
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/111C77744E1811EDADB36913C4F9AE02.roa
File: 111C77744E1811EDADB36913C4F9AE02.roa (raw, json)
Hash identifier: AKQfVSoyvedil4fBrswJw8Fk2im5oq9KA2WJlwXE+SY=
Subject key identifier: A0:40:06:1B:3F:B2:4E:5A:1E:F2:6F:92:36:82:3D:99:87:0F:1F:F8
Certificate issuer: /CN=A91D0C14/serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
Certificate serial: 01DA
Authority key identifier: A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/111C77744E1811EDADB36913C4F9AE02.roa
Signing time: Mon 07 Apr 2025 02:08:52 +0000
ROA not before: Mon 07 Apr 2025 02:08:52 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 58876
IP address blocks: 103.8.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl
rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:56:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C14, serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
Validity
Not Before: Apr 7 02:08:52 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67f333b4-3c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:c7:58:3f:40:46:f1:53:f3:39:92:3c:4a:
90:47:5e:24:79:61:b4:16:42:17:57:dc:77:46:c2:
03:33:c8:04:a1:8c:cf:c9:22:c0:8a:b8:a1:55:5a:
fb:be:33:db:54:51:64:de:fc:da:54:71:33:7f:e0:
88:d6:f2:5d:7c:b7:ea:1d:08:af:34:28:46:d4:49:
d8:06:b8:8b:66:fe:8c:c1:05:e2:f8:75:46:d4:c7:
a0:92:b0:10:93:01:24:b7:33:c5:b9:5f:c3:db:46:
32:cf:ed:d5:11:19:67:df:cc:18:5b:dc:f7:ef:92:
31:42:cc:c7:de:a9:55:ca:fd:16:e3:06:26:de:67:
6b:ae:9b:f1:3f:5f:2a:2d:d3:9d:ca:37:b3:0f:f6:
23:2b:31:6d:ab:87:46:cc:0a:cc:c9:7c:6a:6d:16:
5a:b5:77:1c:0a:2c:34:a5:1d:b6:0d:9c:c4:0f:91:
bd:cc:33:15:aa:11:c0:62:0e:87:03:11:b4:34:4d:
d8:13:c3:c1:c7:c2:de:87:9e:fc:bf:be:43:8b:92:
e7:10:12:70:71:cc:65:f2:cc:42:e2:cd:61:15:3f:
1a:3c:d8:62:1c:b0:4d:58:6d:69:be:c2:e5:df:04:
14:a5:e0:a7:14:54:96:db:d5:22:ff:5a:2c:c8:20:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:40:06:1B:3F:B2:4E:5A:1E:F2:6F:92:36:82:3D:99:87:0F:1F:F8
X509v3 Authority Key Identifier:
keyid:A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/111C77744E1811EDADB36913C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.8.231.0/24
Signature Algorithm: sha256WithRSAEncryption
07:dc:28:50:14:54:fc:16:b8:51:d0:e8:c0:17:64:56:b4:27:
e4:46:1b:bc:54:22:75:f1:4a:a3:72:60:4a:d0:11:60:58:b6:
e9:e6:59:92:28:ee:ad:8a:d8:1b:50:81:d3:79:6a:29:33:b1:
47:8d:a9:2e:55:9f:31:a9:51:16:a4:50:8e:e6:d0:c2:8f:90:
1b:09:b4:39:67:28:ce:fa:27:26:bb:70:9f:1e:39:50:75:33:
13:17:bd:d0:ca:e0:a5:79:a2:3a:04:91:7c:72:1f:51:bc:7c:
34:35:85:e1:41:7d:16:ee:e7:1c:61:8f:aa:b1:29:c8:ac:94:
c4:7d:90:f5:6a:87:06:7f:10:50:88:be:3c:ac:1a:a0:d2:55:
19:f8:3a:39:ba:de:9f:9f:fb:51:f8:18:35:ca:91:5d:6b:fe:
0b:3b:9a:72:0b:1c:08:35:2e:67:35:4d:1b:dd:d6:05:3d:96:
7e:d6:27:fe:59:01:f4:e1:b9:1a:12:4f:c6:5a:84:06:fc:19:
de:ae:aa:4b:f3:6a:eb:0f:e5:ac:08:57:9a:9c:40:22:56:a6:
fa:da:1d:7d:a0:e0:54:8b:eb:4a:68:9b:82:d9:6b:5a:42:31:
16:8b:59:be:83:7a:95:49:98:e2:89:cb:1a:e5:da:8a:cf:b9:
2b:a1:e5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:17:03 2025 by rpki-client