
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
File: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (raw, json)
Hash identifier: DlL3SJChckNOqua785W26axk8/KnPljvxeRS/X/r6xg=
Subject key identifier: 6B:AB:A0:91:4E:46:73:5B:09:A7:0F:C4:98:C1:F5:73:F9:EB:CE:07
Certificate issuer: /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Certificate serial: 045F
Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
Signing time: Wed 05 Nov 2025 00:44:54 +0000
ROA not before: Wed 05 Nov 2025 00:44:54 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 140900
IP address blocks: 103.179.246.0/24 maxlen: 24
103.179.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119 (0x45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0AAD, serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Validity
Not Before: Nov 5 00:44:54 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=690a9e06-fbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:86:c7:92:47:40:06:1a:38:9d:89:22:61:
12:2e:f5:25:3b:d9:8b:56:ce:14:4e:d8:ab:a5:a5:
4f:b1:11:6a:03:d4:37:8f:d6:50:68:a2:8b:d8:7b:
0e:f6:2c:28:eb:4d:2c:77:ea:68:ff:bc:46:7e:95:
96:c2:b9:97:e0:c0:43:3d:24:c4:9b:44:82:9a:d5:
12:71:67:37:41:3b:51:8b:31:d4:4b:e1:f0:da:48:
2e:c1:d1:2d:10:e9:cb:77:bd:b2:33:20:be:7e:2b:
bc:a5:4f:ed:d4:1c:7a:ad:8d:e4:ff:d4:bc:da:81:
c0:8a:1c:de:8c:72:7d:49:4b:f7:1b:b0:8f:b8:e3:
2d:3c:92:41:9e:c2:f1:8f:33:2a:bd:01:62:4f:72:
50:a1:56:ed:52:7a:73:11:9c:d2:fa:11:27:a6:40:
80:9d:fc:2f:15:11:a2:5d:09:74:d7:78:48:2e:03:
a3:68:ae:df:3c:f5:66:69:7a:5d:8c:24:61:0c:5c:
4b:ff:4c:11:cd:dc:ce:a2:3e:36:43:bd:b9:f8:78:
cc:d1:ca:bb:a3:56:6f:0e:21:92:a3:7c:87:63:33:
66:37:a2:09:f7:d6:ae:60:19:ad:7b:96:76:5c:f3:
b7:6a:6c:72:d9:4f:a3:a8:49:b9:00:cd:80:14:ce:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AB:A0:91:4E:46:73:5B:09:A7:0F:C4:98:C1:F5:73:F9:EB:CE:07
X509v3 Authority Key Identifier:
keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.246.0/23
Signature Algorithm: sha256WithRSAEncryption
37:1f:ba:0e:f1:86:5f:ec:08:4d:53:4b:09:26:46:d2:b3:7b:
06:17:4b:9a:d0:36:5a:84:18:b4:ce:ae:21:e3:24:03:87:44:
a0:f4:5d:a4:1b:b4:c1:16:bb:23:a4:a0:32:22:1c:cc:b9:73:
f6:0d:38:7e:63:0d:4f:9f:0f:97:dd:5b:99:e1:e4:a4:15:c4:
29:cd:0e:36:a1:07:79:22:9a:5b:32:5d:af:19:b7:f7:e4:0e:
b3:77:81:f0:8e:1b:f5:7a:d0:40:04:c9:d4:ad:93:06:00:86:
b7:f7:9f:fc:9e:84:6a:ff:a4:91:54:ad:40:89:37:39:25:81:
e3:4a:a4:ad:4f:5c:84:0e:f6:d7:fe:80:1c:86:13:e6:6b:bf:
5e:7e:2e:d5:f4:4e:6f:36:50:85:a6:1e:6c:59:71:34:07:6b:
82:4c:57:ee:39:0f:44:58:c1:46:3a:36:c4:e5:a7:0a:7f:9d:
dd:83:78:43:18:48:0d:ae:17:ea:bb:22:d2:08:06:01:16:3f:
70:81:b6:30:c6:c5:d0:b0:bd:fc:c2:80:6d:e4:54:83:26:28:
a4:6f:f0:c2:2e:2a:63:80:a3:e4:4d:8f:c1:f6:0d:d4:76:bb:
70:c2:ad:a9:55:47:8a:0c:85:c8:e3:65:43:ab:2b:06:ea:ed:
f4:72:1c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:21:19 2025 by rpki-client