
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa
File: 7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa (raw, json)
Hash identifier: YuwAjf0VpmVoTjcP53b2MZy/33jsOggpPYKkc+Tnm7Q=
Subject key identifier: 0F:3A:22:0A:5A:DA:9A:DF:89:03:F1:AB:99:0C:34:3D:04:DA:73:A1
Certificate issuer: /CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497
Certificate serial: 0543
Authority key identifier: 93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa
Signing time: Wed 03 Sep 2025 00:15:00 +0000
ROA not before: Wed 03 Sep 2025 00:15:00 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.138.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl
rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1347 (0x543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5F33, serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497
Validity
Not Before: Sep 3 00:15:00 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68b78884-9221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:5e:9b:6c:e0:c4:3d:5d:43:81:94:55:d7:
9e:b0:ac:4e:89:94:a6:7d:b8:e0:d6:e0:19:ff:ad:
4b:26:6a:fe:18:3b:c4:67:d8:0b:8f:62:94:0a:a4:
9b:2b:c6:db:67:4e:b0:a0:57:1c:9d:0c:61:61:bb:
0b:64:8f:0f:fa:d5:46:82:49:a9:89:28:24:a8:8d:
88:b0:90:84:16:02:37:fa:ae:96:06:19:90:c9:32:
ab:3e:85:bb:30:b0:30:4a:43:1c:46:30:6f:27:d8:
14:89:c5:40:f5:00:cd:2f:25:9b:1c:d5:ed:d7:28:
21:71:cc:03:05:e3:ae:e9:78:aa:66:1e:8e:04:0f:
a5:6e:ea:aa:73:d1:af:2f:7c:25:ae:07:ff:dc:37:
4e:f5:f6:dc:dd:80:42:76:62:a8:a4:cc:da:3f:56:
8f:ff:2c:50:ab:3b:68:8b:78:98:91:96:ad:ae:6b:
4f:ae:d0:84:be:0d:2a:7a:f1:75:d8:74:ca:cd:8c:
ba:25:64:4d:25:21:2c:ff:ec:6a:60:37:fc:09:ed:
a0:14:00:3a:67:b0:44:d1:7e:33:87:0a:13:0e:f8:
ef:12:85:4f:70:29:4b:ab:66:7e:18:21:ad:e4:de:
d3:7b:f1:33:5b:7a:33:3f:08:d6:f3:7f:51:a0:09:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3A:22:0A:5A:DA:9A:DF:89:03:F1:AB:99:0C:34:3D:04:DA:73:A1
X509v3 Authority Key Identifier:
keyid:93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.231.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:18:95:5d:d0:63:b3:d2:b2:bd:b4:58:02:3a:ec:9c:6c:66:
8e:1e:81:48:90:ba:6b:53:1a:0f:71:22:88:79:76:b1:89:8f:
a0:4e:fb:4e:3b:bf:78:b3:6b:7f:e8:91:8e:5d:55:45:8b:6f:
a8:65:87:45:e7:7c:34:47:7f:c9:60:32:a8:c7:e5:c3:29:92:
68:8e:f5:b9:17:6e:da:a3:c5:3d:4a:9f:32:4e:44:ef:77:48:
86:5c:1d:98:28:6b:f7:bf:a8:40:9e:78:ad:c3:8a:74:5d:e0:
e5:3f:d6:c8:80:d0:3b:86:44:af:4d:b2:08:61:04:cf:68:bc:
72:f1:aa:f6:80:8c:0d:b1:a2:5d:a9:a2:c0:97:7f:b7:8a:38:
3f:b1:d3:5a:a3:38:2c:50:02:b4:cc:9a:a5:22:2a:c8:39:23:
8f:bc:a0:3f:09:fb:16:91:82:0d:66:92:0d:60:d8:71:da:83:
21:03:c8:8e:81:49:f4:6e:0d:25:07:fe:ac:18:bf:06:08:49:
45:a6:f0:a0:07:01:25:30:5a:be:37:e7:e6:4e:12:a4:37:32:
a9:24:09:fb:2f:b6:33:d2:35:e6:58:37:3d:c9:93:7c:6c:5b:
36:78:7c:0d:ff:c8:95:92:3f:30:1c:8d:f3:cf:1d:14:73:bb:
02:a9:cc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:29:00 2025 by rpki-client