
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/81087EBA66EE11F0B7640387C4F9AE02.roa
File: 81087EBA66EE11F0B7640387C4F9AE02.roa (raw, json)
Hash identifier: QFoEv4EUPu7ZByEo2FPWmM0j6Axf46LzGtXSA8Ozj4E=
Subject key identifier: B8:38:3D:1C:55:07:69:8B:73:A2:8B:29:18:77:65:F7:55:BB:B5:7A
Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial: 0261
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/81087EBA66EE11F0B7640387C4F9AE02.roa
Signing time: Tue 22 Jul 2025 11:25:00 +0000
ROA not before: Tue 22 Jul 2025 11:25:00 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 134428
IP address blocks: 115.42.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Validity
Not Before: Jul 22 11:25:00 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=687f750c-4115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:39:a5:a4:5f:3e:d0:a8:9a:37:9f:83:a8:
c6:e3:52:85:85:72:3e:d5:30:e2:14:99:32:96:b3:
b4:e5:1e:f3:3a:dc:ed:ea:94:8c:a4:d1:38:5c:80:
b8:50:e5:f8:3b:77:5e:3f:91:97:3c:e6:65:9a:af:
79:12:e3:19:39:7d:7a:b6:a8:d6:ec:10:82:7c:94:
c0:96:de:37:58:10:c7:bb:3e:f9:5c:d0:8c:6f:5f:
a8:05:43:a1:a8:a0:47:9c:c1:79:31:5f:d8:df:8b:
f9:37:fb:a0:4a:f5:68:ca:bf:e7:32:a6:c0:ec:4b:
27:d9:d9:cc:9b:bc:2b:69:a5:1e:f3:95:f9:fb:09:
9b:13:86:08:7c:e2:ae:c4:91:42:a6:70:57:43:50:
ea:9c:20:95:2d:e7:8a:ab:5c:9b:c0:f8:82:7a:80:
49:0a:de:92:d8:b2:e7:db:1e:4f:70:23:ce:67:4f:
32:9f:bf:55:d9:17:00:45:5d:a8:13:95:31:3c:5a:
42:34:4d:e3:25:bd:58:46:95:ce:71:a1:0d:a8:f5:
70:63:d1:bd:bb:93:88:5e:c1:17:2a:31:3f:ff:68:
c5:d4:cd:a0:ce:c3:32:d7:ea:a8:7b:1f:53:8f:f6:
d1:df:49:b8:f4:c6:d0:f9:89:79:05:c5:87:32:c7:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:38:3D:1C:55:07:69:8B:73:A2:8B:29:18:77:65:F7:55:BB:B5:7A
X509v3 Authority Key Identifier:
keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/81087EBA66EE11F0B7640387C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.42.63.0/24
Signature Algorithm: sha256WithRSAEncryption
26:4e:68:da:d6:69:78:7c:25:79:48:3d:62:d6:15:e7:64:27:
51:0d:54:20:f5:e7:46:17:8b:34:8a:15:dc:b2:5c:cb:92:0d:
0e:b6:e6:5d:2a:b0:03:0c:8f:5a:d1:83:89:c3:f0:6d:f7:b4:
7c:39:20:5c:2d:49:6b:b4:df:b3:5f:0e:99:7f:a0:40:e4:61:
fb:f2:2b:bf:b4:7b:b7:67:29:5f:48:e4:a1:c9:ba:4c:dd:fc:
e5:1c:71:ba:8c:49:67:70:92:4b:2d:39:05:14:30:b7:91:90:
72:23:76:dd:d9:62:71:0e:fc:39:0d:ac:87:38:53:cd:c1:77:
fb:22:fc:fd:c9:df:8d:39:51:8f:c3:24:51:5b:b3:96:85:96:
eb:c9:f2:2a:5c:13:9f:05:6f:b7:32:d3:9f:aa:47:7d:38:b4:
84:70:27:5c:45:1a:c6:a2:9a:85:2b:24:e0:5b:7d:2a:32:f0:
37:22:c0:9e:32:34:6c:ef:74:e9:44:a4:3e:30:a5:a0:de:5e:
4d:02:d1:8a:ec:51:42:33:fb:cf:53:e0:08:cd:4a:e0:dd:f5:
7f:e5:46:fc:25:b6:b5:3e:9a:4c:f4:83:62:9d:e2:8b:49:9c:
50:bf:94:14:28:d0:b4:d3:e3:44:ce:a9:8c:b8:ff:89:18:a1:
ef:ad:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:29:47 2025 by rpki-client