
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa
File: 25B713A4FE6B11EBB5DD176BC4F9AE02.roa (raw, json)
Hash identifier: KrqWlA/SDiqH7tPY3/giTqCFhbQU+NxKtLCfFdknyhE=
Subject key identifier: A2:35:70:01:D1:95:B5:B2:E3:40:73:A1:B0:56:EB:B4:92:85:A6:48
Certificate issuer: /CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102
Certificate serial: 0573
Authority key identifier: 82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa
Signing time: Wed 08 Oct 2025 23:27:47 +0000
ROA not before: Wed 08 Oct 2025 23:27:47 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 142628
IP address blocks: 103.171.42.0/24 maxlen: 24
2001:df7:3680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl
rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1395 (0x573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D23C7, serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102
Validity
Not Before: Oct 8 23:27:47 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68e6f373-31f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:32:96:1c:cd:c2:6f:84:69:53:15:e2:1a:
0c:48:df:6c:4d:c8:80:a8:db:19:6f:74:21:b1:d8:
51:30:e2:e0:b5:0b:bf:36:62:eb:e8:be:05:2a:96:
d1:87:cc:6d:35:35:91:42:f4:c2:e4:8d:7e:be:23:
ff:85:23:84:77:a2:7f:d5:96:ff:95:33:da:77:a7:
88:59:18:40:b7:cf:f9:dd:ae:29:a9:7a:d3:38:01:
e8:3e:17:a7:71:bd:0c:13:6b:28:51:f8:66:e7:e0:
23:18:88:54:5d:89:f4:5a:ca:b6:93:1b:99:5c:9f:
19:d8:ff:e5:b2:37:1e:47:ed:84:b3:95:37:d2:da:
22:85:4f:64:3b:e9:c6:7f:9e:d6:ee:78:c3:8c:2c:
69:1e:4a:d7:57:66:78:a9:7a:22:a0:4f:e2:c7:77:
18:1b:c3:1d:f0:c8:fd:95:7b:0c:a7:fd:63:00:e5:
8c:66:8c:da:ee:21:ad:21:d3:71:ac:20:86:f7:51:
ea:71:64:5a:28:5f:2e:1f:8b:92:78:1f:a2:eb:12:
83:f0:37:9d:da:ed:5f:71:a5:a2:aa:fc:4a:8d:83:
e6:e2:de:7b:03:f7:f5:96:ec:ba:ea:64:a4:2c:c1:
8a:a6:a6:44:03:36:db:5a:e6:f1:da:6d:46:e1:87:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:35:70:01:D1:95:B5:B2:E3:40:73:A1:B0:56:EB:B4:92:85:A6:48
X509v3 Authority Key Identifier:
keyid:82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.42.0/24
IPv6:
2001:df7:3680::/48
Signature Algorithm: sha256WithRSAEncryption
1c:2b:b3:3b:94:0b:d3:ed:04:f9:99:cf:12:7c:99:5c:8f:e4:
20:0f:f0:b3:e8:34:d3:a1:62:3e:e3:64:9b:51:e3:63:b5:7f:
51:3b:2e:75:b7:27:32:36:aa:fa:a7:a6:a6:ec:7e:33:43:d6:
99:44:4f:52:a0:51:90:26:da:51:a5:7f:e9:92:70:ad:b4:ed:
85:48:d6:a9:78:73:ca:e0:c5:02:0c:58:cf:4b:80:03:5b:6c:
e4:93:52:99:43:9b:12:41:c2:67:63:be:6c:88:ce:8d:05:c0:
4c:dc:7c:93:7b:65:8d:81:54:ef:51:d5:ae:18:c8:42:ca:be:
3c:c6:3f:79:d6:07:12:54:e8:35:09:72:cc:a7:a3:6d:45:14:
12:e6:2e:e6:92:5d:87:d6:cf:24:89:e5:0a:37:cc:14:a4:43:
8e:00:31:8b:d4:9a:a3:0b:97:df:1c:2b:5e:58:21:8a:2c:9b:
3b:98:39:d2:cb:d2:cf:63:ab:1f:8d:9d:88:3d:9b:1e:16:4e:
11:1d:65:ae:67:eb:3c:5e:ca:1e:9b:c9:aa:e1:01:7d:34:7b:
36:4c:41:5f:92:bb:38:cc:86:eb:ec:b8:c4:e9:60:ae:de:3c:
96:f2:cb:a4:38:ef:26:be:10:e5:7e:00:3d:b5:86:8f:77:ec:
db:f2:34:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:56:53 2025 by rpki-client