
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/F22762F4741011EF9E049760C4F9AE02.roa
File: F22762F4741011EF9E049760C4F9AE02.roa (raw, json)
Hash identifier: iKwlRkuX69d7ZcvWspfzZHclIKmsaCHfYEvd4T/pvns=
Subject key identifier: 04:29:CD:07:6F:53:53:3D:75:44:A7:B2:93:2D:52:C5:27:79:32:E3
Certificate issuer: /CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
Certificate serial: C8
Authority key identifier: 75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/F22762F4741011EF9E049760C4F9AE02.roa
Signing time: Sun 11 May 2025 04:46:27 +0000
ROA not before: Sun 11 May 2025 04:46:27 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 103.49.122.0/24 maxlen: 24
103.49.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl
rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA867, serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
Validity
Not Before: May 11 04:46:27 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68202ba3-b818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:de:6f:c9:9c:a1:75:47:5b:73:4c:cd:b4:db:
8d:4d:88:3e:64:80:14:dd:e8:f5:a0:0b:bf:ff:d5:
af:ea:02:c0:c9:30:aa:4b:d2:b6:a8:42:25:51:31:
19:af:e6:9d:1f:f7:74:08:06:93:e3:43:49:1c:44:
6a:91:99:e1:f3:75:7c:4e:55:ce:c6:70:5e:56:7c:
05:91:e7:3e:5d:b3:ad:ec:5c:55:35:06:40:0e:cf:
07:4a:3e:f7:52:64:05:82:aa:84:c0:4d:89:ed:27:
77:bc:86:1b:7f:34:25:3f:51:5e:79:ec:df:c4:13:
c9:a9:d1:8b:69:bd:73:fd:11:0b:40:d9:6c:80:28:
76:e4:c1:9e:fb:ef:66:78:a0:16:54:5a:a4:ae:e2:
ab:09:30:5f:e1:0b:89:d2:a9:e1:21:02:f1:c2:de:
dc:d0:15:8d:61:3b:12:2f:f7:73:6a:a6:b9:20:db:
09:c4:11:c7:0b:a0:8c:b4:7f:4c:c9:cb:b3:7e:2b:
97:fb:1f:51:a2:28:e1:cb:c2:21:32:96:00:31:81:
92:e9:70:b9:11:b7:8d:66:84:ca:d5:df:f0:6f:20:
9b:a2:f4:2a:9c:e8:0d:ff:a7:71:a2:6f:92:8c:8b:
a0:8d:65:90:30:87:c2:9e:55:60:29:81:cf:b4:17:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:29:CD:07:6F:53:53:3D:75:44:A7:B2:93:2D:52:C5:27:79:32:E3
X509v3 Authority Key Identifier:
keyid:75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/F22762F4741011EF9E049760C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.122.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:03:ba:85:52:8f:bd:ee:fc:47:0d:d1:11:4d:55:84:fd:dc:
8b:14:6c:92:43:29:eb:f5:bd:1d:2d:55:79:3b:d1:40:08:97:
3e:d6:e9:f9:c5:78:f2:e8:fb:74:bc:37:c2:ab:b8:3f:73:7d:
9c:cd:ba:3b:ab:2c:c7:ac:64:9c:37:31:a8:21:ba:67:8d:89:
51:98:8d:2a:cb:3e:3b:35:cc:d9:c3:39:59:54:63:33:c6:96:
ad:a5:c8:bb:4d:6d:e0:34:57:3e:b4:c4:07:46:50:25:b9:8a:
bd:45:1a:a2:85:08:59:6f:a3:11:ff:13:aa:af:11:e1:a5:0d:
13:a3:10:19:52:79:7e:8b:e2:91:1e:2e:e3:d0:7b:16:28:66:
95:47:4b:4b:af:f7:15:fe:a0:c4:ed:59:e7:fc:04:fd:03:09:
d2:24:c3:06:cb:7f:18:4c:3e:38:83:bf:a7:bb:d2:4d:6c:2b:
98:da:1f:2e:c7:6b:d8:7f:44:72:d0:24:ff:a7:f0:3a:ef:61:
4c:4d:8a:18:f6:c4:49:70:2b:6c:4c:60:06:7d:f7:76:41:f5:
70:1a:bb:0f:70:9c:78:5e:69:74:32:14:69:fa:7d:85:1f:bb:
5b:5f:a3:2e:97:5f:2a:3f:63:4c:9e:73:45:f6:d8:98:65:84:
1b:3b:7c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:44:42 2025 by rpki-client