
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/2F74D644ABC711EF9CD3CE81C4F9AE02.roa
File: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (raw, json)
Hash identifier: wmmIaxLCg5K0uFc5rnys8oy6i0z0O/e/VdhovEca3nw=
Subject key identifier: CD:E8:C6:E9:17:24:C4:A5:15:C4:01:DA:A1:95:05:CC:7F:15:AB:B1
Certificate issuer: /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Certificate serial: 0430
Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/2F74D644ABC711EF9CD3CE81C4F9AE02.roa
Signing time: Fri 11 Apr 2025 00:35:01 +0000
ROA not before: Fri 11 Apr 2025 00:35:01 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139820
IP address blocks: 103.148.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:09:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1072 (0x430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Validity
Not Before: Apr 11 00:35:01 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67f863b5-8764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:0b:d1:0a:cc:70:4b:7e:2d:63:7c:61:04:
b3:55:07:6d:55:58:fd:40:0e:0c:69:b3:95:6a:47:
0a:94:b3:bb:c6:66:f4:a5:09:cf:00:45:5d:45:d3:
77:b8:80:db:d1:af:17:39:6f:6f:9b:c7:3e:54:17:
a2:07:ef:2b:f9:a9:34:17:1e:d4:b7:0a:1d:04:5e:
d1:23:e2:c0:0e:23:54:91:b3:15:96:f9:24:4d:8d:
e1:3e:51:b5:70:9d:47:50:75:78:18:3a:fc:39:99:
0e:71:aa:6d:50:22:60:44:9d:58:49:f3:9a:a5:22:
49:eb:8c:8e:af:21:e2:0c:b3:b2:14:1b:56:29:e4:
2e:52:d3:b2:2f:b1:3a:b1:54:99:52:9e:c4:5c:84:
a8:95:43:fe:a9:49:9f:2e:f0:a5:db:d0:df:bd:c7:
83:bf:14:91:4b:76:f9:89:0c:1c:a1:40:52:eb:de:
10:58:ed:d0:05:ba:eb:9a:81:d3:b0:f9:fc:63:f7:
73:a1:5b:cb:e7:1a:14:50:b2:41:43:79:30:25:87:
d7:2b:ec:72:45:65:15:d4:d6:3b:28:81:06:c4:c7:
f2:36:a6:9f:0a:2e:3d:59:dd:74:d3:5e:7d:a8:ad:
9e:3f:98:de:7a:49:8b:0e:7f:c0:10:e4:8c:5b:ce:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E8:C6:E9:17:24:C4:A5:15:C4:01:DA:A1:95:05:CC:7F:15:AB:B1
X509v3 Authority Key Identifier:
keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/2F74D644ABC711EF9CD3CE81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.92.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9d:cd:51:23:15:54:db:3d:3e:3e:94:30:1f:84:53:20:eb:
c2:1a:ea:47:1d:52:27:4d:9a:f7:59:06:18:d5:ac:0a:3a:96:
d1:94:46:da:4d:ea:40:01:ac:95:40:b0:65:24:e1:71:9c:b7:
04:98:52:86:59:c1:48:aa:c8:89:65:32:96:7e:e5:db:68:18:
82:95:23:66:03:f7:dc:cd:8f:e2:31:cd:60:43:41:9a:f5:c0:
e6:0c:d8:6c:99:b9:80:f9:f2:b9:4c:6d:47:1b:33:7f:b2:8d:
6b:3d:19:9c:35:6b:e1:43:2f:b9:1d:49:55:be:ab:32:ae:3d:
cd:4f:ec:53:7c:6a:a4:8b:5f:4d:99:65:78:17:03:34:6e:db:
b4:f3:1a:38:e6:6f:e8:c5:08:e0:af:6f:79:3c:74:a6:53:58:
6e:bc:f6:f7:6a:02:a0:ed:13:5e:1f:af:f2:8e:4d:79:e2:16:
4a:96:45:c3:e8:34:23:ec:08:15:7d:c8:77:d1:4a:bf:dd:1d:
72:36:a6:d3:7c:88:5c:43:95:fc:ee:ba:9f:ec:00:74:68:7f:
e4:68:f8:c5:20:46:da:66:8b:f6:c9:0c:a4:9f:20:54:41:41:
f1:30:8e:a3:12:e2:37:bd:e5:cf:57:0e:12:22:84:7b:20:56:
34:9e:7b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:24 2025 by rpki-client