
$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/D40271B608CA11F080AEDB7BC4F9AE02.roa
File: D40271B608CA11F080AEDB7BC4F9AE02.roa (raw, json)
Hash identifier: q5xwzkvJJT2cpQij23jtb331Ba1Q6ZPU5GFvae3tZEo=
Subject key identifier: B2:2D:18:AD:0C:66:66:8D:99:13:DE:77:C6:A0:9E:6F:4C:F6:14:D4
Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial: 019D
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/D40271B608CA11F080AEDB7BC4F9AE02.roa
Signing time: Mon 24 Mar 2025 16:12:48 +0000
ROA not before: Mon 24 Mar 2025 16:12:48 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 150745
IP address blocks: 103.81.29.0/24 maxlen: 24
2001:df1:e940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 02:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Validity
Not Before: Mar 24 16:12:48 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67e18480-e953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:f8:fc:fd:ff:6a:38:22:26:b2:5b:2c:8e:
ea:13:4f:2b:40:e2:14:40:44:56:8b:08:29:75:5b:
f9:5a:34:7a:38:ff:dd:7f:8e:d9:af:83:04:5f:9c:
0b:49:85:49:a5:75:7f:d9:a8:13:8a:7e:ad:c9:2a:
00:94:b2:a7:77:89:de:36:9f:19:78:e9:58:a6:37:
0f:0d:a2:d9:c4:36:d9:0f:fd:2c:56:75:8b:58:ee:
31:38:74:c0:97:fc:5c:01:a7:c7:5d:3b:f3:d1:e4:
4a:1e:89:37:a8:87:c9:26:5a:10:3b:37:4d:e3:be:
76:23:56:4b:5c:b2:7f:e9:99:b8:50:7c:a1:82:27:
14:76:af:b8:73:e9:66:3f:85:3f:9a:33:28:98:23:
58:a4:07:d7:7e:a8:b8:9d:15:68:da:7b:86:d8:17:
84:8b:d8:af:53:58:84:f9:d3:9f:53:9e:b7:5f:d0:
1e:46:9e:5f:f8:2c:cc:ee:22:3d:d7:0d:31:e2:c1:
e9:3a:f6:8c:8b:c6:9c:96:c3:ad:02:15:45:bc:84:
12:56:24:f5:40:5c:71:af:c2:98:bd:f3:c7:a7:1a:
1c:e3:ff:e8:72:67:ca:20:db:24:2e:c1:2a:41:c4:
6f:2a:f0:c7:2b:24:ac:66:2b:d9:42:e3:59:5d:12:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2D:18:AD:0C:66:66:8D:99:13:DE:77:C6:A0:9E:6F:4C:F6:14:D4
X509v3 Authority Key Identifier:
keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/D40271B608CA11F080AEDB7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.81.29.0/24
IPv6:
2001:df1:e940::/48
Signature Algorithm: sha256WithRSAEncryption
ca:92:09:58:c5:06:9a:de:db:0e:43:b6:27:63:6e:f1:8f:26:
3f:6c:3b:d4:84:d1:98:63:74:c6:5c:b2:9d:00:e9:7f:fc:61:
86:b9:ee:97:7b:fa:89:f7:b6:b7:4a:ba:23:47:58:e7:83:93:
73:73:e9:be:b4:4a:e5:f9:53:0f:ef:4f:c2:66:79:a2:ba:c2:
95:5e:ea:98:0f:ff:2c:aa:7d:35:bf:98:b1:54:57:54:da:95:
30:2f:e6:95:ac:41:98:fd:b2:b8:c9:b9:cd:eb:8d:8f:a5:f9:
ef:0e:20:5e:8d:a7:97:93:6d:2f:07:2a:f3:ac:cd:85:7b:ab:
35:cc:54:89:70:c7:50:19:3c:a2:8e:03:5b:dc:77:89:2b:78:
0e:9b:7d:7d:34:46:b8:4c:23:4e:33:d8:1d:af:62:f8:37:d3:
2f:b4:9e:88:dd:8e:05:d7:70:a3:57:e4:8f:53:3d:d0:3b:0b:
26:1a:80:41:8d:fa:19:ef:01:08:9e:76:f8:3c:8f:5b:b9:d2:
3b:dc:9f:84:31:33:c1:9d:f9:be:46:dc:a6:85:59:58:d1:8d:
91:d5:07:8b:a1:24:21:9f:98:ba:99:d4:16:20:33:b2:f3:4e:
b2:7a:0b:bc:1b:08:ee:34:3f:7e:de:60:87:60:14:a4:03:63:
65:f3:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 03:25:49 2025 by rpki-client