
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/FB782FD2721311EE8754E20FC4F9AE02.roa
File: FB782FD2721311EE8754E20FC4F9AE02.roa (raw, json)
Hash identifier: xJGsHqGgFbOugl0Yth4s2pEmidaRE24uLNoUNasacRI=
Subject key identifier: 16:FF:68:24:3A:70:04:40:B4:74:12:B3:B2:4B:3C:6E:35:F2:3F:7A
Certificate issuer: /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
Certificate serial: 04A4
Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/FB782FD2721311EE8754E20FC4F9AE02.roa
Signing time: Thu 05 Jun 2025 00:25:19 +0000
ROA not before: Thu 05 Jun 2025 00:25:19 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 8220
IP address blocks: 103.248.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl
rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 01:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1188 (0x4a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
Validity
Not Before: Jun 5 00:25:19 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6840e3ef-5be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:ec:23:c2:c8:59:e3:ca:c1:09:37:ec:60:
ea:8b:5d:4a:eb:95:9f:38:b6:8d:c4:11:e0:f7:04:
9a:b6:3e:2c:81:de:3c:50:4a:88:f8:bf:8a:e8:f5:
7f:e4:d2:0e:7f:d0:53:86:00:fb:30:d3:67:ac:7e:
e5:d3:e3:6f:01:68:3d:a2:be:ce:91:97:5b:d2:90:
e8:87:ae:c8:18:fe:f4:79:a7:17:12:ab:5e:18:e2:
1e:61:a6:c6:3a:89:0e:0a:ea:3c:56:74:30:b1:85:
51:2f:f0:3b:a8:b6:73:d3:59:e1:68:81:d7:18:58:
01:82:81:8b:fb:00:94:55:5f:d4:4f:ae:d6:ec:6b:
7e:b5:ab:2f:46:a2:16:d6:f0:cc:44:c2:1a:2d:10:
cc:84:e3:3b:b3:58:94:7d:0e:7c:6d:39:d4:bd:9f:
0b:75:20:57:6d:d1:62:21:63:1d:fe:f5:d0:50:3d:
1f:a7:f0:6d:86:a2:0a:af:93:4d:f1:bf:f9:35:bc:
29:b9:96:f1:f9:55:75:2a:ef:21:89:c9:fa:a5:33:
4d:34:79:4d:73:3c:77:85:1a:8f:58:2d:ab:cf:47:
94:92:c1:96:15:dd:08:c0:0d:83:61:9d:26:eb:0a:
72:fd:8c:e2:23:eb:51:66:1f:0f:f7:27:58:a8:68:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FF:68:24:3A:70:04:40:B4:74:12:B3:B2:4B:3C:6E:35:F2:3F:7A
X509v3 Authority Key Identifier:
keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/FB782FD2721311EE8754E20FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f5:d1:40:9a:93:6e:02:89:07:86:83:20:4c:a6:11:d8:1d:
02:a9:11:6b:86:ca:93:03:4c:06:cc:55:41:ec:0d:76:e8:df:
e7:6b:45:bf:9c:5c:1f:e4:89:22:65:14:1c:1c:46:c4:c6:e1:
ab:b9:4e:90:19:3a:8b:17:c3:e3:e1:90:77:b3:dc:3b:33:48:
c6:ae:eb:73:64:90:35:6e:06:e6:b3:7f:04:a0:48:75:c3:b6:
d4:90:44:90:c6:67:0a:90:ea:54:40:7f:5d:bd:92:10:34:e1:
bc:15:63:68:f8:18:92:34:f5:11:65:a3:9b:a4:49:be:d8:9e:
3e:ec:55:e4:f9:af:1a:bb:5a:c0:dd:6e:6f:1e:36:cf:d4:0d:
ad:b9:3c:79:50:48:8a:01:76:2c:8e:c8:ed:06:5f:33:aa:4f:
c0:21:f7:9f:47:b2:00:bd:29:1d:93:6c:d3:01:ab:48:97:0c:
e2:a6:59:5b:ca:ce:f3:47:d8:5d:a5:c2:cd:e4:b0:35:68:93:
39:79:33:cc:fa:6d:98:12:34:e7:07:6c:e6:9a:e6:c9:cc:74:
31:ad:af:2d:5e:94:9f:01:02:f0:82:85:73:4a:8e:ac:6b:45:
88:15:71:2d:2e:11:0b:dd:07:56:13:2f:81:8d:e2:8e:37:a3:
58:4d:56:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:53:26 2025 by rpki-client