
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/84B6E12A312911EEBE440C7FC4F9AE02.roa
File: 84B6E12A312911EEBE440C7FC4F9AE02.roa (raw, json)
Hash identifier: grbiOnNT4HexnC/sHPr+ane3hv5G2MrvJSuDFjqq4cw=
Subject key identifier: AA:68:27:13:E2:BB:96:7E:E2:32:28:8F:E7:4B:AB:29:46:34:C2:B5
Certificate issuer: /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Certificate serial: 0BF0
Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/84B6E12A312911EEBE440C7FC4F9AE02.roa
Signing time: Fri 31 Oct 2025 19:07:44 +0000
ROA not before: Fri 31 Oct 2025 19:07:44 +0000
ROA not after: Sun 01 Mar 2026 00:00:00 +0000
asID: 149994
IP address blocks: 103.142.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl
rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 18:51:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3056 (0xbf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADF12, serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Validity
Not Before: Oct 31 19:07:44 2025 GMT
Not After : Mar 1 00:00:00 2026 GMT
Subject: CN=690508ff-2e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:d4:00:79:39:5e:b0:5b:14:74:6f:b1:2b:
ad:e9:15:52:90:ca:3e:f7:d2:e4:b4:18:9a:d5:b2:
ad:36:ff:b5:e8:10:35:9d:03:94:98:e8:17:34:24:
7f:c2:00:f6:f0:c0:3a:2d:96:65:1d:fe:0e:98:e4:
71:37:98:63:58:c4:a0:1c:67:aa:f4:d2:43:98:33:
a0:d7:a5:7d:7b:f1:72:af:51:96:97:00:0d:90:51:
d4:3f:44:2a:d2:6c:28:31:f1:9f:02:47:8c:e5:fd:
3e:c6:f0:0c:82:6e:a1:7f:28:0f:d9:cc:ca:6f:06:
4b:18:06:2d:1e:86:83:38:0f:57:ec:f0:0f:ca:30:
70:fe:6e:9e:b7:7a:00:26:27:9d:cd:88:20:48:cd:
7a:4d:87:f8:45:fe:c8:9b:80:c2:0d:be:5b:44:00:
5d:5d:4f:e4:12:75:43:e4:9c:dd:09:c9:bf:a0:b4:
96:64:a4:38:0a:ed:8d:e4:f8:3c:26:37:96:2c:17:
e8:da:46:88:45:4a:a6:b2:e4:92:a4:29:fb:13:ab:
19:f0:ae:f7:1d:cb:fd:49:78:c2:91:c8:27:54:59:
7e:8d:be:e2:fc:75:02:14:9e:2d:86:d2:f5:6d:39:
f5:da:40:af:8e:83:72:43:37:38:d9:5e:21:77:e5:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:68:27:13:E2:BB:96:7E:E2:32:28:8F:E7:4B:AB:29:46:34:C2:B5
X509v3 Authority Key Identifier:
keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/84B6E12A312911EEBE440C7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.68.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:47:b3:f6:2e:40:5d:60:ec:a3:09:f8:92:42:22:38:d3:c8:
ea:64:ac:10:8d:06:01:6f:f9:49:98:0f:48:78:87:b9:64:4b:
5d:2b:8e:02:1f:12:7e:79:f0:73:d7:02:89:88:50:a7:9e:cc:
a4:cf:ac:cc:a0:11:e1:db:3d:07:7c:67:54:85:92:2f:74:e0:
49:67:9b:02:93:b6:14:9b:5f:ae:44:2e:55:13:c0:18:98:48:
4a:aa:b8:1e:69:f4:f0:30:45:e9:70:56:72:58:7c:ad:f7:0a:
0d:57:8f:87:80:fa:33:0f:06:75:54:e8:8e:4f:86:32:0d:63:
3c:de:75:a2:c1:20:6f:49:0e:53:c7:57:2d:3e:ff:d6:ea:2a:
9c:de:89:b8:03:15:0e:14:11:bc:38:9e:37:a6:fd:6e:42:80:
69:a5:cf:5c:af:1f:3e:e0:55:10:40:76:34:87:09:44:45:7e:
e5:0a:e3:1b:77:29:52:38:57:7d:11:20:97:cd:47:2f:30:11:
1f:61:04:02:46:3d:9a:87:73:12:ce:62:65:1a:0c:b4:ca:39:
b9:94:4f:87:4d:b2:5f:e0:87:36:b0:40:c5:d3:1f:e8:25:f6:
37:6e:9d:06:3c:2f:f6:f8:a6:32:8e:2f:7f:3a:e1:58:74:23:
1a:b4:2e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 06:23:44 2025 by rpki-client