
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/507476EE6BD811EFBDD72932C4F9AE02.roa
File: 507476EE6BD811EFBDD72932C4F9AE02.roa (raw, json)
Hash identifier: pdzJ5okYmWLfXDpKnMd4R/Lx/tQtmRyHcTZA/k863ZA=
Subject key identifier: C6:8E:24:5C:EB:81:FD:6A:DD:CC:5B:1E:F2:4B:72:02:A6:78:FB:AC
Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Certificate serial: FA
Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/507476EE6BD811EFBDD72932C4F9AE02.roa
Signing time: Thu 03 Jul 2025 05:43:18 +0000
ROA not before: Thu 03 Jul 2025 05:43:18 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137185
IP address blocks: 103.230.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Validity
Not Before: Jul 3 05:43:18 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68661875-df84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:3c:f8:0f:01:db:8c:d5:57:d0:69:c8:f2:
11:6a:0c:ac:6c:19:27:06:38:6f:e6:96:5d:b4:9d:
aa:66:04:ca:1a:fa:2d:90:f4:50:d0:03:d8:f1:5c:
8d:3a:c4:e9:f6:d7:73:da:c9:13:4d:df:4a:98:ff:
9a:63:df:a3:e9:6e:dc:e5:98:77:af:c4:76:ba:54:
54:97:3d:e1:56:3d:9c:be:d4:48:4c:19:66:13:39:
40:74:59:6d:6b:db:a9:87:bc:df:7e:cd:e6:b4:14:
8c:26:d9:c0:74:5a:fb:70:5c:7f:db:64:ba:4a:73:
0d:f4:eb:23:0f:bf:81:69:9d:f8:0f:21:02:07:14:
21:a9:9c:33:8c:84:bc:ea:51:91:64:0f:06:f1:7f:
6d:ee:23:75:71:38:75:2e:c7:fc:38:5d:49:3d:02:
fd:67:1e:dc:62:f2:64:8f:49:cd:da:d0:80:b0:f9:
15:1b:ac:23:84:b7:57:90:23:36:d6:10:4d:f3:10:
e6:9f:0a:8d:25:5d:52:15:6a:1c:c3:a0:5f:3f:aa:
e5:43:5a:35:53:fd:ed:89:44:ee:32:8c:94:43:11:
fb:a3:5c:23:88:ff:02:7f:ad:26:86:9a:d4:66:e9:
bb:24:2d:df:c4:7a:a0:01:0a:f4:00:4d:61:6b:cf:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8E:24:5C:EB:81:FD:6A:DD:CC:5B:1E:F2:4B:72:02:A6:78:FB:AC
X509v3 Authority Key Identifier:
keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/507476EE6BD811EFBDD72932C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.92.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:be:54:a9:36:e6:1e:e1:aa:55:f0:b4:48:6e:52:be:9d:29:
ac:b6:18:52:c1:75:0d:99:00:0c:e2:e4:f2:cf:d5:d4:33:7c:
39:0d:51:ac:82:5b:80:c0:18:bf:23:b0:ee:d6:53:44:2a:c7:
7e:0e:2b:26:8d:a6:5f:0e:d5:13:8f:bc:3c:38:fe:49:1f:5e:
19:e3:2f:ab:76:db:09:9e:7d:88:16:0c:b4:24:0f:11:47:0f:
eb:ba:12:ea:49:ba:71:bc:12:59:85:b4:dd:1c:99:3d:72:fd:
2f:42:f2:17:14:bb:5c:eb:09:46:f3:04:66:db:c6:df:67:b3:
51:14:ed:23:10:07:f2:64:7a:6b:33:f3:67:9b:c1:cf:0c:80:
21:ef:2e:11:9a:15:aa:6a:cf:56:79:53:bd:1d:7c:8f:27:ce:
26:b6:41:7b:25:74:54:ba:c9:d7:4f:73:80:41:ab:5a:bc:f5:
31:38:3a:ad:d2:37:8f:73:e2:78:e6:9d:f6:72:52:31:d5:35:
7b:4a:dd:62:27:fa:f8:7b:a8:4b:5c:02:16:99:4e:b0:65:46:
b8:c2:3b:ff:67:a7:28:e4:43:cb:fb:e6:2e:6d:65:74:33:ff:
60:f7:84:f2:22:98:01:5b:31:02:ea:6c:88:ce:92:b8:49:2e:
79:82:4f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:35 2025 by rpki-client