
$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
File: 4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (raw, json)
Hash identifier: xwWWISkzf0btU4XnSYbv2CyxUkjvyAAYT2JHS7cyDnY=
Subject key identifier: FE:05:7C:BE:CF:97:A3:A2:A4:55:B9:BA:23:2E:53:37:47:5C:BA:B4
Certificate issuer: /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial: 037B
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
Signing time: Sat 11 Oct 2025 03:27:51 +0000
ROA not before: Sat 11 Oct 2025 03:27:51 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 132742
IP address blocks: 43.248.60.0/22 maxlen: 24
103.39.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 02:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891 (0x37b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Validity
Not Before: Oct 11 03:27:51 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68e9ceb6-88be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:73:d9:99:69:73:86:53:70:23:f3:4a:0b:
e9:35:63:f2:55:d5:7d:fb:de:1a:92:13:58:09:0b:
3a:50:76:76:91:45:42:07:67:98:d7:9f:9e:87:fd:
0a:9e:e8:e9:71:c0:4f:f0:11:81:6a:60:7d:d1:0b:
7a:b0:48:a3:c5:3b:e7:a1:f7:35:74:42:f9:e5:22:
e1:fb:0e:cc:d5:44:4c:dc:29:04:dc:a7:d4:dd:0f:
76:93:70:d1:1a:50:a0:ba:34:80:3e:f6:04:b0:93:
e6:3d:91:18:a2:e5:e5:f9:be:8b:eb:93:dc:d2:e2:
55:9e:78:47:6f:5b:3d:17:49:59:2f:f1:15:f0:5d:
ce:88:c8:2f:fb:4c:21:62:e3:08:b1:6d:ab:27:06:
40:8b:e3:1c:c5:67:66:a3:8f:cc:66:52:72:44:23:
df:a1:1a:0f:39:2f:35:0d:f1:4a:2f:a4:31:a5:34:
12:c8:3d:68:a0:e8:a7:8a:23:e0:63:f7:38:3f:18:
2d:d9:d7:5a:6f:08:16:13:10:1b:21:38:98:b9:1c:
e1:9f:fb:4a:8d:1b:bf:78:ad:ca:d8:44:f1:a2:af:
a9:ec:b5:99:e6:b5:52:e6:0e:f8:d4:4e:a4:af:4f:
66:ed:c5:da:5f:f0:9e:28:02:c8:61:e9:66:17:a9:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:05:7C:BE:CF:97:A3:A2:A4:55:B9:BA:23:2E:53:37:47:5C:BA:B4
X509v3 Authority Key Identifier:
keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.60.0/22
103.39.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:d2:be:0f:33:a7:11:60:1e:fa:94:b4:c2:09:64:b9:b3:6e:
f2:19:5e:5d:1d:59:b7:0f:0f:a5:58:1f:af:88:7b:d2:8c:36:
ea:27:46:e9:cd:9f:fb:4a:15:53:b5:86:c9:d9:f5:76:28:28:
10:0f:8d:97:be:80:f6:8e:b2:99:2c:3e:10:c1:7d:2f:63:f4:
38:ee:7a:b6:65:3e:27:de:92:57:c7:64:11:5e:d5:be:eb:8a:
4c:c8:fe:4b:6a:74:0b:36:59:87:2d:70:a9:97:25:85:ca:e4:
ed:2c:79:27:e4:9c:4f:ee:66:f2:dd:25:0e:54:10:04:89:b5:
7c:19:cb:39:a4:4d:d4:0f:84:66:93:b8:69:c8:ba:60:c0:af:
4e:65:e6:c7:c7:d3:ca:38:83:b3:c2:e6:c7:c8:97:b7:9b:75:
a4:0a:1d:a8:fa:63:70:7e:b7:55:5f:24:e7:f9:17:7d:e9:a7:
e0:ca:21:8a:df:d6:f0:af:46:1b:2c:45:87:62:89:14:24:d0:
34:5f:6b:d3:e8:dc:a4:10:f3:7e:da:b8:43:9d:77:dd:c3:11:
9c:aa:f2:48:7a:a7:6d:7a:08:88:8f:85:24:e1:00:72:c3:5e:
22:b5:75:85:d1:17:47:c2:52:13:bb:a4:e7:1f:31:6b:99:4a:
b5:aa:67:93
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDAwQ0MxMTAvBgNVBAUTKDI3NThDNkNGOEI1Mjg5NjZENDM3MTNCQjFCQ0U4RTAz
RENBNjFCMUMwHhcNMjUxMDExMDMyNzUxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGU5Y2ViNi04OGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwUVz2Zlpc4ZTcCPzSgvpNWPyVdV9+94akhNYCQs6UHZ2kUVCB2eY15+eh/0K
nujpccBP8BGBamB90Qt6sEijxTvnofc1dEL55SLh+w7M1URM3CkE3KfU3Q92k3DR
GlCgujSAPvYEsJPmPZEYouXl+b6L65Pc0uJVnnhHb1s9F0lZL/EV8F3OiMgv+0wh
YuMIsW2rJwZAi+McxWdmo4/MZlJyRCPfoRoPOS81DfFKL6QxpTQSyD1ooOiniiPg
Y/c4Pxgt2ddabwgWExAbITiYuRzhn/tKjRu/eK3K2ETxoq+p7LWZ5rVS5g741E6k
r09m7cXaX/CeKALIYelmF6n7pQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP4FfL7P
l6OipFW5uiMuUzdHXLq0MB8GA1UdIwQYMBaAFCdYxs+LUolm1DcTuxvOjgPcphsc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDBDQy9CNEE3Q0NFOEM2
MDIxMUVDQkVCOUJGM0FDNEY5QUUwMi9KMWpHejR0U2lXYlVOeE83Rzg2T0E5eW1H
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0oxakd6NHRTaVdiVU54TzdHODZPQTl5bUd4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDAwQ0MvQjRBN0NDRThDNjAyMTFFQ0JFQjlCRjNBQzRGOUFFMDIvNEFDMTRDNEFD
NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAIr+DwDBAJnJ5QwDQYJKoZIhvcNAQELBQADggEBALHSvg8z
pxFgHvqUtMIJZLmzbvIZXl0dWbcPD6VYH6+Ie9KMNuonRunNn/tKFVO1hsnZ9XYo
KBAPjZe+gPaOspksPhDBfS9j9DjuerZlPifeklfHZBFe1b7rikzI/ktqdAs2WYct
cKmXJYXK5O0seSfknE/uZvLdJQ5UEASJtXwZyzmkTdQPhGaTuGnIumDAr05l5sfH
08o4g7PC5sfIl7ebdaQKHaj6Y3B+t1VfJOf5F33pp+DKIYrf1vCvRhssRYdiiRQk
0DRfa9Po3KQQ837auEOdd93DEZyq8kh6p216CIiPhSThAHLDXiK1dYXRF0fCUhO7
pOcfMWuZSrWqZ5M=
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:57:41 2025 by rpki-client