
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/AABC79100EC411EF858B5255C4F9AE02.roa
File: AABC79100EC411EF858B5255C4F9AE02.roa (raw, json)
Hash identifier: Y8t05LyVholfuhF0jMVkacpJNMh0Rpp2q0O6araserk=
Subject key identifier: 7A:89:D6:B1:3D:BF:62:7F:50:B7:50:03:64:B5:D5:89:7B:6C:37:DC
Certificate issuer: /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6
Certificate serial: 06E7
Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/AABC79100EC411EF858B5255C4F9AE02.roa
Signing time: Fri 24 Oct 2025 23:11:39 +0000
ROA not before: Fri 24 Oct 2025 23:11:39 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139820
IP address blocks: 103.155.18.0/24 maxlen: 24
103.155.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl
rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C661C, serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6
Validity
Not Before: Oct 24 23:11:39 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68fc07aa-faa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:59:f0:e5:ea:e4:56:f7:27:c5:87:af:67:
5d:98:25:ca:1b:8c:51:53:9a:ce:38:10:cf:e0:e2:
a0:1e:6c:8b:10:6c:85:08:dc:22:03:2a:13:c5:4c:
2a:5d:59:6a:c1:83:ee:38:e2:b0:37:b2:c6:ad:52:
19:a1:d1:d3:c9:7f:f4:3c:ad:bc:68:b3:ee:20:4a:
dd:63:4d:63:43:29:03:65:95:62:85:ee:0f:ae:14:
39:04:5e:c2:08:45:24:b7:fe:68:c5:7f:4f:82:fd:
94:c1:9d:51:0f:bc:3a:7f:4c:17:59:9e:46:36:dc:
f0:16:ec:d0:17:11:1f:a4:ce:a2:77:da:eb:3b:c8:
88:65:9e:02:c7:af:a5:2d:8f:1f:fa:a2:d7:fa:8e:
49:8c:27:51:fa:3e:4f:38:7c:cb:25:d8:0a:e7:d7:
15:af:ae:26:d0:04:bc:ff:aa:cb:b9:07:3d:b4:bb:
6d:e1:1e:17:f1:84:f6:f2:6f:f8:c1:7e:87:4e:55:
bd:17:9a:5b:74:9a:f7:c4:07:12:c3:6e:df:07:53:
0d:5b:d8:46:b8:7c:cc:e9:a7:3c:79:4a:03:1f:88:
a4:fd:ce:e0:7e:c2:69:f1:37:09:94:54:25:cc:48:
27:07:fe:51:89:aa:c5:82:f6:b0:32:b7:bf:bb:b7:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:89:D6:B1:3D:BF:62:7F:50:B7:50:03:64:B5:D5:89:7B:6C:37:DC
X509v3 Authority Key Identifier:
keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/AABC79100EC411EF858B5255C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.18.0/23
Signature Algorithm: sha256WithRSAEncryption
67:cc:ad:7c:f1:c8:00:28:23:2f:8a:bb:9c:0f:cb:34:a9:f7:
4c:a6:ec:6e:f6:a5:0a:68:fc:53:9d:05:30:44:e2:33:97:ec:
d6:60:46:79:9b:cb:e7:3b:e3:a1:88:34:75:7f:5a:bb:de:61:
d5:16:36:02:39:10:df:2c:83:fd:65:b3:b0:d8:46:93:cb:9b:
51:a1:e3:4a:0b:3b:68:74:99:24:ef:bc:8b:ae:e5:26:50:1c:
f6:d2:98:d7:93:51:bf:c5:58:09:1f:d8:b6:a1:e2:94:3c:54:
24:ce:ab:72:31:ea:d6:4c:56:ea:ef:c6:e1:5a:dc:77:70:a5:
b9:7d:7e:6d:46:fd:dd:57:b4:4f:f7:4a:21:e8:6e:e3:d8:d1:
ef:e5:a7:eb:0d:46:ab:e7:0c:24:c3:8b:d9:6e:b9:6b:e9:6f:
72:63:f8:4a:47:22:c1:f1:88:a7:dd:92:15:c3:51:5f:d9:bc:
df:80:0f:73:5d:bc:20:d9:3f:46:a5:65:0f:40:2d:8c:03:19:
fd:34:00:2f:7f:c0:1c:41:75:a2:7a:15:38:16:93:68:7f:2f:
b3:88:1c:14:ec:d0:cc:22:38:49:96:cc:ac:39:c6:03:47:83:
f6:de:6e:1f:64:87:2c:7d:17:18:60:3d:c3:cc:86:d0:25:ba:
f1:cf:1f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:30 2025 by rpki-client