
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/5CB1666C177711EEAB396D1CC4F9AE02.roa
File: 5CB1666C177711EEAB396D1CC4F9AE02.roa (raw, json)
Hash identifier: i/4qbq1olZ1yrHtpcck4H45nkVfaKLB8DIL2yG7lkLw=
Subject key identifier: 86:1C:EA:B6:D6:FE:E6:9B:11:8E:D6:39:4E:CA:B8:7C:A5:AC:A5:D7
Certificate issuer: /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
Certificate serial: 017C
Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/5CB1666C177711EEAB396D1CC4F9AE02.roa
Signing time: Thu 03 Jul 2025 04:08:06 +0000
ROA not before: Thu 03 Jul 2025 04:08:06 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.229.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl
rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
Validity
Not Before: Jul 3 04:08:06 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68660226-ca68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:04:78:ea:0e:b7:3f:53:0c:e9:3d:b9:6e:
97:91:70:02:bb:55:6a:74:44:d4:a7:0a:a3:89:44:
2f:fa:72:5e:9b:a4:2e:33:f6:c7:25:cb:37:de:dd:
7a:a8:de:f5:68:97:32:5e:e2:36:d2:71:4c:92:e8:
57:70:16:66:40:74:8e:82:67:32:09:f3:91:39:e6:
3d:1e:e2:36:98:97:76:ac:c1:85:d7:6d:94:9b:b3:
97:52:52:5f:0c:08:a6:2c:d8:77:b1:29:b6:1f:4a:
94:c6:99:3e:7e:eb:2c:cf:9d:58:0b:bb:80:a5:4c:
6e:b0:8f:8e:85:5d:73:69:fe:bb:f0:b6:7d:4d:93:
d8:46:ba:12:52:05:ee:50:8d:a8:40:fc:fd:81:a4:
0f:c6:83:ba:10:49:41:54:0a:3d:0c:b0:cb:cc:92:
6f:4e:25:12:6c:fc:6b:91:a0:b6:62:c6:1e:b0:41:
6d:97:e7:e3:5d:ed:e2:11:4c:3f:a4:ea:a8:71:96:
8a:b4:f0:32:68:d9:09:af:f9:98:d7:32:5e:01:95:
99:a1:6c:c0:bd:0c:5a:39:94:68:3e:01:d8:db:d7:
46:99:51:4f:95:68:6e:63:41:09:2c:8b:a8:e9:ee:
97:17:fa:32:da:bb:a9:66:bf:d4:73:c8:a3:44:fe:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:EA:B6:D6:FE:E6:9B:11:8E:D6:39:4E:CA:B8:7C:A5:AC:A5:D7
X509v3 Authority Key Identifier:
keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/5CB1666C177711EEAB396D1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.233.0/24
Signature Algorithm: sha256WithRSAEncryption
06:4c:3c:33:ae:6b:90:0e:ce:d9:73:ec:fc:a1:d5:18:b5:4b:
a7:3a:d7:e7:13:b0:d6:cf:7f:38:29:35:4e:80:2e:47:8c:27:
60:08:e7:e2:d8:dd:0a:ed:f3:be:6c:8c:4b:52:99:cf:76:25:
2e:a7:9b:ce:0d:c1:a8:76:df:9d:f5:1e:f1:b2:3f:cc:86:56:
10:2c:fd:d6:65:ca:c5:b1:f3:82:f4:d5:f7:f6:61:43:fd:c6:
6a:e2:2d:aa:02:27:cf:c3:54:7b:9d:42:44:01:ce:df:07:47:
aa:44:2e:06:60:ac:51:d8:6b:e0:5b:de:b0:0a:ff:d3:fa:fe:
68:84:d1:d3:89:04:46:43:75:03:d8:2f:f2:d7:0f:0d:62:e1:
f7:74:6b:93:46:17:ff:c7:f7:77:2a:38:d5:17:af:a0:8a:0a:
35:db:d5:85:68:95:a1:3f:cc:40:9a:90:9a:e4:aa:fb:ce:b1:
5b:43:8f:ed:91:fe:99:4d:78:58:d9:49:d1:eb:b5:95:20:db:
cd:59:9a:e7:37:4a:dc:f9:5a:63:dc:c9:c9:82:30:16:e6:c5:
e1:29:68:ad:41:5e:f5:45:7e:96:29:b2:dc:f1:56:34:4c:f2:
18:49:04:60:6a:a8:2c:81:7c:90:21:89:68:9c:ca:62:eb:48:
a1:06:9c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:17:46 2025 by rpki-client