
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/CC26BAE6895E11F08FE3390FC4F9AE02.roa
File: CC26BAE6895E11F08FE3390FC4F9AE02.roa (raw, json)
Hash identifier: Qd9yXxs36oF+1VHeMpSuefMICH6l6WaUGPlOLsEYxaI=
Subject key identifier: 37:C8:4D:01:AE:E5:64:65:B1:14:3F:87:8C:8F:94:4C:AE:06:10:A1
Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Certificate serial: 07C2
Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/CC26BAE6895E11F08FE3390FC4F9AE02.roa
Signing time: Thu 04 Sep 2025 07:14:29 +0000
ROA not before: Thu 04 Sep 2025 07:14:29 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 40605
IP address blocks: 103.85.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1986 (0x7c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Validity
Not Before: Sep 4 07:14:29 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=68b93c55-a117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:2a:88:fd:0c:d6:2c:95:f3:eb:01:dc:25:
a1:18:c8:e5:89:87:ef:bb:9a:d4:82:4b:7f:67:9f:
48:86:a4:80:79:1f:c5:93:86:0f:4b:3c:ee:1a:65:
9d:f5:e4:44:76:a3:8b:49:31:38:00:0e:e6:15:0e:
fc:a7:ea:5f:45:9b:b4:ce:fb:67:41:5e:c9:9d:7d:
c9:60:0a:de:a6:4f:c6:d5:9a:b4:03:25:f3:fa:3d:
2f:58:bd:78:07:63:d0:cf:3f:0f:0f:62:b6:b4:60:
6a:e9:7d:fb:bd:90:90:e2:db:9b:66:d8:91:87:c2:
e4:7a:a0:f0:2f:51:d0:e1:b9:94:f7:30:8e:01:62:
2a:2f:6e:bf:22:63:dd:de:72:ed:c3:b9:46:7e:e7:
11:97:c5:2f:a1:3d:21:5c:71:64:98:f6:94:55:1d:
bd:2e:c4:f7:72:45:5e:9c:49:04:42:d6:c5:a4:ba:
f5:0f:83:7a:9b:a6:29:73:2c:d2:23:38:76:c5:a5:
90:34:73:72:35:e7:dc:55:9a:ec:4a:ce:ac:f6:c6:
da:e4:88:90:4d:e8:12:d9:fe:a7:c1:4a:27:d3:05:
d6:3b:b2:73:cc:e2:f5:3f:14:2a:b0:41:71:1d:94:
af:51:b1:58:97:e9:4f:14:81:6e:b2:88:23:ab:53:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C8:4D:01:AE:E5:64:65:B1:14:3F:87:8C:8F:94:4C:AE:06:10:A1
X509v3 Authority Key Identifier:
keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/CC26BAE6895E11F08FE3390FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.111.0/24
Signature Algorithm: sha256WithRSAEncryption
74:35:f7:6d:d3:7d:0c:4a:36:ba:44:bb:8f:40:14:56:aa:56:
1e:a1:92:9d:94:b4:cd:1a:83:db:23:70:6e:65:0b:7c:5a:35:
cc:4a:cd:71:5d:cc:1b:66:74:66:6a:14:35:97:1d:5c:57:61:
3d:4c:d2:eb:21:9e:11:bc:dd:87:7c:42:11:78:71:f3:83:cc:
a1:f1:06:7c:01:47:55:28:d2:6a:2d:88:30:d8:db:78:25:2c:
5d:ce:d0:9b:4e:86:63:80:a8:db:c3:57:47:5a:c5:eb:63:92:
a9:6a:ba:cf:a5:5f:c0:ba:c3:e8:9b:0e:20:32:0c:43:a8:15:
c9:09:33:9a:f5:4c:9c:72:e7:ff:a6:e8:c9:7d:9a:4e:27:5f:
dd:42:a9:94:55:06:e0:51:54:b5:36:e8:19:f6:69:7c:04:f4:
42:ef:de:8b:a7:ea:e9:3d:5d:cd:83:e6:04:1a:54:35:a5:29:
db:58:b3:52:68:ea:85:16:c9:03:f3:1d:dd:94:4e:fb:b8:c7:
7c:ab:24:a2:11:43:e1:4a:89:bf:86:ad:c1:8b:22:80:5f:b2:
cd:56:da:20:11:6f:43:b0:45:f8:89:74:14:9d:4e:d4:c9:5a:
d3:35:d1:dc:49:ed:b7:51:1c:a3:4a:07:b4:75:23:df:65:c9:
f6:37:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:20:47 2025 by rpki-client