
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EB1C709C450411F09738105FC4F9AE02.roa
File: EB1C709C450411F09738105FC4F9AE02.roa (raw, json)
Hash identifier: O/x91LtvdsHnu6UD+9TxpNdI3pzLLK+i+0wDI9cj5DI=
Subject key identifier: 22:48:09:1E:67:77:B6:E6:75:C6:BE:82:CC:76:B4:55:7B:4E:54:CB
Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial: 0361
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EB1C709C450411F09738105FC4F9AE02.roa
Signing time: Sun 03 Aug 2025 01:39:18 +0000
ROA not before: Sun 03 Aug 2025 01:39:18 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 40779
IP address blocks: 103.97.176.0/22 maxlen: 24
103.242.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:59:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865 (0x361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Validity
Not Before: Aug 3 01:39:18 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=688ebdc6-ad2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:0e:9f:5b:95:68:e4:f2:ba:b0:a5:0a:74:
40:85:fa:b0:1d:6e:2c:1b:a3:58:c4:e4:95:78:c4:
72:a7:29:f3:8b:ca:04:bb:e3:b0:57:1b:aa:81:87:
7a:97:6e:19:0d:1d:9d:1b:a9:a3:07:79:90:67:9b:
73:2e:ef:2a:f8:a4:a6:07:3e:b0:ad:4a:0c:0e:e1:
19:68:8a:57:20:47:f1:10:fe:ab:5a:a8:9c:9a:b3:
9c:a3:9c:c6:8d:2c:a8:f5:92:80:16:05:91:3e:12:
db:e7:52:18:9e:5b:43:f8:c5:51:2f:6c:05:14:1a:
39:d1:f9:34:ad:d5:7b:49:be:90:eb:c2:5a:18:51:
db:78:31:7f:a4:1e:50:53:64:84:70:63:bb:65:fd:
25:de:5d:da:49:2c:ee:e4:63:33:dc:c7:42:c9:d3:
bb:27:a7:75:2d:7e:e5:0a:59:27:13:7e:ab:e1:a1:
52:2c:ae:1c:af:88:5b:23:5e:fb:f3:f3:3d:13:06:
97:d2:ad:75:bf:81:09:ae:2e:bc:b0:b3:3d:88:6a:
14:3b:5a:50:d8:69:c4:b5:e4:8c:e2:5a:52:24:25:
29:6a:e3:b4:f0:12:d0:ee:75:61:a6:d6:f6:5a:c7:
3a:88:b8:1e:23:44:aa:4a:da:32:1b:7d:4a:05:dc:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:48:09:1E:67:77:B6:E6:75:C6:BE:82:CC:76:B4:55:7B:4E:54:CB
X509v3 Authority Key Identifier:
keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EB1C709C450411F09738105FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.176.0/22
103.242.12.0/22
Signature Algorithm: sha256WithRSAEncryption
30:ce:42:bf:f4:5c:c8:60:90:66:3f:4f:1a:89:0b:b2:91:5f:
ca:04:aa:52:87:69:16:7f:bd:d4:86:c7:58:bb:f9:db:8d:2e:
d6:72:ec:35:dd:fc:77:12:54:37:17:f6:32:4d:aa:ec:88:32:
1f:6d:34:12:90:ec:7b:1e:ee:e1:03:21:3d:b7:5e:2e:aa:f6:
cd:0c:02:7b:f0:37:93:b8:33:e0:de:42:d1:15:70:34:6b:3b:
40:31:a1:00:5b:1a:63:8c:92:15:6a:8d:7b:75:a6:a4:c3:55:
0c:0f:0d:14:c3:05:45:2f:d4:ef:04:60:81:7d:1d:cd:02:c2:
99:87:8a:9c:28:60:30:73:46:50:68:e5:83:5f:07:6b:95:87:
8e:68:d8:31:4c:56:8d:1b:c8:51:ff:04:07:c5:61:eb:b9:5e:
06:ea:9d:60:97:d6:ae:22:c0:1e:cc:c6:f5:d2:c0:5d:1c:f6:
7c:1a:27:95:8f:1b:31:d0:03:13:aa:6b:8f:b5:85:ac:c4:3f:
5c:55:a7:f2:82:3b:c9:a4:8b:be:30:b4:85:2d:e9:b4:dc:76:
47:ed:0a:84:92:d7:e7:db:c8:13:15:62:b3:53:cc:5f:d0:9b:
0f:6e:f1:96:ef:f2:1f:24:01:d4:0b:ee:35:46:e8:c0:7d:6e:
5b:d6:46:0c
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE
MjVBRTAwRkMwHhcNMjUwODAzMDEzOTE4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhlYmRjNi1hZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyh4On1uVaOTyurClCnRAhfqwHW4sG6NYxOSVeMRypynzi8oEu+OwVxuqgYd6
l24ZDR2dG6mjB3mQZ5tzLu8q+KSmBz6wrUoMDuEZaIpXIEfxEP6rWqicmrOco5zG
jSyo9ZKAFgWRPhLb51IYnltD+MVRL2wFFBo50fk0rdV7Sb6Q68JaGFHbeDF/pB5Q
U2SEcGO7Zf0l3l3aSSzu5GMz3MdCydO7J6d1LX7lClknE36r4aFSLK4cr4hbI177
8/M9EwaX0q11v4EJri68sLM9iGoUO1pQ2GnEteSM4lpSJCUpauO08BLQ7nVhptb2
Wsc6iLgeI0SqStoyG31KBdwLDwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCJICR5n
d7bmdca+gsx2tFV7TlTLMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF
QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB
UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjg1NzkvMDE3NjAzRkNDRUIyMTFFQ0FFMDAxODIzQzRGOUFFMDIvRUIxQzcwOUM0
NTA0MTFGMDk3MzgxMDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnYbADBAJn8gwwDQYJKoZIhvcNAQELBQADggEBADDOQr/0
XMhgkGY/TxqJC7KRX8oEqlKHaRZ/vdSGx1i7+duNLtZy7DXd/HcSVDcX9jJNquyI
Mh9tNBKQ7Hse7uEDIT23Xi6q9s0MAnvwN5O4M+DeQtEVcDRrO0AxoQBbGmOMkhVq
jXt1pqTDVQwPDRTDBUUv1O8EYIF9Hc0CwpmHipwoYDBzRlBo5YNfB2uVh45o2DFM
Vo0byFH/BAfFYeu5XgbqnWCX1q4iwB7MxvXSwF0c9nwaJ5WPGzHQAxOqa4+1hazE
P1xVp/KCO8mki74wtIUt6bTcdkftCoSS1+fbyBMVYrNTzF/Qmw9u8Zbv8h8kAdQL
7jVG6MB9blvWRgw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:30:45 2025 by rpki-client