
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
File: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (raw, json)
Hash identifier: lZkWd47Uz2uf21zAmsLBWU8pUQNaeJCjWHd7MjYuTT0=
Subject key identifier: D3:6B:A4:E8:DD:A3:65:BE:12:4C:D4:04:F7:11:15:96:A2:0C:8D:47
Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial: 0188
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
Signing time: Thu 23 Oct 2025 05:51:38 +0000
ROA not before: Thu 23 Oct 2025 05:51:38 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 19905
IP address blocks: 103.131.106.0/24 maxlen: 24
103.142.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Validity
Not Before: Oct 23 05:51:38 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68f9c26a-1a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:7d:04:67:da:29:25:5f:fd:b3:e5:7d:be:
23:45:16:58:98:54:61:76:53:32:e1:c5:12:5d:f4:
80:af:97:65:f2:1f:56:5e:26:23:a4:5f:1f:5c:02:
02:f5:79:c6:2e:79:c1:6d:97:7f:67:9f:16:e7:ea:
46:23:37:e7:8e:aa:7a:83:d0:08:5d:08:7e:3d:2c:
b2:79:a0:e2:f8:42:5e:07:f5:22:0f:a1:34:be:5d:
50:42:53:a9:1d:96:25:83:d9:39:1d:c1:e6:ea:33:
17:31:fb:47:f1:e3:e3:3f:4f:62:51:71:f6:b5:58:
c9:21:ed:ec:97:92:8b:42:10:95:b0:18:b6:b9:ce:
c4:cb:6f:9f:1b:75:cd:cc:21:a9:45:8e:1c:93:c1:
30:b6:82:9a:1b:7e:2e:0c:d4:39:06:30:0d:e4:2c:
59:2c:28:97:f8:77:08:b4:09:ab:1c:5e:9c:1e:22:
fc:09:a4:98:dd:9d:8c:ad:ef:8a:b3:20:d4:61:18:
c7:ed:58:cd:e7:b4:cc:03:e9:98:52:48:8e:4c:8e:
2e:8a:c9:32:85:78:19:f1:4f:c5:b2:dc:d7:d2:83:
30:8e:23:de:1b:95:f0:c3:ff:de:a2:cf:8b:17:20:
23:e6:5d:7c:90:4a:6c:36:b0:c6:72:61:fc:81:74:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6B:A4:E8:DD:A3:65:BE:12:4C:D4:04:F7:11:15:96:A2:0C:8D:47
X509v3 Authority Key Identifier:
keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.106.0/24
103.142.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:7b:a4:c9:9e:3b:60:51:8b:5d:8e:45:24:af:bf:e8:6b:12:
20:0e:dd:9f:18:09:10:85:10:41:1c:68:64:99:d4:4c:02:4c:
f3:73:fc:44:8c:0c:2f:c2:4c:18:2f:ed:44:27:be:66:fa:44:
60:66:d2:9f:7b:92:fe:79:98:53:43:c9:0a:b7:17:5b:bf:8c:
94:93:27:b8:f3:ff:cf:5c:be:73:bf:2a:43:7e:b8:6e:fb:06:
96:b0:c2:01:a6:5d:43:c6:f4:dd:2a:c4:72:25:ad:b7:83:24:
1d:0c:9e:78:f2:ee:eb:eb:6b:96:3e:9f:bf:b3:e3:fa:9c:7e:
7b:4c:22:5d:b1:a9:ea:51:fa:cc:1e:c2:d8:37:c6:62:2a:55:
e8:c3:e1:5d:50:f0:d2:12:0f:43:d0:2d:db:87:2a:8a:77:8a:
37:51:2c:ef:ae:6a:5a:6b:22:1b:cc:66:f6:14:1b:fd:36:c4:
8d:2a:7d:1f:be:4b:78:29:fd:3d:35:e7:6b:9e:43:5d:52:a9:
da:a4:2b:11:ef:23:71:eb:8b:6d:37:8a:07:29:3b:e9:22:da:
57:d0:ad:e7:50:c8:0e:e5:1a:aa:2a:ba:60:d3:e6:ab:44:31:
60:30:c2:11:e8:12:36:23:e0:51:7e:e4:b8:a3:65:9e:7f:9f:
ec:c3:f5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:00:09 2025 by rpki-client