
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/F7335D9484D911EC89E5246EC4F9AE02.roa
File: F7335D9484D911EC89E5246EC4F9AE02.roa (raw, json)
Hash identifier: zIQCvO1cYT9GDGEyMPF0tBOYTt1JAajUXmcBSrFDxrs=
Subject key identifier: 00:2D:DC:A0:F0:BC:4D:41:C2:19:4F:0D:C9:69:7C:21:B6:E6:38:AC
Certificate issuer: /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Certificate serial: 03AA
Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/F7335D9484D911EC89E5246EC4F9AE02.roa
Signing time: Sat 01 Mar 2025 03:03:55 +0000
ROA not before: Sat 01 Mar 2025 03:03:55 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 149489
IP address blocks: 103.181.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:26:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B6A, serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Validity
Not Before: Mar 1 03:03:55 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c2791a-7a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:c3:38:bb:b9:c7:24:9a:b5:70:10:53:0a:
ed:2a:4d:fd:d4:2e:f2:42:02:58:f5:e8:8a:86:b2:
74:24:80:9a:ff:e8:4f:d6:46:ea:2b:c4:ed:21:53:
37:ed:f7:24:49:94:c9:cb:0e:93:29:de:8b:20:f9:
dd:37:07:8a:f2:1d:5a:c2:af:a5:1c:c5:2a:be:f2:
8c:55:a5:9d:a1:2d:67:f4:8b:59:0c:b6:40:37:d8:
1d:f2:02:29:91:af:75:0b:a1:68:5b:11:8c:5e:00:
09:0d:f5:5c:9f:48:93:46:60:9b:89:1f:7c:81:b7:
10:79:05:8f:14:1a:ad:53:a0:35:b4:a5:0c:c0:a2:
f6:a6:40:47:19:7a:0f:79:75:83:98:a8:e1:58:34:
8b:f5:3a:8a:ca:2d:c9:af:22:94:26:5c:f2:63:b9:
0f:aa:3c:7d:70:29:f4:6a:98:9f:19:ff:c2:16:d3:
c4:73:79:08:41:5f:98:1d:81:44:e7:6a:75:1d:4f:
89:95:f0:b2:0c:ca:6c:85:ef:7e:61:f1:17:74:50:
99:7a:bf:f4:4f:ac:cf:9a:48:bc:87:ef:78:57:1d:
d4:b2:b7:6c:07:03:f5:dc:2c:56:af:31:5d:36:c6:
f8:66:6c:ca:c8:c0:66:34:9e:44:a0:35:bb:90:35:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2D:DC:A0:F0:BC:4D:41:C2:19:4F:0D:C9:69:7C:21:B6:E6:38:AC
X509v3 Authority Key Identifier:
keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/F7335D9484D911EC89E5246EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.28.0/23
Signature Algorithm: sha256WithRSAEncryption
41:9d:c9:5a:4a:62:1a:d7:cf:61:b0:b7:ae:54:bc:21:9e:b2:
04:76:29:6b:83:1e:70:a0:8d:eb:69:88:00:d0:35:d0:08:93:
dc:c0:dd:ee:a2:02:cf:18:5f:1d:cb:35:df:7b:01:62:d7:f6:
f4:70:2e:f4:32:c0:39:48:5f:c0:2f:1d:c9:50:9d:5d:ae:cc:
0f:26:ae:67:fa:d2:02:f3:93:f7:52:10:3d:8f:4f:54:4e:88:
a6:fb:57:26:34:7e:19:7d:15:14:da:be:27:4d:4f:a2:3b:9e:
cb:6d:d7:5a:53:f4:e6:78:f3:23:0c:e7:61:96:61:f1:3b:9f:
35:b3:23:fd:bc:b4:26:cd:09:db:64:5a:20:56:8c:90:c1:83:
75:10:b8:3e:28:43:a2:39:19:15:40:44:eb:aa:6d:db:29:71:
64:fd:23:46:c8:fa:ec:b6:47:7f:11:ed:c6:ca:5c:62:59:1c:
28:3f:de:1c:fd:45:db:69:23:67:61:2a:d4:da:69:a6:e2:e9:
84:12:26:05:e7:b4:52:6a:39:91:5d:ef:7c:42:3d:e6:a9:01:
d7:dc:ee:7c:25:ca:83:bf:32:f1:b9:91:6a:35:88:fd:8f:e7:
87:6e:3f:d9:22:e4:59:d6:24:00:70:13:8c:ed:4e:53:7f:6b:
59:a5:50:65
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRCNkExMTAvBgNVBAUTKEEyMDZBRkM5NjZBNjlFNzBCNDg5QjM4RjEwNDgzREMx
RkE1RDNFMjIwHhcNMjUwMzAxMDMwMzU1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2MyNzkxYS03YTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ivDOLu5xySatXAQUwrtKk391C7yQgJY9eiKhrJ0JICa/+hP1kbqK8TtIVM3
7fckSZTJyw6TKd6LIPndNweK8h1awq+lHMUqvvKMVaWdoS1n9ItZDLZAN9gd8gIp
ka91C6FoWxGMXgAJDfVcn0iTRmCbiR98gbcQeQWPFBqtU6A1tKUMwKL2pkBHGXoP
eXWDmKjhWDSL9TqKyi3JryKUJlzyY7kPqjx9cCn0apifGf/CFtPEc3kIQV+YHYFE
52p1HU+JlfCyDMpshe9+YfEXdFCZer/0T6zPmki8h+94Vx3UsrdsBwP13CxWrzFd
Nsb4ZmzKyMBmNJ5EoDW7kDXi8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAAt3KDw
vE1BwhlPDclpfCG25jisMB8GA1UdIwQYMBaAFKIGr8lmpp5wtImzjxBIPcH6XT4i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI2QS9CNDgxMzM0Mjg0
RDcxMUVDOEUwNzQxNkRDNEY5QUUwMi9vZ2F2eVdhbW5uQzBpYk9QRUVnOXdmcGRQ
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29nYXZ5V2Ftbm5DMGliT1BFRWc5d2ZwZFBpSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTRCNkEvQjQ4MTMzNDI4NEQ3MTFFQzhFMDc0MTZEQzRGOUFFMDIvRjczMzVEOTQ4
NEQ5MTFFQzg5RTUyNDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFntRwwDQYJKoZIhvcNAQELBQADggEBAEGdyVpKYhrXz2Gw
t65UvCGesgR2KWuDHnCgjetpiADQNdAIk9zA3e6iAs8YXx3LNd97AWLX9vRwLvQy
wDlIX8AvHclQnV2uzA8mrmf60gLzk/dSED2PT1ROiKb7VyY0fhl9FRTavidNT6I7
nstt11pT9OZ48yMM52GWYfE7nzWzI/28tCbNCdtkWiBWjJDBg3UQuD4oQ6I5GRVA
ROuqbdspcWT9I0bI+uy2R38R7cbKXGJZHCg/3hz9RdtpI2dhKtTaaabi6YQSJgXn
tFJqOZFd73xCPeapAdfc7nwlyoO/MvG5kWo1iP2P54duP9ki5FnWJABwE4ztTlN/
a1mlUGU=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:30:01 2025 by rpki-client