
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa
File: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (raw, json)
Hash identifier: 8cwkmAzUHnzmEAUNr254jpd6TX395TnuYUK7Fbb2vBY=
Subject key identifier: 58:F8:13:66:62:B5:B4:4C:5E:81:3E:67:E9:FF:F5:A5:57:1F:70:95
Certificate issuer: /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial: 01A3
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa
Signing time: Mon 03 Nov 2025 03:47:41 +0000
ROA not before: Mon 03 Nov 2025 03:47:41 +0000
ROA not after: Sun 01 Mar 2026 00:00:00 +0000
asID: 150683
IP address blocks: 103.255.66.0/24 maxlen: 24
103.255.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Validity
Not Before: Nov 3 03:47:41 2025 GMT
Not After : Mar 1 00:00:00 2026 GMT
Subject: CN=690825dd-314d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:df:30:dd:31:bc:cf:2d:e6:3c:fc:89:87:
27:b8:a0:6f:75:b0:f4:2c:69:64:13:1c:9c:5a:42:
e0:7e:34:5c:ca:0a:d6:c3:06:8f:09:46:5f:2f:4a:
b1:46:a0:bb:71:eb:34:2b:4c:af:86:57:af:1b:4f:
6b:b8:48:ca:d7:2b:37:08:39:43:6f:ac:81:50:3f:
97:5d:53:5f:bb:2a:23:d7:71:bc:dd:39:ba:db:37:
c8:7a:2f:9a:f0:f7:5a:83:3d:40:8c:d2:33:03:23:
f0:f1:d2:69:36:43:46:3c:f8:87:88:56:ce:c7:73:
1c:30:34:94:ef:ce:30:a5:15:c6:53:21:32:05:f8:
1d:91:79:43:b0:5d:10:7e:95:af:1f:e4:ae:01:68:
a8:0c:e6:75:70:72:94:bb:72:73:f5:1d:eb:8d:d7:
93:4e:e0:2d:dc:e3:2d:64:5e:e6:4c:cb:87:0c:78:
ab:a6:5b:9d:dd:b8:5e:81:7f:c5:98:a4:8b:fe:5f:
b2:fc:ab:3a:0a:66:f5:3c:86:02:7e:32:ca:d3:49:
c0:4d:dd:df:a5:cb:16:be:be:ea:b8:35:5d:ac:4e:
d3:4b:76:d5:80:e0:0f:e9:c3:70:f2:26:a4:f0:05:
d5:26:f0:48:57:20:fa:fd:64:00:39:40:bf:9a:84:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F8:13:66:62:B5:B4:4C:5E:81:3E:67:E9:FF:F5:A5:57:1F:70:95
X509v3 Authority Key Identifier:
keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.66.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:da:59:85:97:50:ee:0e:67:c4:de:ad:69:28:ae:7c:22:5a:
9c:d8:f3:0e:64:b2:ba:83:f1:76:ca:9f:7f:be:89:38:88:4c:
e6:8d:35:0f:c9:14:f2:79:78:17:5b:cb:6a:43:91:7e:51:b1:
2f:48:b7:f8:55:ce:a4:fe:29:94:fd:10:3c:30:e6:8f:08:2e:
fb:68:ea:80:c2:42:e7:1b:f7:eb:d0:62:a3:ed:14:04:ee:e1:
de:b4:c5:6d:eb:73:c0:92:eb:f8:a8:d4:b0:ca:70:93:ef:22:
80:f6:51:96:e7:36:4e:01:e6:b8:1f:9d:2c:fe:77:49:18:73:
05:4e:aa:ec:4b:ad:b9:d9:61:dd:b5:5b:cf:06:14:7a:81:00:
c3:78:b2:ad:13:4e:02:ce:fd:21:be:46:64:64:ab:38:58:4d:
7c:2e:5c:83:a8:7b:27:c5:df:a4:60:4c:31:93:8b:6c:e2:a3:
9a:35:10:19:6f:99:59:fa:31:bb:43:6d:84:1a:b6:83:6f:0a:
08:1d:f7:04:94:56:62:83:59:de:d8:ee:f3:e6:f3:50:3c:1a:
61:fa:65:7c:b7:1c:49:13:24:8d:a0:4e:03:f7:68:4e:76:5b:
3c:cb:fa:fb:f4:e6:41:46:60:90:7b:d2:ab:5b:6c:bd:69:da:
58:f6:86:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:14:37 2025 by rpki-client