
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/9D85178EE2AF11E9919C1D4EC4F9AE02.roa
File: 9D85178EE2AF11E9919C1D4EC4F9AE02.roa (raw, json)
Hash identifier: Io6gCyR0FtQ3xcV6SmfOiqcTWURvoXsQUWodciVqXV4=
Subject key identifier: 28:BC:22:36:8B:83:46:41:82:E7:F3:C7:55:D1:CD:13:E2:E4:D1:BB
Certificate issuer: /CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292
Certificate serial: 0D1C
Authority key identifier: 72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/9D85178EE2AF11E9919C1D4EC4F9AE02.roa
Signing time: Thu 10 Jul 2025 18:27:48 +0000
ROA not before: Thu 10 Jul 2025 18:27:48 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137967
IP address blocks: 103.14.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl
rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3356 (0xd1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1B61, serialNumber=728A824092E5741254BB92D597723361A04BF292
Validity
Not Before: Jul 10 18:27:48 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68700622-d65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:e1:81:2d:a8:57:a5:6c:5d:d3:f3:67:bb:
4a:3e:83:71:62:7f:da:89:8d:bb:ad:3b:cc:42:65:
47:f2:24:8f:85:2e:12:8a:d1:08:ec:95:54:15:9d:
97:7b:07:92:cc:5c:63:7b:57:44:73:92:e7:17:4c:
66:aa:93:0a:9a:c7:77:81:11:9c:39:45:77:b5:d2:
72:f7:ec:87:a3:c3:d8:fe:5c:bf:0a:e1:61:ac:85:
71:b6:41:1b:e3:4c:84:d2:ca:47:cf:ea:3e:db:6e:
8a:44:a8:cd:c1:8d:c0:f7:82:9d:0d:68:0e:56:63:
a3:7d:0f:a3:e1:c3:5f:f6:69:ac:24:9d:e4:01:91:
31:c2:c1:c2:6c:6c:54:d3:ef:00:80:c5:e5:a9:0f:
38:47:ca:0c:d8:13:ef:d1:0d:4f:5a:80:79:f6:e7:
8d:12:78:c5:08:c0:bf:be:5d:bd:e7:fe:cb:0f:4e:
42:84:ec:b0:5e:25:e4:e2:33:37:0e:17:7f:be:20:
99:16:41:fc:bb:a9:a5:42:9b:c3:6f:45:72:a4:40:
4d:ae:b9:d3:9c:e0:fe:a8:54:47:b5:e9:17:b6:a4:
3e:45:df:30:76:86:cd:af:df:d3:ca:ab:b3:5b:93:
3d:51:8d:72:c9:31:66:de:2f:5a:f0:e7:4b:80:3a:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BC:22:36:8B:83:46:41:82:E7:F3:C7:55:D1:CD:13:E2:E4:D1:BB
X509v3 Authority Key Identifier:
keyid:72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/9D85178EE2AF11E9919C1D4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.72.0/24
Signature Algorithm: sha256WithRSAEncryption
19:bd:dc:3b:a5:f1:65:6d:98:1a:57:7d:6b:11:fc:6d:f0:16:
86:88:4d:3c:24:0f:2b:9a:59:c1:43:71:61:89:55:b0:75:5e:
71:0b:ec:04:21:a9:7f:a7:b1:11:3a:9f:b0:2f:94:39:7b:77:
a1:fb:12:83:96:d0:55:d2:47:2d:ed:e9:1c:30:b7:ce:29:f9:
b0:87:7b:e1:9e:68:b6:cf:84:08:b7:48:e7:04:3b:3d:d1:45:
67:0e:5e:d4:c2:55:be:34:ca:42:ef:fd:63:65:ed:d6:61:e9:
1c:3a:cb:7e:8f:aa:10:9f:0b:cc:86:78:a3:4f:f7:d5:1a:2f:
25:e8:6f:fa:83:cc:66:d8:fb:81:b3:ca:14:3e:f6:4b:03:46:
b0:c0:c0:d3:bf:d8:a8:7e:75:f0:10:a0:90:47:e2:a8:a5:1d:
f7:6b:bc:2b:e8:cf:46:55:dd:2b:0f:82:27:e4:12:37:1b:44:
2a:f0:71:f2:89:8d:d1:0a:52:c5:56:46:29:f5:d2:d8:12:56:
b9:4c:17:32:46:78:90:09:e0:d9:59:79:e2:c0:a2:be:7f:73:
e4:5c:aa:f7:0f:0e:9c:aa:71:88:de:99:0e:9b:ec:98:4d:be:
17:51:7b:a1:eb:92:20:d7:e3:25:96:70:e3:24:86:e5:4e:3f:
ee:be:d7:95
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFCNjExMTAvBgNVBAUTKDcyOEE4MjQwOTJFNTc0MTI1NEJCOTJENTk3NzIzMzYx
QTA0QkYyOTIwHhcNMjUwNzEwMTgyNzQ4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODcwMDYyMi1kNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAncXhgS2oV6VsXdPzZ7tKPoNxYn/aiY27rTvMQmVH8iSPhS4SitEI7JVUFZ2X
eweSzFxje1dEc5LnF0xmqpMKmsd3gRGcOUV3tdJy9+yHo8PY/ly/CuFhrIVxtkEb
40yE0spHz+o+226KRKjNwY3A94KdDWgOVmOjfQ+j4cNf9mmsJJ3kAZExwsHCbGxU
0+8AgMXlqQ84R8oM2BPv0Q1PWoB59ueNEnjFCMC/vl295/7LD05ChOywXiXk4jM3
Dhd/viCZFkH8u6mlQpvDb0VypEBNrrnTnOD+qFRHtekXtqQ+Rd8wdobNr9/Tyquz
W5M9UY1yyTFm3i9a8OdLgDqx1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFCi8IjaL
g0ZBgufzx1XRzRPi5NG7MB8GA1UdIwQYMBaAFHKKgkCS5XQSVLuS1ZdyM2GgS/KS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUI2MS8zRjAwRDc1Q0Uy
QUYxMUU5QkIwMUZDNERDNEY5QUUwMi9jb3FDUUpMbGRCSlV1NUxWbDNJellhQkw4
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NvcUNRSkxsZEJKVXU1TFZsM0l6WWFCTDhwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjFCNjEvM0YwMEQ3NUNFMkFGMTFFOUJCMDFGQzREQzRGOUFFMDIvOUQ4NTE3OEVF
MkFGMTFFOTkxOUMxRDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnDkgwDQYJKoZIhvcNAQELBQADggEBABm93Dul8WVtmBpX
fWsR/G3wFoaITTwkDyuaWcFDcWGJVbB1XnEL7AQhqX+nsRE6n7AvlDl7d6H7EoOW
0FXSRy3t6Rwwt84p+bCHe+GeaLbPhAi3SOcEOz3RRWcOXtTCVb40ykLv/WNl7dZh
6Rw6y36PqhCfC8yGeKNP99UaLyXob/qDzGbY+4GzyhQ+9ksDRrDAwNO/2Kh+dfAQ
oJBH4qilHfdrvCvoz0ZV3SsPgifkEjcbRCrwcfKJjdEKUsVWRin10tgSVrlMFzJG
eJAJ4NlZeeLAor5/c+RcqvcPDpyqcYjemQ6b7JhNvhdRe6HrkiDX4yWWcOMkhuVO
P+6+15U=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:53 2025 by rpki-client