4:68:ed:b5:95:46:0d:4d:92:58:7f:88:09:35:
2a:0f:2a:d4:cc:c3:2d:92:af:57:5d:95:66:0c:5a:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3B:48:90:66:38:31:E7:02:01:32:44:45:B2:FA:2E:68:AE:9E:FF
X509v3 Authority Key Identifier:
keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/79395BE68EB311EF9A8DFC3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.31.0/24
Signature Algorithm: sha256WithRSAEncryption
69:6f:5c:2a:90:87:e8:91:08:d1:86:40:46:b5:54:d8:36:30:
88:bd:67:94:e8:ef:75:7f:55:5c:8f:52:e6:43:94:cd:88:36:
57:5f:6b:f9:63:27:44:84:76:8d:cf:e2:08:ff:c8:e2:1e:73:
63:1b:4a:41:c3:2b:18:4a:44:31:b6:5f:98:2f:e3:a5:22:b1:
d9:5c:a7:04:5a:5a:f6:da:03:dc:60:9a:84:fb:c9:55:ff:71:
13:d7:70:6a:f6:d2:2a:f4:23:04:94:dd:2a:20:7b:a9:67:1a:
0f:76:49:66:39:7d:38:db:81:64:98:8c:27:94:dc:fd:2a:fc:
a2:4c:47:f0:9f:1a:13:f3:e6:ce:74:27:59:bb:1d:46:f7:19:
a3:81:79:68:38:09:1e:49:9b:ea:6d:ad:28:62:f3:e2:60:e1:
72:15:ca:f7:d2:76:ec:79:25:42:dd:01:25:df:2c:64:c0:c6:
0b:5b:ab:65:14:fa:8d:ed:14:51:28:9d:86:f4:28:f3:a2:e4:
d2:a0:fd:6b:64:0a:a4:74:ee:15:f7:9d:fd:68:a8:56:3a:0f:
eb:65:09:a4:f7:5c:4a:a8:af:60:09:47:3a:de:84:8a:d8:ee:
42:cc:45:b3:78:c8:5f:d4:7c:7e:5a:79:ba:74:02:e9:95:0b:
e5:1c:d9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:24:35 2025 by rpki-client