
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/F8088528E65D11EDB5112931C4F9AE02.roa
File: F8088528E65D11EDB5112931C4F9AE02.roa (raw, json)
Hash identifier: 2Y1qjCmLTaBuW+PY4V12Zh62AUY0iuAkYOwDBibrsjY=
Subject key identifier: A1:FB:10:0A:AC:8F:E2:AA:C7:16:DC:3E:D9:84:72:13:80:78:5C:C1
Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial: 0B85
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/F8088528E65D11EDB5112931C4F9AE02.roa
Signing time: Fri 02 May 2025 19:27:40 +0000
ROA not before: Fri 02 May 2025 19:27:40 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 150744
IP address blocks: 103.112.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 19:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2949 (0xb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Validity
Not Before: May 2 19:27:40 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68151cab-0b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:29:6c:b0:9f:de:f4:a6:02:e0:9b:90:67:
a3:e3:56:b8:15:ab:33:44:35:91:21:09:6d:9b:4a:
7c:a8:f4:f8:ac:2b:1b:99:69:47:3c:0a:da:b4:6e:
6e:59:b9:39:c4:0a:ed:58:e2:4f:ed:5a:50:29:98:
8e:92:f1:50:69:dd:c3:b7:80:16:c9:a0:bf:c6:97:
56:66:be:9f:81:32:82:84:09:fe:db:87:7a:10:b0:
02:b3:b4:9c:78:b9:e5:db:8c:b5:6b:b1:76:8d:79:
9e:92:f6:fb:27:f4:de:04:0d:c5:b4:d7:6f:47:d8:
2d:5a:30:54:2a:a6:03:87:99:08:03:ae:79:4d:5c:
db:27:58:5f:4c:6b:8d:a0:53:41:78:63:90:25:22:
67:9d:2c:98:09:62:62:62:da:78:64:a6:b9:e3:8c:
2a:b7:c8:34:8e:22:4b:a6:02:68:72:a4:ea:eb:1a:
09:37:bc:44:47:36:49:81:3a:8f:05:d6:f9:10:9f:
57:60:5f:f9:66:79:2f:15:e1:36:1f:16:91:dc:a9:
13:49:77:27:2b:00:67:31:ce:4d:b8:8c:42:c2:23:
94:08:2f:75:b3:59:30:24:73:05:32:ce:c9:d1:0f:
1b:3d:d8:33:6e:5f:6e:08:62:f2:02:d7:c9:b2:24:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FB:10:0A:AC:8F:E2:AA:C7:16:DC:3E:D9:84:72:13:80:78:5C:C1
X509v3 Authority Key Identifier:
keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/F8088528E65D11EDB5112931C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.205.0/24
Signature Algorithm: sha256WithRSAEncryption
82:30:bb:02:1d:41:c0:a0:9c:6a:c9:db:68:a9:40:18:b8:e4:
69:bf:46:92:0f:bb:9f:24:07:53:79:ca:b1:d1:47:5c:e5:e1:
8d:aa:5c:fe:bc:f1:17:3e:1a:71:ef:7d:86:27:ca:2e:40:d8:
5f:8b:0a:00:33:4a:82:d7:8d:86:1a:23:80:7a:b6:fa:e4:5c:
80:94:c2:47:7a:4d:ef:72:f7:6c:7e:7a:67:01:d6:89:46:b0:
dd:89:2c:bd:98:07:26:59:92:f0:0b:da:3e:c6:80:e9:e0:48:
ae:c5:7d:3d:69:46:7b:89:74:dc:38:03:cc:40:3b:cf:c5:cf:
6b:08:b2:38:cf:e6:90:0e:f1:1c:56:94:4b:49:98:7a:14:28:
20:c7:8f:41:02:ae:ff:1e:20:b8:2e:1f:8c:a5:b3:09:d6:05:
40:0e:cf:ea:6a:53:f8:f3:74:69:33:f2:8b:28:1a:23:64:d9:
ad:c8:6a:76:dc:d5:ac:31:77:a8:77:67:25:24:42:b4:ae:0f:
cd:0b:56:92:52:be:86:17:24:33:00:89:3e:b1:e8:22:93:64:
25:87:81:0d:5f:6b:c6:4d:36:2b:a0:fe:4b:d9:66:ca:5e:5a:
15:a1:af:8c:7a:50:67:84:6f:37:0e:df:41:3f:de:31:81:bc:
94:09:47:c7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC
N0E0MjE4OEYwHhcNMjUwNTAyMTkyNzQwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODE1MWNhYi0wYjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu/gpbLCf3vSmAuCbkGej41a4FaszRDWRIQltm0p8qPT4rCsbmWlHPAratG5u
Wbk5xArtWOJP7VpQKZiOkvFQad3Dt4AWyaC/xpdWZr6fgTKChAn+24d6ELACs7Sc
eLnl24y1a7F2jXmekvb7J/TeBA3FtNdvR9gtWjBUKqYDh5kIA655TVzbJ1hfTGuN
oFNBeGOQJSJnnSyYCWJiYtp4ZKa544wqt8g0jiJLpgJocqTq6xoJN7xERzZJgTqP
Bdb5EJ9XYF/5ZnkvFeE2HxaR3KkTSXcnKwBnMc5NuIxCwiOUCC91s1kwJHMFMs7J
0Q8bPdgzbl9uCGLyAtfJsiRfPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKH7EAqs
j+KqxxbcPtmEchOAeFzBMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy
MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH
STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTg0MDUvRjlDMTk2OTYzMjEyMTFFQTkzNjMzQTU5QzRGOUFFMDIvRjgwODg1MjhF
NjVEMTFFREI1MTEyOTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABncM0wDQYJKoZIhvcNAQELBQADggEBAIIwuwIdQcCgnGrJ
22ipQBi45Gm/RpIPu58kB1N5yrHRR1zl4Y2qXP688Rc+GnHvfYYnyi5A2F+LCgAz
SoLXjYYaI4B6tvrkXICUwkd6Te9y92x+emcB1olGsN2JLL2YByZZkvAL2j7GgOng
SK7FfT1pRnuJdNw4A8xAO8/Fz2sIsjjP5pAO8RxWlEtJmHoUKCDHj0ECrv8eILgu
H4ylswnWBUAOz+pqU/jzdGkz8osoGiNk2a3Ianbc1awxd6h3ZyUkQrSuD80LVpJS
voYXJDMAiT6x6CKTZCWHgQ1fa8ZNNiug/kvZZspeWhWhr4x6UGeEbzcO30E/3jGB
vJQJR8c=
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:35:00 2025 by rpki-client