
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/12561046368911EEA0CB766BC4F9AE02.roa
File: 12561046368911EEA0CB766BC4F9AE02.roa (raw, json)
Hash identifier: ZsNiLxfxjjXIOR9efOK6g19RpsthQOBE4XYCmM1hnq8=
Subject key identifier: EE:FE:CB:D1:F3:5B:32:1F:96:B8:4F:C8:23:AD:83:C2:75:8C:52:A5
Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial: 0CA0
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/12561046368911EEA0CB766BC4F9AE02.roa
Signing time: Wed 30 Apr 2025 18:28:16 +0000
ROA not before: Wed 30 Apr 2025 18:28:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50889
IP address blocks: 103.6.211.0/24 maxlen: 24
121.200.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Nov 2025 18:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3232 (0xca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Validity
Not Before: Apr 30 18:28:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68126bc0-fc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:04:aa:05:e3:3c:5f:df:e9:6f:2e:e2:91:
6b:4e:63:96:bb:ee:e2:14:8b:55:23:0e:46:78:92:
7b:82:82:a2:e9:fc:a6:33:4c:e6:f6:15:14:99:5b:
3d:04:d7:c6:1a:1e:d7:82:35:de:d7:1e:e5:ba:95:
c7:88:0e:8c:36:8e:30:65:25:f3:ba:9f:88:f4:ff:
9e:cb:2e:86:98:82:6d:e2:41:2b:98:f7:b3:24:97:
6b:d9:a3:cb:03:08:73:aa:f7:00:0d:82:df:52:84:
c2:be:51:d6:dd:0f:b6:02:56:61:99:de:07:5c:12:
b8:dc:90:bf:fd:be:af:a1:5a:43:0a:35:f6:78:10:
57:d1:88:b1:2a:54:a5:c7:6a:4e:9a:63:73:68:04:
4e:8d:01:e8:ed:fb:83:f6:1a:d4:7d:ca:51:4b:1c:
62:e1:95:08:fd:b4:4e:93:d3:44:ef:db:14:f0:15:
c4:4a:f2:90:2a:de:36:f1:07:c0:ba:3e:88:b3:51:
35:0f:e0:b4:22:19:c1:d2:57:09:3e:1e:01:65:d1:
4d:47:a4:9f:d5:ce:c4:c1:9a:2e:76:05:5f:b1:37:
28:94:27:97:8d:64:c4:1e:b8:67:d8:6d:d2:88:1b:
64:6a:42:01:ad:8b:99:36:da:5c:6c:6e:33:08:5c:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FE:CB:D1:F3:5B:32:1F:96:B8:4F:C8:23:AD:83:C2:75:8C:52:A5
X509v3 Authority Key Identifier:
keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/12561046368911EEA0CB766BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.211.0/24
121.200.45.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d4:9b:ad:f0:19:95:ad:66:e3:25:b9:2c:32:c6:b5:54:0d:
d6:ab:46:85:64:ee:75:dd:c6:8d:23:cf:48:98:9f:ac:df:32:
26:27:a6:04:4a:e6:93:a9:6a:3e:12:34:3d:e2:10:d5:a0:9a:
0a:0e:61:f1:be:d1:39:6e:30:30:f1:d1:b3:8a:7e:3e:b1:81:
41:8e:17:af:23:d2:8d:67:30:5d:6d:22:8d:51:24:18:e7:69:
ba:4f:dc:05:86:d6:ba:03:33:9f:bd:4a:d3:e6:e1:7c:13:b4:
5d:a9:7d:f8:79:36:12:ed:f4:c0:9e:c4:9f:bd:4a:48:2f:7e:
94:f0:1c:dc:fb:55:2f:1d:d2:4e:44:bb:dc:16:e1:d9:c2:8c:
84:a8:2d:10:a4:98:df:94:06:cf:e0:3c:35:8e:51:af:47:de:
a0:0d:75:b1:6e:f3:14:98:b6:29:85:de:4f:dd:24:27:ad:2e:
f3:5d:7f:b4:35:07:b3:07:c3:4f:f5:40:61:b7:18:d3:5d:03:
c2:97:95:2d:cb:67:3b:f6:4b:26:9f:28:fb:98:70:96:19:4e:
99:39:a9:fd:e2:18:66:e7:b8:65:c1:7e:4d:51:53:2f:39:e3:
f9:00:55:c8:8a:2a:be:82:d4:bf:70:1a:bb:61:81:0d:89:d9:
92:f1:ae:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 03:55:52 2025 by rpki-client