
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/EC8B7E82450E11EB887ECF6FC4F9AE02.roa
File: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (raw, json)
Hash identifier: 4m4gcDBDEGLhIqThmo+gOWnFoA1rBH2fxZa2WsNnbcQ=
Subject key identifier: CD:17:C4:E2:53:25:87:EC:95:F4:EF:F6:DE:F0:6A:9B:EE:F6:AB:21
Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial: 0810
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/EC8B7E82450E11EB887ECF6FC4F9AE02.roa
Signing time: Sun 02 Nov 2025 21:11:02 +0000
ROA not before: Sun 02 Nov 2025 21:11:02 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141191
IP address blocks: 103.156.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064 (0x810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Validity
Not Before: Nov 2 21:11:02 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6907c8e6-1148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:b1:e3:71:fe:2a:3c:50:39:00:5f:f2:fc:
8a:25:59:fe:e8:91:e3:3b:6a:bc:cf:b9:b4:7b:30:
96:5f:b0:67:37:86:d6:bd:f5:68:6a:1f:79:6d:c3:
b7:42:b3:ba:53:d6:5a:34:0f:27:9f:67:20:fe:3a:
81:57:6d:19:11:8c:fb:a0:21:f0:f5:d9:73:a4:ad:
44:7a:93:f3:c5:58:23:70:fe:d6:88:3b:e1:41:32:
34:26:56:13:9e:32:74:f0:9b:f0:84:26:88:43:50:
10:bb:a7:fc:b1:b5:d4:b9:ad:7d:99:cd:99:b3:85:
73:54:0c:9a:1c:ed:a0:c8:90:ec:53:17:4c:ef:35:
24:63:65:c7:9c:ab:b9:91:7d:87:25:db:40:0b:88:
43:47:e6:f0:83:49:34:91:a5:35:96:24:06:8e:0d:
0e:07:7d:f8:02:22:53:bb:90:04:06:e8:ee:32:59:
91:e7:a5:ff:21:17:82:98:44:da:19:ad:01:18:c6:
ca:c8:d3:00:27:4e:35:20:1f:67:f7:d0:c4:b7:28:
e8:2e:26:b1:0f:26:c4:ce:b9:36:71:c3:bf:ce:6b:
dd:c2:2b:00:62:8b:fb:8a:4a:9e:ed:0e:4b:16:42:
44:b7:c2:2a:f7:e4:55:6b:92:a2:e9:a4:5e:3e:c7:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:17:C4:E2:53:25:87:EC:95:F4:EF:F6:DE:F0:6A:9B:EE:F6:AB:21
X509v3 Authority Key Identifier:
keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/EC8B7E82450E11EB887ECF6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.22.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:c6:11:e6:3e:b8:cb:10:9a:bc:81:3b:9d:a9:d2:81:95:80:
3d:77:74:5b:ca:03:05:01:67:47:ae:14:87:e3:dc:e6:31:26:
a8:28:22:45:8b:9c:06:c6:b8:3f:91:39:14:72:74:03:64:dd:
c7:03:2e:50:95:61:b5:a9:71:96:8a:d1:0d:56:d7:75:c6:87:
30:f0:13:ec:dd:3f:e2:77:6b:e2:29:91:92:70:14:b5:4c:d2:
ed:e5:32:f6:58:4c:52:01:35:d0:b3:8b:d1:f2:c4:c5:66:4b:
55:c7:cd:a4:8f:50:8b:5e:b2:ac:be:7e:d4:38:db:1c:95:1b:
69:16:40:cc:9d:0c:11:8f:5e:8f:f8:43:aa:2c:e4:63:5d:b3:
ec:66:12:c9:87:10:d0:17:fb:ac:a0:71:8d:84:9c:0e:a8:eb:
ec:7a:28:66:5e:86:76:d1:45:96:e3:af:c8:73:79:8c:50:c8:
f8:18:24:6b:23:59:1b:7e:8f:b1:55:fb:07:19:ee:04:d6:79:
6d:74:3a:09:95:d2:7e:ab:9d:9e:b2:3f:a8:c0:7f:dd:2b:11:
be:c1:85:56:b4:32:ea:f3:df:86:eb:f3:2d:75:a1:dc:dd:11:
54:51:63:d8:37:eb:c5:1a:6f:ae:60:30:b6:36:3d:01:93:b1:
5a:fd:a2:34
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVDOTI5Mzc5RUVG
QUQ1QkNCQzAwHhcNMjUxMTAyMjExMTAyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA3YzhlNi0xMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApj2x43H+KjxQOQBf8vyKJVn+6JHjO2q8z7m0ezCWX7BnN4bWvfVoah95bcO3
QrO6U9ZaNA8nn2cg/jqBV20ZEYz7oCHw9dlzpK1EepPzxVgjcP7WiDvhQTI0JlYT
njJ08JvwhCaIQ1AQu6f8sbXUua19mc2Zs4VzVAyaHO2gyJDsUxdM7zUkY2XHnKu5
kX2HJdtAC4hDR+bwg0k0kaU1liQGjg0OB334AiJTu5AEBujuMlmR56X/IReCmETa
Ga0BGMbKyNMAJ041IB9n99DEtyjoLiaxDybEzrk2ccO/zmvdwisAYov7ikqe7Q5L
FkJEt8Iq9+RVa5Ki6aRePscslQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM0XxOJT
JYfslfTv9t7wapvu9qshMB8GA1UdIwQYMBaAFDqF1EfhhnX+1a4FySk3nu+tW8vA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODM4Ri9BOUY3NzM5ODA2
RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2RmN1ZyZ1hKS1RlZTc2MWJ5
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09vWFVSLUdHZGY3VnJnWEpLVGVlNzYxYnk4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTgzOEYvQTlGNzczOTgwNkUxMTFFQjlCMzM1QzZEQzRGOUFFMDIvRUM4QjdFODI0
NTBFMTFFQjg4N0VDRjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnnBYwDQYJKoZIhvcNAQELBQADggEBAL3GEeY+uMsQmryB
O52p0oGVgD13dFvKAwUBZ0euFIfj3OYxJqgoIkWLnAbGuD+RORRydANk3ccDLlCV
YbWpcZaK0Q1W13XGhzDwE+zdP+J3a+IpkZJwFLVM0u3lMvZYTFIBNdCzi9HyxMVm
S1XHzaSPUItesqy+ftQ42xyVG2kWQMydDBGPXo/4Q6os5GNds+xmEsmHENAX+6yg
cY2EnA6o6+x6KGZehnbRRZbjr8hzeYxQyPgYJGsjWRt+j7FV+wcZ7gTWeW10OgmV
0n6rnZ6yP6jAf90rEb7BhVa0Murz34br8y11odzdEVRRY9g368Uab65gMLY2PQGT
sVr9ojQ=
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:03:41 2025 by rpki-client