
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/CB31DFEA7BE411EFB6955155C4F9AE02.roa
File: CB31DFEA7BE411EFB6955155C4F9AE02.roa (raw, json)
Hash identifier: /MZsQd7r1AUngKpTxxkCkkNWLr5PAUrY0B8gx8HXfWY=
Subject key identifier: 05:A8:4A:3E:1B:9E:B4:A5:9A:79:E3:60:67:09:BE:D3:C7:B2:C7:DA
Certificate issuer: /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Certificate serial: C0
Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/CB31DFEA7BE411EFB6955155C4F9AE02.roa
Signing time: Mon 29 Sep 2025 06:36:20 +0000
ROA not before: Mon 29 Sep 2025 06:36:20 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 153345
IP address blocks: 160.30.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Validity
Not Before: Sep 29 06:36:20 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68da28e4-c3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:e5:84:3b:9a:4d:30:a9:cd:28:b7:01:16:
c7:a3:77:a6:a2:5c:11:ff:23:36:b3:dc:44:f1:53:
8d:30:84:e6:2a:4b:a3:a7:00:5b:e0:26:13:00:8f:
54:68:8f:b1:bf:ca:ff:60:14:a9:19:84:e3:1a:4d:
30:04:e5:6d:0c:ce:b9:de:ae:1e:9d:e4:68:87:f1:
18:59:20:09:75:aa:3e:89:4d:00:ed:18:cd:7e:9e:
6b:19:94:98:87:ae:db:37:85:ed:5d:6e:cf:2e:ea:
32:dd:57:9b:0b:cd:07:11:42:01:ec:9f:c0:3e:60:
88:37:b4:f4:bb:ef:53:50:c6:09:d9:19:a2:92:24:
f7:f2:4a:e2:7b:f9:e9:00:e3:5e:8a:ca:b7:20:05:
5c:b3:36:65:8d:82:8b:d7:e4:b0:f5:38:96:9e:68:
c5:2b:4d:88:30:34:33:46:7f:9f:31:d9:d2:db:69:
bb:97:93:95:c1:32:ff:6a:b8:97:f8:cf:4a:79:1b:
09:83:ed:71:b1:61:a9:8f:44:9d:00:51:24:bb:45:
75:73:4e:59:71:18:6c:c7:25:73:fa:5f:b7:4a:be:
9f:e0:8f:42:06:31:c2:90:31:83:4f:62:e9:db:1d:
b7:06:02:20:93:c5:94:e2:74:05:ef:6b:44:7f:dc:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A8:4A:3E:1B:9E:B4:A5:9A:79:E3:60:67:09:BE:D3:C7:B2:C7:DA
X509v3 Authority Key Identifier:
keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/CB31DFEA7BE411EFB6955155C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.47.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f1:93:c2:0b:bc:2d:65:d7:39:a0:f4:bf:c4:a6:4a:a8:77:
d5:f3:4f:fb:00:1d:58:bf:6c:00:7c:86:5c:d9:15:45:90:40:
bd:a9:ea:6b:45:36:b9:74:37:b6:78:f1:a9:71:9a:aa:33:7a:
a9:f5:f8:59:1d:15:51:b0:0f:b1:ae:08:f1:1c:92:f5:16:86:
6b:29:fd:5a:ad:80:03:77:0e:12:d4:cc:d4:a7:03:dc:0a:92:
2c:1e:49:9f:28:b1:60:34:f5:95:9b:36:eb:05:68:c9:3b:f0:
9b:54:5d:3f:d2:fe:e3:67:18:2e:60:90:dc:a3:8e:cb:91:32:
f3:87:85:5b:7c:54:dd:82:94:39:1f:b2:b9:8e:5a:b4:c3:58:
c1:bb:c8:aa:f9:81:2f:c1:58:ab:95:15:5c:a7:c6:2e:3d:38:
79:90:92:4f:c0:b9:b4:ce:cc:c1:27:32:c5:dc:75:18:da:da:
ab:6e:6f:b2:3d:cb:d4:1b:89:df:7e:78:c4:08:7a:fd:93:d2:
a4:cb:51:1c:ce:2f:03:8a:cd:9d:4c:da:bd:74:62:b3:4d:e1:
30:2f:e2:50:4d:3d:87:b6:74:51:ec:2e:17:96:17:28:7f:9d:
0f:f2:30:2a:c9:c5:dc:b9:39:2d:11:da:6d:59:7a:90:c4:82:
bc:3b:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:30:16 2025 by rpki-client