
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/AD0B0E5E762711EBBD5D544FC4F9AE02.roa
File: AD0B0E5E762711EBBD5D544FC4F9AE02.roa (raw, json)
Hash identifier: sRmBeQkX3ZH6lPD83kjqFke2bsVl1aLInDxD3kBzJvg=
Subject key identifier: 42:B6:46:87:AC:89:97:18:1C:CF:B6:4B:DB:23:E8:74:A3:63:59:43
Certificate issuer: /CN=A91E75B7/serialNumber=B1CFE5FA6A7122C904EB110EF1A82980FC3DFA4A
Certificate serial: 0654
Authority key identifier: B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/AD0B0E5E762711EBBD5D544FC4F9AE02.roa
Signing time: Sat 01 Mar 2025 00:01:13 +0000
ROA not before: Sat 01 Mar 2025 00:01:13 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 141700
IP address blocks: 103.161.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.crl
rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1620 (0x654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E75B7, serialNumber=B1CFE5FA6A7122C904EB110EF1A82980FC3DFA4A
Validity
Not Before: Mar 1 00:01:13 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c24e49-a3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:e9:2d:d7:95:8e:75:c4:00:3f:ff:72:3e:
a5:72:57:dd:2b:58:a6:61:94:44:ea:c9:d8:bf:d8:
ae:7b:03:4f:c7:87:34:45:59:9d:34:47:8e:8d:55:
2e:a2:a0:70:ee:40:99:46:7b:63:95:c5:13:a4:a5:
61:59:53:1b:8c:ea:f5:5c:79:2c:bb:e3:5d:fb:d2:
65:77:1d:fd:da:d0:1b:b4:66:c4:9d:7c:07:f4:9b:
79:30:b4:f1:d8:74:ac:d5:9a:ea:75:bf:6b:73:ee:
61:8f:07:40:8f:10:6b:14:a7:ea:b7:3d:ec:55:a3:
c4:e1:51:b9:2b:c6:a6:8b:5c:2a:ab:d5:9a:8b:70:
25:1b:8c:b7:97:33:c9:49:9a:81:75:cd:c4:2b:ac:
9b:70:2f:09:f7:07:ba:5f:e5:a7:58:c3:27:ca:b7:
50:fc:39:36:38:0e:d0:c7:ef:b3:ee:f9:a4:ab:a0:
ba:f2:fa:c3:5c:74:80:3e:ab:a8:6f:9e:fa:f9:0e:
f9:cc:45:29:47:75:4a:b6:b8:87:c2:46:93:34:62:
f1:45:f0:bf:12:d5:03:f3:cc:8e:70:d4:5d:1e:44:
d3:59:50:27:7b:6e:c0:a0:50:99:5a:cd:8b:01:61:
ca:59:a8:10:70:3f:e6:21:cb:28:73:55:e2:06:89:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B6:46:87:AC:89:97:18:1C:CF:B6:4B:DB:23:E8:74:A3:63:59:43
X509v3 Authority Key Identifier:
keyid:B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/AD0B0E5E762711EBBD5D544FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.197.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ca:da:0b:1e:29:5e:b5:24:29:d2:91:6d:c8:04:9e:e6:b4:
0b:0a:e0:0a:32:0c:81:1c:70:a2:66:1a:7d:74:bd:b0:00:c3:
c6:4a:4c:c0:70:e4:b1:90:0b:44:0e:c1:a4:9f:a6:dd:f9:19:
62:39:33:dc:90:77:3d:62:f6:bb:8d:97:e5:0e:4d:07:6a:6e:
fb:8d:81:20:ce:87:a0:66:0e:eb:0d:c5:45:13:10:d2:be:27:
71:31:87:1a:5c:8b:a5:b3:ef:e0:79:ec:09:c3:44:9b:83:31:
44:f5:17:8b:6c:e6:56:4e:d4:f4:9f:36:45:56:0e:a6:24:ed:
be:73:17:53:a1:06:25:5b:7d:2d:bc:f8:19:a4:0f:52:3a:e1:
e2:14:3c:61:b3:9f:04:6d:0b:8c:46:80:54:bd:d2:3f:1e:26:
fa:ce:ad:6e:75:1a:b7:18:55:95:df:e4:1f:61:d5:3e:73:61:
77:54:68:97:73:b4:9a:f3:88:0b:5f:06:dc:ac:e0:3f:74:8f:
0a:f7:ad:d1:2d:5a:8a:3c:c6:9b:1b:98:60:f8:52:29:1b:26:
89:1d:c2:86:dc:23:64:ca:80:fb:b9:50:25:77:7a:da:46:53:
e3:19:86:be:8b:c0:49:3e:38:5c:81:51:0a:bb:9c:3f:46:7e:
8f:be:b7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:05:06 2025 by rpki-client