
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
File: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (raw, json)
Hash identifier: Pt5AOEwwZxq7lVNTYxsL3f5FIIGV0LQiKBFU4Ct/fFM=
Subject key identifier: 2F:E7:38:CA:58:E0:F6:D8:DF:FA:A6:F8:48:98:36:4A:76:09:13:BA
Certificate issuer: /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial: 0DDB
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
Signing time: Wed 08 Oct 2025 18:18:33 +0000
ROA not before: Wed 08 Oct 2025 18:18:33 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139604
IP address blocks: 103.142.80.0/23 maxlen: 24
2001:df1:3680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3547 (0xddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Validity
Not Before: Oct 8 18:18:33 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68e6aaf9-fe64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:44:b7:bb:8f:a0:e6:f5:37:08:e2:35:bf:
78:e5:7b:78:c2:31:61:b7:00:7b:f3:33:fb:d3:25:
34:24:12:95:a1:22:bc:cf:c4:17:78:ed:45:80:46:
d8:cf:86:6f:31:f4:57:44:d0:21:08:27:8c:10:9b:
da:e4:aa:f9:b5:51:6b:f3:30:87:fd:95:22:cf:c4:
74:bc:1b:52:b0:94:82:39:45:fa:f8:af:cb:62:5d:
07:e5:d0:d6:73:ee:f1:0a:e5:b3:bf:5c:40:e5:7d:
69:a1:f8:07:b0:53:6c:ae:53:58:56:6c:cb:36:3b:
c1:45:25:b5:61:86:7f:0d:b5:04:e0:1b:a0:2d:5b:
fb:bb:9a:33:41:6f:1f:c3:9e:29:5e:bf:2c:01:36:
ed:63:30:a8:6a:9c:ba:b4:6e:0e:4f:ee:bb:32:fe:
4c:40:5f:97:43:4f:7f:f0:4a:9b:f3:e2:b7:dd:fb:
6d:1f:a8:fd:d1:f1:64:84:32:32:e6:78:5e:ab:4b:
de:00:fb:33:0c:d4:de:bc:16:0e:48:3b:d7:78:3e:
3a:ed:48:14:4f:2e:bc:b6:98:e4:10:e3:7d:9f:9b:
71:96:23:dd:55:a8:db:a5:9b:2a:02:62:eb:49:b6:
9e:86:89:ee:83:ad:94:ae:2b:82:54:d8:bd:7d:b6:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E7:38:CA:58:E0:F6:D8:DF:FA:A6:F8:48:98:36:4A:76:09:13:BA
X509v3 Authority Key Identifier:
keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.80.0/23
IPv6:
2001:df1:3680::/48
Signature Algorithm: sha256WithRSAEncryption
72:b2:e5:58:18:11:b3:4f:62:9e:bb:fc:c7:12:0f:f5:62:61:
e3:f7:53:82:4e:94:e4:bf:e2:4d:93:66:03:0a:5f:ff:ad:ca:
c8:9e:81:7e:8b:29:df:d6:eb:71:95:7d:dd:24:e3:d4:ed:ac:
43:f5:92:65:b9:6d:37:94:65:cb:59:a4:12:8d:c2:88:c3:35:
38:09:22:2f:9d:ab:de:96:b2:7e:5b:c1:f9:27:bf:ee:58:4d:
53:bc:24:22:4b:4c:78:2d:c0:21:68:03:ab:62:38:85:d2:6e:
5c:e6:17:69:39:1c:ba:73:14:7d:15:6e:c5:24:c3:34:45:dd:
01:a5:d3:54:21:61:a2:27:c4:1d:12:73:c2:f5:16:23:76:20:
88:e6:3c:2a:aa:3f:b2:c9:85:df:4d:82:4a:b9:83:f5:a8:cb:
c1:b7:82:e0:2b:9e:42:54:1f:27:24:ef:11:b2:6a:6c:a0:d1:
96:aa:18:b3:53:2c:8d:0e:33:b7:17:d8:7d:b8:de:14:ba:bd:
41:d2:b8:6b:9d:16:f9:0e:81:f5:47:96:c9:fd:5a:a2:53:e9:
1c:a5:f6:b5:44:1b:b1:99:68:5b:44:2d:32:a6:77:8b:98:84:
ca:c8:82:4f:d9:08:8b:c5:19:2d:2a:ba:7f:b6:fc:5a:63:63:
23:09:3c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:13:36 2025 by rpki-client