
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/2B6E7D32FC5311ECBCE27247C4F9AE02.roa
File: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (raw, json)
Hash identifier: YWG8ZTu1MykDiOqV56oC4ORjTxnyQ1AQFIwIn6af5iU=
Subject key identifier: B3:05:E5:21:23:E8:B1:7C:0D:48:13:88:9E:72:62:FD:B6:FB:AC:AE
Certificate issuer: /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial: 060D
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/2B6E7D32FC5311ECBCE27247C4F9AE02.roa
Signing time: Thu 10 Jul 2025 23:35:01 +0000
ROA not before: Thu 10 Jul 2025 23:35:01 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 38136
IP address blocks: 103.167.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1549 (0x60d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Validity
Not Before: Jul 10 23:35:01 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68704e25-5966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:43:0c:67:57:5a:c9:cb:3f:c3:26:70:6b:
8e:ec:21:b0:06:eb:72:f9:ea:c8:0b:20:f2:b2:55:
1b:e6:ed:af:0d:3a:7f:d1:a1:57:d2:a5:02:27:03:
db:b7:d0:2a:c5:d6:56:10:68:2d:55:26:aa:53:bb:
15:0c:17:f8:23:fa:36:7e:41:68:50:ff:e8:48:89:
b5:d1:81:d6:3d:e2:3d:08:28:ba:36:44:c9:e3:75:
7d:44:f2:7b:01:07:c3:e5:d0:3e:38:80:5d:c9:b6:
29:70:47:77:70:77:09:46:54:0c:f3:8f:9e:65:11:
ae:69:d7:22:d2:cb:14:a0:25:60:ac:cf:70:25:cf:
a4:da:eb:ef:44:7a:55:b9:89:3b:1c:f4:66:89:21:
1d:a1:40:8c:ca:8d:b9:c1:9f:4b:f0:b5:38:6b:bf:
96:00:dc:78:f2:21:88:5b:33:6b:32:2e:c7:6e:b9:
ba:23:51:50:70:db:e8:81:25:fa:58:26:7b:12:66:
d1:20:fb:ab:f6:55:78:4c:2f:3d:52:ca:a5:2b:79:
ba:09:25:37:ee:4b:f3:e5:28:97:40:d9:cf:c1:cd:
90:0b:87:09:2e:e0:63:b9:3d:b7:fa:1b:0f:aa:fe:
6a:85:c3:84:ae:c5:e0:3f:26:a7:06:f6:25:bb:fc:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:05:E5:21:23:E8:B1:7C:0D:48:13:88:9E:72:62:FD:B6:FB:AC:AE
X509v3 Authority Key Identifier:
keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/2B6E7D32FC5311ECBCE27247C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.134.0/23
Signature Algorithm: sha256WithRSAEncryption
42:fc:d3:59:72:69:dd:d2:67:0e:91:75:28:09:8a:2f:43:8b:
54:94:ee:71:2e:c6:c4:cc:22:6d:87:1d:3c:8c:f9:43:cf:10:
ed:b7:7d:7a:97:c3:ad:ca:33:af:bb:53:67:20:a9:41:45:6c:
ce:c1:d5:71:12:03:6b:2b:d5:ce:e1:b3:63:7d:79:d0:ed:e0:
7e:ff:23:55:d2:68:70:bc:11:5e:97:31:55:50:9f:17:1d:3d:
2c:05:0b:f3:f7:5d:19:01:0a:cd:53:2f:62:21:d6:d9:91:94:
2b:c4:15:41:24:c9:42:04:99:3a:1c:bb:a3:1c:bd:a6:bb:24:
ca:5c:b7:53:20:f9:92:50:ae:ee:9e:53:04:9a:1b:32:e7:2e:
59:42:2c:4c:e2:aa:46:45:9a:44:a6:3d:ff:09:3b:5d:2c:2b:
7d:d3:dd:b8:66:6a:06:e5:b5:a4:f3:9e:07:4b:a3:5f:02:45:
98:12:e4:b4:06:02:5c:6a:08:0f:70:74:b6:cf:24:2f:80:28:
e3:c5:ee:22:5d:2f:32:56:db:e2:8e:d0:81:5a:6d:46:fc:d2:
cf:e2:04:00:d8:53:6d:2b:67:00:2b:69:7a:91:ac:df:42:3e:
33:19:99:32:ca:b4:2d:c1:9f:c4:dc:a6:55:14:48:74:ed:fd:
28:6d:62:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:31:27 2025 by rpki-client