
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
File: A6ACA298858911E88026B416C4F9AE02.roa (raw, json)
Hash identifier: KhZ44smvv0XMa3hY/4cdC4BTlTI2qU0P4EUvi2XPNs8=
Subject key identifier: E8:AE:05:A1:A1:4D:8E:80:B7:33:79:AA:B3:7B:65:13:A6:6D:4C:B1
Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial: 190A
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
Signing time: Wed 10 Sep 2025 16:55:22 +0000
ROA not before: Wed 10 Sep 2025 16:55:22 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 3223
IP address blocks: 103.118.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6410 (0x190a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Validity
Not Before: Sep 10 16:55:22 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68c1ad79-3332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:40:fe:e6:d4:16:72:ce:9a:ea:52:98:4e:
34:e3:35:c7:27:4b:e4:e0:13:9e:81:65:08:f2:76:
8e:4d:64:8e:d4:a7:39:9a:4b:9e:68:8e:a9:9c:05:
3a:f6:f5:81:84:3b:db:02:72:bd:fc:45:5e:3e:dd:
57:c0:cc:dc:8c:d1:d9:25:36:bf:9e:e3:ad:00:ed:
a6:69:2f:b1:b8:8e:ca:f9:f6:ac:97:17:d2:b1:74:
d3:aa:2c:4c:d0:97:46:df:95:33:24:4d:b6:27:37:
86:0d:b1:93:ee:a1:fa:06:31:9b:f9:a8:58:63:13:
be:32:f2:2c:3e:da:15:b6:d1:d6:f1:14:32:12:fb:
53:77:e5:21:ce:ae:aa:8a:3f:b8:ec:91:f7:79:39:
97:b0:34:14:42:4d:4f:80:5c:c8:ba:e7:ec:10:f4:
17:e5:b6:ae:c6:18:3b:2c:73:ba:76:20:16:f8:7f:
92:36:98:fc:39:71:e4:4f:ef:8e:08:90:be:1b:aa:
23:b3:db:f7:55:41:d7:f6:e0:3d:0f:e9:3b:00:a1:
dd:e1:dd:8d:02:99:2f:28:53:10:55:52:7d:64:d2:
0a:c7:df:d9:3b:df:d3:3c:7a:eb:97:59:5f:47:b2:
cf:5b:d8:38:5d:71:7d:b2:07:e6:e7:6d:ee:1b:5f:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AE:05:A1:A1:4D:8E:80:B7:33:79:AA:B3:7B:65:13:A6:6D:4C:B1
X509v3 Authority Key Identifier:
keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.80.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:76:26:f1:51:1a:7a:4f:b0:26:54:89:d0:bb:6a:4b:ba:13:
81:c1:9d:f6:04:cd:d1:30:75:5f:68:f5:5d:0a:76:56:24:1f:
d9:67:2e:20:33:09:15:df:63:43:86:a8:91:e4:93:74:dd:bf:
52:56:56:36:e6:e6:e0:2c:ca:13:30:44:cd:11:c0:e4:28:66:
28:d0:6f:ef:e2:7a:66:5c:a8:98:7f:e1:88:e3:59:0c:31:4b:
2e:16:9f:27:77:69:ad:6b:8b:89:1d:ff:87:fd:1b:70:4f:5f:
c1:12:f6:8d:45:1d:fc:63:19:a7:90:62:13:4d:65:37:b4:81:
31:54:f5:e5:dd:45:f0:1c:e8:bd:70:3e:5b:dd:a2:d1:84:06:
18:62:e4:ef:7a:1b:20:27:dd:6c:cd:79:c9:32:6b:7b:69:fd:
24:07:a0:d5:1e:23:f7:f8:72:24:56:a0:16:bb:d0:7c:1d:e4:
cb:e7:a3:88:d8:b7:bb:b6:ce:50:dd:eb:d3:4f:5f:4f:15:2b:
7b:c2:75:fa:eb:4d:9e:b8:13:a2:d2:4c:23:e2:31:73:20:ff:
95:84:e5:6a:d1:22:38:40:d2:65:74:ed:a1:7e:56:68:38:49:
1d:c6:09:bc:77:60:5a:72:cf:cc:5a:c3:8f:3e:90:d8:45:02:
de:05:43:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:08:44 2025 by rpki-client