
$ rpki-client -vvf rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/888B4AC26B3611E6A149F871C4F9AE02.roa
File: 888B4AC26B3611E6A149F871C4F9AE02.roa (raw, json)
Hash identifier: C0V7rJkkp2JIZ4YaUDj+rMPHF5Fx4yPepeCUU5377D8=
Subject key identifier: E7:60:1E:66:C7:B3:17:35:FF:91:88:82:40:90:8C:1C:A2:71:41:54
Certificate issuer: /CN=A91884F8/serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E
Certificate serial: 1EE9
Authority key identifier: FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/888B4AC26B3611E6A149F871C4F9AE02.roa
Signing time: Sun 28 Sep 2025 16:14:27 +0000
ROA not before: Sun 28 Sep 2025 16:14:27 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132443
IP address blocks: 103.73.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl
rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7913 (0x1ee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91884F8, serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E
Validity
Not Before: Sep 28 16:14:27 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68d95ee3-0251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:08:e2:e3:70:9a:1d:f3:c1:61:d6:bd:3f:
7f:72:26:0f:b8:1c:71:d8:89:a9:a2:92:cb:19:25:
e7:61:e3:4c:ab:51:7e:ee:d4:b3:9b:28:16:a1:d0:
28:f1:3f:51:ea:b8:77:4d:f7:ea:36:9e:74:76:80:
9d:b7:b0:57:ec:86:6e:33:67:35:48:0d:97:92:ae:
5f:df:84:e6:ff:d6:5a:66:4e:ed:18:bc:7b:03:16:
89:0c:10:e3:ca:0e:56:99:f6:7d:02:07:d5:a0:6f:
c8:a8:64:33:e5:b7:ee:6c:98:91:e9:06:59:a2:45:
a0:3f:0e:cf:c9:79:12:98:c7:74:0c:4d:48:58:14:
02:7a:78:cc:fe:da:01:55:4b:e4:32:34:97:9e:e5:
50:c7:21:07:d8:09:38:c4:5c:71:27:2f:45:6a:eb:
9f:45:09:39:0b:ab:89:cf:2c:f6:5e:c9:30:b3:5f:
f8:10:f9:ee:86:fd:25:90:fd:c1:fc:53:ae:ef:8c:
2b:b6:b3:da:de:8f:5e:1f:d1:bb:01:00:a3:d2:46:
ff:5c:5e:0c:ba:a8:bf:fd:90:66:43:b9:a7:5e:74:
52:b4:2a:e7:bf:1c:1c:bc:b9:93:7f:05:72:4d:aa:
61:27:82:82:29:00:5e:a4:13:01:d5:74:cf:a4:6d:
6b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:60:1E:66:C7:B3:17:35:FF:91:88:82:40:90:8C:1C:A2:71:41:54
X509v3 Authority Key Identifier:
keyid:FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/888B4AC26B3611E6A149F871C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:02:21:5f:12:fc:00:0e:bc:f2:a4:d6:6b:ef:0d:a7:d7:11:
17:fd:7c:ce:0f:26:84:31:cd:3b:38:75:e0:e4:c9:a0:bf:1c:
2d:37:8b:2a:03:80:18:a0:89:26:b7:05:82:7d:07:99:8d:b5:
6a:c9:80:39:81:61:ad:59:7c:b7:a6:c7:a5:6f:76:2f:82:a8:
96:6e:08:98:59:b9:18:f6:da:c4:27:ff:e5:65:40:cf:3f:aa:
0c:0b:cd:40:e9:4b:19:41:11:94:eb:ff:9e:ed:34:99:17:36:
af:7e:8a:b7:f0:b3:05:b1:e9:ee:1c:83:49:c6:cd:e8:ac:46:
21:f8:42:7e:fe:7c:d1:f6:13:dc:6e:6d:d9:3b:f2:e2:e6:3a:
35:96:31:65:93:72:88:67:d4:6a:d6:e2:ba:13:b5:38:70:48:
45:a1:93:1e:4a:5f:f9:ed:f6:81:69:97:a4:3a:d2:99:16:27:
d1:2a:23:30:82:ab:fd:e1:9b:ba:fa:31:18:70:7f:b1:02:78:
79:7f:c5:4d:0f:ce:c5:ff:37:ff:4e:06:c8:9e:ee:be:79:92:
5f:ae:17:2a:75:af:79:6d:99:27:7d:61:a9:29:32:af:15:8d:
75:be:1a:ce:85:ff:d6:33:3c:ea:14:a6:ce:27:fe:89:2f:15:
d1:a0:79:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:06:28 2025 by rpki-client