
$ rpki-client -vvf rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/BEB34436FE3211EFAA1D9A4EC4F9AE02.roa
File: BEB34436FE3211EFAA1D9A4EC4F9AE02.roa (raw, json)
Hash identifier: yFDpBLHsX38bp2JcWh75H9eK/2yaSCGu63FKHuPPshA=
Subject key identifier: 8C:46:21:1C:40:71:D3:1D:04:90:C9:7E:E6:C3:E3:6F:E5:F0:1D:A8
Certificate issuer: /CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Certificate serial: 0460
Authority key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/BEB34436FE3211EFAA1D9A4EC4F9AE02.roa
Signing time: Tue 11 Mar 2025 04:39:40 +0000
ROA not before: Tue 11 Mar 2025 04:39:40 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 9230
IP address blocks: 103.177.72.0/24 maxlen: 24
103.177.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 00:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1120 (0x460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91524AF, serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Validity
Not Before: Mar 11 04:39:40 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67cfbe8c-c631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9a:12:e7:de:46:ac:c0:81:98:d9:ef:93:4e:
b5:84:1d:10:e4:35:d7:db:c7:e0:bc:5f:74:78:27:
2e:7d:6c:56:bd:c1:82:12:c2:c0:ed:12:68:02:f7:
a1:cb:f5:8c:bd:1b:67:8d:1f:70:c9:b2:03:cc:72:
bd:32:46:9a:a7:e2:e8:09:9e:24:77:cb:15:6d:6d:
2c:74:0f:9c:56:3d:ad:0b:83:e2:6c:26:a0:1a:fb:
73:90:d2:dd:3d:4f:5d:d2:a7:46:ba:21:ae:61:65:
8e:cd:a6:55:31:15:a4:8e:40:20:c2:f6:e9:05:28:
eb:43:21:21:5d:40:6a:ce:4f:71:6d:1b:67:76:a4:
e1:6e:dc:15:02:9d:67:f9:cf:a8:aa:46:38:15:e2:
d3:d1:94:e1:bc:15:b0:5a:45:33:aa:d6:7c:a4:f9:
81:5e:5f:3b:14:69:d1:83:4a:c6:65:2f:11:ca:ab:
3b:fa:7a:64:4a:e7:29:d7:48:3e:fb:68:04:29:cb:
72:dc:ec:5c:88:fb:9b:1d:2b:c7:5d:55:88:c3:13:
9d:5e:cc:e7:dd:15:7a:77:c2:ee:39:d7:8e:39:4b:
4a:da:fb:ff:73:77:21:92:cb:ea:76:f5:24:d1:e4:
83:06:b2:48:68:4a:b4:6e:e0:b1:f7:36:f4:c4:62:
ce:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:46:21:1C:40:71:D3:1D:04:90:C9:7E:E6:C3:E3:6F:E5:F0:1D:A8
X509v3 Authority Key Identifier:
keyid:5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/BEB34436FE3211EFAA1D9A4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.72.0/23
Signature Algorithm: sha256WithRSAEncryption
14:c0:c8:bf:61:a2:19:ea:49:4e:3b:ac:57:15:f6:e4:c5:ea:
d7:21:c8:e8:7f:a1:93:d6:e5:60:f4:35:94:36:d0:66:0e:a8:
39:1b:4c:08:7d:23:c1:64:16:f6:29:ef:03:c0:91:f8:18:a4:
ea:5b:e6:10:a4:8a:4f:6c:bc:be:3a:89:f3:3b:19:e1:d7:a6:
de:94:fd:33:de:ac:43:a9:39:02:5f:45:3e:bc:ed:02:22:b3:
df:a6:c5:ce:07:65:6e:f6:7e:0c:7f:95:79:ad:5f:d9:e3:d2:
4d:05:f3:b2:a0:06:38:f4:8e:9d:16:f4:84:95:54:b8:84:13:
a3:9b:46:8f:0e:29:f0:5b:e6:49:4b:3d:01:3c:5d:f1:9a:7f:
02:73:1d:db:2b:48:dd:8c:be:c0:cb:00:72:7c:c2:e4:c7:66:
62:9a:72:bd:45:9b:f1:3d:58:35:ea:23:ef:34:be:ef:f9:bd:
05:f6:8f:77:e9:04:1e:31:19:04:18:ee:c1:a1:4c:d9:f1:cd:
7a:76:6f:5b:6a:7a:44:b7:3e:bc:64:bf:85:45:7f:e4:38:a2:
51:4c:ed:5d:e7:90:e0:9e:8c:3e:9e:25:45:30:40:2a:e5:e6:
39:64:64:8d:84:a9:96:ad:43:a6:51:90:49:4b:d8:52:96:a7:
a0:76:47:7e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI0QUYxMTAvBgNVBAUTKDVDMzE1REFGQzUzQTgyRkRENjJDNzIwMDVDNzY0NDMz
M0JDMDI5N0EwHhcNMjUwMzExMDQzOTQwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2NmYmU4Yy1jNjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6JoS595GrMCBmNnvk061hB0Q5DXX28fgvF90eCcufWxWvcGCEsLA7RJoAveh
y/WMvRtnjR9wybIDzHK9Mkaap+LoCZ4kd8sVbW0sdA+cVj2tC4PibCagGvtzkNLd
PU9d0qdGuiGuYWWOzaZVMRWkjkAgwvbpBSjrQyEhXUBqzk9xbRtndqThbtwVAp1n
+c+oqkY4FeLT0ZThvBWwWkUzqtZ8pPmBXl87FGnRg0rGZS8Ryqs7+npkSucp10g+
+2gEKcty3OxciPubHSvHXVWIwxOdXszn3RV6d8LuOdeOOUtK2vv/c3chksvqdvUk
0eSDBrJIaEq0buCx9zb0xGLOUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIxGIRxA
cdMdBJDJfubD42/l8B2oMB8GA1UdIwQYMBaAFFwxXa/FOoL91ixyAFx2RDM7wCl6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjRBRi83NkM3RjBGNDUx
RjYxMUVDOUUzQzZDM0FDNEY5QUUwMi9YREZkcjhVNmd2M1dMSElBWEhaRU16dkFL
WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hERmRyOFU2Z3YzV0xISUFYSFpFTXp2QUtYby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTI0QUYvNzZDN0YwRjQ1MUY2MTFFQzlFM0M2QzNBQzRGOUFFMDIvQkVCMzQ0MzZG
RTMyMTFFRkFBMUQ5QTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnsUgwDQYJKoZIhvcNAQELBQADggEBABTAyL9hohnqSU47
rFcV9uTF6tchyOh/oZPW5WD0NZQ20GYOqDkbTAh9I8FkFvYp7wPAkfgYpOpb5hCk
ik9svL46ifM7GeHXpt6U/TPerEOpOQJfRT687QIis9+mxc4HZW72fgx/lXmtX9nj
0k0F87KgBjj0jp0W9ISVVLiEE6ObRo8OKfBb5klLPQE8XfGafwJzHdsrSN2MvsDL
AHJ8wuTHZmKacr1Fm/E9WDXqI+80vu/5vQX2j3fpBB4xGQQY7sGhTNnxzXp2b1tq
ekS3Prxkv4VFf+Q4olFM7V3nkOCejD6eJUUwQCrl5jlkZI2EqZatQ6ZRkElL2FKW
p6B2R34=
-----END CERTIFICATE-----
Generated at Wed Oct 29 01:09:26 2025 by rpki-client