
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/777244A4506A11EE8D08A11BC4F9AE02.roa
File: 777244A4506A11EE8D08A11BC4F9AE02.roa (raw, json)
Hash identifier: zxrXFqsfD+7NRRncl+qUeb1Nz8SeSSAW+8BU/fya5cs=
Subject key identifier: 35:EC:8E:6E:C6:67:D5:E7:2E:D3:D0:77:79:78:F9:33:6D:65:A4:7F
Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194
Certificate serial: 01FE
Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/777244A4506A11EE8D08A11BC4F9AE02.roa
Signing time: Wed 27 Aug 2025 03:07:43 +0000
ROA not before: Wed 27 Aug 2025 03:07:43 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 131465
IP address blocks: 103.49.146.0/24 maxlen: 24
2001:df2:e940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl
rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194
Validity
Not Before: Aug 27 03:07:43 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68ae767e-7ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:2b:fe:7a:13:c8:0f:4a:6c:df:78:e6:de:
52:8f:07:8e:04:41:e4:53:2a:64:ac:d6:bd:8b:1a:
d9:3a:3b:97:d2:08:be:65:e5:42:47:79:92:7f:e4:
4d:11:8b:f6:de:fe:86:8c:0f:a0:67:2c:43:71:fe:
6d:4f:1c:6b:f2:de:55:d0:8a:8f:a5:12:9c:98:fd:
cb:62:5b:94:1e:aa:d8:30:38:59:86:84:e5:df:03:
98:93:f0:8d:4f:e0:9f:c3:43:28:6a:bc:4c:c2:e0:
2e:47:63:a4:4a:45:82:06:21:cf:da:e7:26:53:85:
97:b6:40:f6:7b:37:91:2c:15:38:c8:3e:29:26:7d:
3d:44:44:5c:c1:99:99:ed:c7:a8:83:c2:19:43:14:
63:f8:b0:a2:9a:61:06:d7:7d:6c:07:fa:b4:19:6e:
38:27:0a:e4:5f:05:de:29:90:9c:db:77:f0:18:47:
de:7c:24:5e:77:c0:c5:0b:ee:04:2a:b9:74:4d:a4:
78:d6:12:cc:68:78:97:d9:bd:cf:f3:c6:e3:f9:4e:
32:25:82:a9:1f:c4:74:37:91:95:de:06:28:9d:35:
bb:b7:88:eb:6a:7a:c6:ad:b0:4e:e9:1c:b2:82:25:
f7:d2:34:6c:ca:86:13:f7:f8:e7:d4:14:56:17:2f:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EC:8E:6E:C6:67:D5:E7:2E:D3:D0:77:79:78:F9:33:6D:65:A4:7F
X509v3 Authority Key Identifier:
keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/777244A4506A11EE8D08A11BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.146.0/24
IPv6:
2001:df2:e940::/48
Signature Algorithm: sha256WithRSAEncryption
1a:f5:12:88:b7:c0:ac:0b:f6:4e:ae:b5:c1:23:68:da:13:7e:
df:39:79:89:d2:aa:2a:f3:05:c6:82:df:4c:9d:7f:0d:59:58:
57:25:f1:c6:2a:22:5b:40:90:8f:4d:09:18:45:36:20:54:aa:
82:6f:f4:b6:8b:80:23:de:1c:cf:00:a5:7d:c4:54:e4:7b:7c:
85:4e:8d:df:64:3e:f4:52:e6:bb:df:44:0a:74:46:3d:d7:0b:
18:07:00:9a:a0:7e:6f:11:ae:18:92:2f:f3:4f:b2:a7:a0:ae:
b5:3e:be:fc:e5:9c:30:22:b0:8b:5d:0b:0b:2c:ba:85:c5:0a:
6b:68:6b:19:ea:6a:de:0c:d1:7d:64:61:2c:dc:ec:03:b5:0d:
9f:af:b9:c6:e1:3e:bb:10:18:83:c9:bd:29:f8:c1:f0:fa:64:
85:e3:bb:85:22:be:cb:51:7f:e8:34:ed:dc:15:00:fa:9b:2b:
e5:f7:07:72:ce:0e:a0:10:83:79:7b:6c:97:95:08:ce:79:e4:
1f:25:1a:ed:f1:9e:fb:e6:6e:55:86:39:bf:b8:0a:15:52:79:
72:59:d6:4a:8b:1f:9a:e5:d2:4c:ce:7a:c1:c4:d7:60:fd:53:
9d:92:1a:2c:e3:f0:0d:28:4c:c6:4e:f2:02:a5:34:32:cc:33:
12:5a:74:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:07:34 2025 by rpki-client