
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa
File: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (raw, json)
Hash identifier: JbS9HkiswWZnIjVLHQ7U/IfLENyl8w12PWlq4/4YX4g=
Subject key identifier: C0:1D:A4:56:AB:12:F8:4B:69:CD:B7:03:AC:6C:51:C9:FD:75:A0:89
Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
Certificate serial: 014B
Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa
Signing time: Wed 13 Aug 2025 05:12:44 +0000
ROA not before: Wed 13 Aug 2025 05:12:44 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 136262
IP address blocks: 103.141.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl
rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
Validity
Not Before: Aug 13 05:12:44 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=689c1ecc-05f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:da:b3:63:d4:33:30:0f:63:ee:34:a6:56:
fc:a1:a9:90:76:b0:d3:79:9b:0d:a7:85:18:2a:e6:
63:16:7b:e7:e0:37:36:8c:e1:7a:18:15:1e:a3:ef:
a9:29:52:2d:54:ad:f1:1e:7d:bd:e0:4b:ff:6f:45:
4e:a5:13:dc:47:6e:60:a6:71:b1:2e:e9:90:68:c0:
9c:b2:53:53:47:bd:16:0a:8b:b9:76:cc:68:ef:01:
87:8c:22:9b:27:6d:21:91:c4:93:b7:94:f1:71:3f:
07:ef:26:58:aa:39:4c:14:1f:ab:86:d2:0b:81:51:
ed:fc:d0:ef:5c:75:48:a7:db:84:38:bd:90:52:46:
76:eb:63:99:3a:c0:53:91:39:e7:17:64:bd:28:d2:
94:57:55:1a:c1:b5:24:c9:4e:ee:b7:53:8f:ed:b6:
48:65:a9:80:5d:0a:7d:37:ce:dd:2d:c4:65:ac:2a:
90:16:71:ef:c7:2d:e9:72:38:7c:5c:8c:51:49:1f:
92:ac:55:25:b9:ab:01:a9:00:01:09:d1:ee:43:c0:
1e:fe:8c:e0:23:2a:22:15:3c:b0:c5:be:f8:42:6b:
e3:a2:92:d2:20:00:ec:9f:95:64:c8:6f:48:a6:c6:
13:3f:44:28:be:5a:84:3b:a9:12:3a:b0:43:5f:da:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1D:A4:56:AB:12:F8:4B:69:CD:B7:03:AC:6C:51:C9:FD:75:A0:89
X509v3 Authority Key Identifier:
keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.8.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:61:9e:cf:ca:33:4d:1b:64:3e:c9:49:fb:84:4a:65:78:48:
aa:6f:78:33:65:5b:ed:20:27:10:85:e8:21:2f:aa:f3:b7:99:
c2:09:30:4a:c0:72:7f:d5:05:b2:e3:47:0e:1e:c9:a5:0b:4a:
f2:19:2f:fa:ce:43:f9:21:24:3b:c7:54:5e:15:59:ba:e1:cf:
69:0b:23:77:7b:90:c2:15:08:d4:24:a6:ae:0a:01:f5:c6:3a:
3c:2a:17:58:e4:06:12:13:a2:fb:96:20:75:c6:d8:29:53:bb:
15:93:86:a9:90:26:b7:28:0a:cc:ef:1e:2d:c1:df:0f:c8:a9:
59:d9:c7:85:45:d1:31:c8:47:ce:c2:cf:71:a2:1d:06:b7:65:
00:86:00:e5:c7:66:54:b5:50:de:66:26:69:a1:a3:18:27:67:
65:ee:a3:d6:40:44:72:6e:b0:5d:a1:af:3c:34:34:54:65:3c:
10:4f:52:2f:0b:f2:78:c0:76:2c:91:0c:67:7f:aa:03:b6:b0:
f1:6c:8f:ca:f3:26:a3:c4:a2:9a:76:af:6d:44:69:75:b5:fc:
ab:e7:ea:91:78:c7:42:a7:ff:28:70:5a:65:99:db:11:8b:04:
05:c8:a2:f7:e6:3c:02:a1:73:b2:da:12:ad:f2:aa:db:2a:6b:
a7:9c:9d:d8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD
M0QyMTQ3RjAwHhcNMjUwODEzMDUxMjQ0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODljMWVjYy0wNWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqPfas2PUMzAPY+40plb8oamQdrDTeZsNp4UYKuZjFnvn4Dc2jOF6GBUeo++p
KVItVK3xHn294Ev/b0VOpRPcR25gpnGxLumQaMCcslNTR70WCou5dsxo7wGHjCKb
J20hkcSTt5TxcT8H7yZYqjlMFB+rhtILgVHt/NDvXHVIp9uEOL2QUkZ262OZOsBT
kTnnF2S9KNKUV1UawbUkyU7ut1OP7bZIZamAXQp9N87dLcRlrCqQFnHvxy3pcjh8
XIxRSR+SrFUluasBqQABCdHuQ8Ae/ozgIyoiFTywxb74QmvjopLSIADsn5VkyG9I
psYTP0QovlqEO6kSOrBDX9q+DwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMAdpFar
EvhLac23A6xsUcn9daCJMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx
RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS
X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkNDMjMvOTI1QzgwQ0U4MUUxMTFFRThDRjY2QjBBQzRGOUFFMDIvRkMzQzhBNkE4
MUUyMTFFRTk2M0JBQjg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnjQgwDQYJKoZIhvcNAQELBQADggEBAL1hns/KM00bZD7J
SfuESmV4SKpveDNlW+0gJxCF6CEvqvO3mcIJMErAcn/VBbLjRw4eyaULSvIZL/rO
Q/khJDvHVF4VWbrhz2kLI3d7kMIVCNQkpq4KAfXGOjwqF1jkBhITovuWIHXG2ClT
uxWThqmQJrcoCszvHi3B3w/IqVnZx4VF0THIR87Cz3GiHQa3ZQCGAOXHZlS1UN5m
JmmhoxgnZ2Xuo9ZARHJusF2hrzw0NFRlPBBPUi8L8njAdiyRDGd/qgO2sPFsj8rz
JqPEopp2r21EaXW1/Kvn6pF4x0Kn/yhwWmWZ2xGLBAXIovfmPAKhc7LaEq3yqtsq
a6ecndg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:28:45 2025 by rpki-client