
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/C965E8C4679911EEB466ED36C4F9AE02.roa
File: C965E8C4679911EEB466ED36C4F9AE02.roa (raw, json)
Hash identifier: ZMuXU8x5oSWaUY/w5FJOwLEX4Eyd5ZHjHOMaRrHb7zk=
Subject key identifier: 23:90:00:4E:30:50:51:11:70:DD:78:CF:A1:F9:75:A3:FA:EC:02:44
Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial: 02B4
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/C965E8C4679911EEB466ED36C4F9AE02.roa
Signing time: Wed 29 Oct 2025 01:45:29 +0000
ROA not before: Wed 29 Oct 2025 01:45:29 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 55501
IP address blocks: 103.174.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692 (0x2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Validity
Not Before: Oct 29 01:45:29 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690171b9-f6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:3c:db:f6:0a:86:ba:e5:bd:62:86:d9:c6:
1f:02:f6:03:bf:f1:09:43:5f:e3:a0:da:bc:b7:6c:
25:3e:36:0c:4f:f5:16:e8:ac:44:30:75:ca:a2:23:
5c:b8:a0:e1:e0:24:a2:77:5f:eb:b1:97:f3:33:38:
f6:e0:9c:7c:09:c1:4c:c0:45:c8:e0:18:3d:d2:3f:
73:97:6e:4a:13:f1:3d:7e:b3:96:1f:96:3c:d6:92:
00:7d:27:3b:a8:0d:46:30:53:e7:15:51:7d:b7:4c:
a0:43:8e:28:0c:df:9f:c9:66:14:d1:4b:16:9d:87:
80:73:0d:de:d2:58:2a:73:af:d3:13:f9:f2:ad:88:
44:6c:ba:d5:b0:bf:49:24:63:ea:4f:5d:c8:53:f6:
49:d7:88:c6:d5:6d:46:f3:f9:65:13:e2:a5:a5:a7:
46:02:93:5c:42:69:21:9a:58:c5:33:a4:60:68:bc:
51:59:60:87:e2:a8:a8:57:a4:42:6b:3b:cf:12:4c:
01:4c:b3:37:70:26:6c:a6:57:f5:1a:5b:8f:4a:7f:
cf:27:dc:61:5c:43:16:83:12:24:c5:5f:f6:cf:fd:
0d:80:c8:97:98:fc:51:2b:59:04:be:cd:c5:cf:6f:
d9:e4:3d:ac:b7:6c:93:2b:3d:5a:62:86:9e:23:f9:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:90:00:4E:30:50:51:11:70:DD:78:CF:A1:F9:75:A3:FA:EC:02:44
X509v3 Authority Key Identifier:
keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/C965E8C4679911EEB466ED36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:80:c4:5a:39:0c:53:e8:f0:3f:0f:a5:5d:40:ad:d8:de:1d:
69:97:89:be:53:6c:dc:e0:bf:cb:07:10:0b:c7:83:36:cc:9b:
d4:37:b9:2c:d6:a1:e9:c3:f4:a2:81:94:58:bd:81:f5:07:a6:
87:93:e8:c8:10:fe:91:ff:11:dc:02:73:c7:1f:1d:56:c9:4a:
49:8f:b4:b6:f3:70:6e:4d:89:9f:60:be:66:f4:4f:88:aa:dd:
c9:ff:e6:fc:93:41:f9:8e:0a:a2:e2:ba:38:9b:86:b6:e3:30:
72:87:fe:58:1b:4a:62:6b:9e:78:67:51:7b:df:ba:de:a7:47:
15:08:ee:57:57:6b:3f:51:66:d7:44:34:e1:b0:1c:9a:74:c5:
8b:0e:39:86:ba:80:7a:b1:ba:c0:5c:b5:15:c5:25:96:3d:4f:
18:95:4f:96:43:74:c0:b2:a5:4d:e8:fb:a7:5d:6f:47:d2:b1:
27:bf:f7:88:12:fe:12:17:d3:66:29:54:02:6a:8c:3e:04:de:
47:2b:ef:ae:8b:9e:1d:59:98:30:24:9b:b4:88:e4:5f:2f:a5:
83:f1:83:bc:1f:10:af:84:82:b9:59:db:1b:e6:84:0b:5a:a7:
ec:d3:a6:9c:1f:de:75:8c:b9:97:45:5d:bf:ae:38:5f:8a:6f:
dc:4e:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:18:44 2025 by rpki-client