
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa
File: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (raw, json)
Hash identifier: ZFyON0cFfqWSYmJESFiDKpaoMViJEmJBEJHpK/VixB8=
Subject key identifier: 99:6F:63:ED:14:3D:54:5C:21:90:90:0E:F6:B1:DC:B8:3A:D0:86:11
Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B
Certificate serial: 0620
Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa
Signing time: Sat 10 May 2025 23:02:13 +0000
ROA not before: Sat 10 May 2025 23:02:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142053
IP address blocks: 103.165.184.0/24 maxlen: 24
2001:df6:7080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl
rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B
Validity
Not Before: May 10 23:02:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681fdaf5-6512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:58:bd:6d:57:58:18:05:d1:f6:11:bf:be:
2c:b3:b3:36:27:3f:92:9d:f3:43:a9:8e:70:6a:c8:
73:57:17:c6:40:8f:f1:85:e7:89:05:18:9f:1f:ef:
8f:98:de:76:dd:d1:21:37:76:53:7d:aa:46:68:94:
d1:c9:d1:b7:aa:24:3b:83:45:71:2f:47:a5:9d:e2:
8a:d1:3e:6f:b7:a8:9c:9e:a2:ed:9a:05:39:f4:08:
69:39:2e:0e:39:45:a4:da:99:78:68:03:f4:43:75:
1a:b0:83:b5:79:2c:a8:59:89:89:12:57:3b:72:1c:
75:9c:23:09:d8:f1:fa:c2:6c:4e:01:15:8e:65:f9:
3b:d0:99:89:9b:81:de:b2:a4:62:46:dd:4a:a0:54:
d7:77:e4:fd:f1:22:81:13:27:44:cd:5a:d2:3e:37:
cd:d3:57:3d:29:fd:48:2d:84:ac:a9:ab:02:ba:e0:
cc:41:c0:4d:cb:90:f2:34:03:e4:ca:d5:cf:c8:d7:
b1:d4:2a:0f:5b:48:c2:5c:97:49:ba:de:7b:7c:d2:
51:f8:da:7e:98:0f:fe:38:94:d0:10:da:cc:72:b4:
1a:c8:ae:56:84:8c:a4:1e:eb:77:7a:7e:7a:1a:95:
6d:65:4d:9a:f1:12:7f:4a:0e:80:8b:51:58:53:50:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6F:63:ED:14:3D:54:5C:21:90:90:0E:F6:B1:DC:B8:3A:D0:86:11
X509v3 Authority Key Identifier:
keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.184.0/24
IPv6:
2001:df6:7080::/48
Signature Algorithm: sha256WithRSAEncryption
79:d0:26:83:e5:3c:b5:4d:d7:f2:a5:d3:33:1e:c0:7f:ac:97:
32:60:ab:d7:dc:ac:8e:03:cd:e5:04:42:13:06:67:d4:80:37:
33:5e:52:75:21:0a:13:81:2f:02:05:19:6b:d7:99:52:17:6f:
79:e1:bc:ef:7a:b1:44:ee:b1:92:d7:b4:14:da:1e:21:be:1f:
70:c4:46:32:32:89:56:40:32:a3:9c:76:dc:e8:d7:37:3c:56:
ec:ab:c2:e9:ef:7b:0f:ff:1f:15:67:33:c3:f0:92:fa:d0:66:
9e:ab:1b:b5:2e:be:f4:e8:cf:b7:59:f6:09:e6:bc:6d:2e:2a:
20:a3:50:89:f9:01:6a:78:62:06:06:02:1d:af:4c:32:00:42:
a2:4a:52:51:4e:d1:4e:00:b8:0e:a1:4d:10:20:3e:c7:f7:d1:
e0:3c:c8:83:57:86:36:fc:75:a3:59:24:57:c2:7a:90:50:56:
f8:d1:70:0a:5e:f4:f9:30:54:f9:00:d3:d9:85:1d:09:f2:81:
ab:e1:fe:fc:66:31:9f:46:5e:db:0d:c1:2b:f2:36:df:ce:62:
b2:c2:1e:55:44:52:14:0d:5e:79:f1:33:d5:88:4d:4b:5f:ac:
6d:b8:1b:b2:53:e7:35:3d:37:c8:ef:ec:fd:3c:2e:8f:ad:84:
c8:f1:16:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:08:03 2025 by rpki-client