
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa
File: 08CA5724E2B111E9A73CAB51C4F9AE02.roa (raw, json)
Hash identifier: MGzEWIZ/EdtTbp6/FRF/2CJMkfaDmSh75fKXCwfETHM=
Subject key identifier: DB:4E:AA:E7:8A:BD:BF:49:5E:49:FE:22:92:05:44:9A:2A:9E:1E:E9
Certificate issuer: /CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292
Certificate serial: 0D1B
Authority key identifier: 72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa
Signing time: Thu 10 Jul 2025 18:27:46 +0000
ROA not before: Thu 10 Jul 2025 18:27:46 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132341
IP address blocks: 103.14.73.0/24 maxlen: 24
103.59.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl
rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1B61, serialNumber=728A824092E5741254BB92D597723361A04BF292
Validity
Not Before: Jul 10 18:27:46 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68700622-d1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:29:98:93:71:88:3a:aa:2d:ad:12:f5:40:
17:fd:79:1f:49:2d:90:14:23:84:d8:bd:48:71:e6:
69:ec:79:44:49:da:b7:2c:4d:c9:96:a8:47:fb:ec:
39:0e:61:ae:3c:ab:95:f3:2a:03:48:a1:34:9f:fa:
2d:b3:0b:22:1f:97:97:f3:38:02:62:3b:04:f1:70:
62:c3:99:b8:ad:81:24:43:56:95:49:38:24:f6:47:
f1:37:6c:ac:9e:72:e1:8f:6a:53:42:8a:0a:92:ad:
62:3c:24:18:de:a5:55:d5:ac:b8:04:59:24:9a:7a:
91:e0:b2:f0:40:56:bc:99:dd:2e:15:93:b2:3b:30:
a5:4a:2b:ea:1c:c3:3e:df:39:30:cb:4b:e0:85:f3:
12:06:70:ff:b3:36:a8:d1:92:5d:a1:bd:a3:02:57:
91:b5:8d:2b:1c:5a:8b:70:b4:03:14:b2:4c:62:63:
ea:70:a3:ef:cd:df:6e:8a:2c:85:70:c8:e7:ac:85:
ed:b1:96:6a:fa:e5:1c:a1:6e:22:2f:fb:28:5f:a4:
a6:56:47:4c:a6:c3:c6:2d:ab:05:c5:81:f5:89:fa:
5d:2a:c1:ae:cc:62:0b:c1:a0:18:87:9e:8e:2b:e2:
7d:d9:a6:fc:70:e0:b9:56:37:be:07:d1:58:68:b4:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4E:AA:E7:8A:BD:BF:49:5E:49:FE:22:92:05:44:9A:2A:9E:1E:E9
X509v3 Authority Key Identifier:
keyid:72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.73.0/24
103.59.233.0/24
Signature Algorithm: sha256WithRSAEncryption
13:63:76:e3:f3:0b:ba:96:82:82:a3:b5:04:e8:6a:f6:3a:03:
a1:e3:6c:77:2d:aa:af:a5:6a:8e:6d:2c:70:4c:96:43:e6:9f:
7f:bb:8d:41:b5:10:93:da:78:ce:64:90:cc:6a:52:b2:c4:3d:
fb:e1:d1:21:41:41:14:c7:4f:b6:01:0f:e5:ee:5d:6b:9c:8e:
2b:b7:88:48:82:a4:ac:e4:58:02:42:66:10:22:5a:f4:5a:ef:
71:27:c9:67:79:2d:a7:a8:a5:5e:7b:c9:6f:43:d0:88:f3:ca:
3a:2e:1e:6b:93:29:93:b8:c5:b9:36:5e:cd:76:22:a8:1a:24:
7a:14:aa:61:3c:c5:31:de:18:c4:40:1c:5a:46:d9:74:19:b4:
1e:05:60:b5:76:c0:b6:76:97:59:84:67:28:42:ab:62:2b:2e:
dc:23:9a:f6:94:8c:ec:8b:6c:1c:43:84:68:32:d1:ce:80:9d:
1b:56:2d:80:0f:62:43:31:a8:40:82:f6:30:f6:8a:b0:44:55:
09:b2:b5:5c:ca:2b:de:08:2e:03:3e:8b:f2:b5:cd:44:41:c7:
c1:7a:3e:9a:6d:d5:fe:23:1e:6b:60:42:6c:50:d7:b2:9f:fd:
5c:b6:8d:45:30:48:51:e8:58:bc:21:28:a8:aa:0f:0d:72:41:
a0:9a:67:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:30:53 2025 by rpki-client