
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A074721624CA11EF93486579C4F9AE02.roa
File: A074721624CA11EF93486579C4F9AE02.roa (raw, json)
Hash identifier: rhkmKm24Z3LGwUDn9U8wPN9PfTD6fV18fMcA/oDsqYQ=
Subject key identifier: 3F:0F:10:DE:82:01:C0:98:22:27:72:82:CF:AF:2F:F6:2C:99:20:99
Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial: 0119
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A074721624CA11EF93486579C4F9AE02.roa
Signing time: Thu 23 Oct 2025 07:19:19 +0000
ROA not before: Thu 23 Oct 2025 07:19:19 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 134165
IP address blocks: 103.37.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 07:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Validity
Not Before: Oct 23 07:19:19 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68f9d6f7-a8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:db:2d:19:25:c8:fb:8d:db:17:0f:4d:8c:
37:82:ab:72:0d:18:ad:6d:4e:b1:c0:8a:35:bd:61:
ea:4b:da:1a:9b:18:d0:8e:81:13:19:28:fc:3e:be:
38:d8:7a:68:51:35:2b:e6:54:f7:78:5b:9b:4c:a9:
a3:6b:a0:98:cb:9a:9c:de:30:70:52:78:7a:7c:27:
5c:92:f5:5e:13:35:e0:b1:dd:3e:1a:7e:22:96:ac:
44:35:41:69:cd:95:4a:37:81:9e:bc:51:69:89:f1:
e5:c5:4b:f9:b6:9f:e0:b9:aa:65:ac:f8:96:cf:aa:
82:52:ed:d7:5b:f9:04:7d:b8:70:df:78:17:8a:ef:
1b:d6:70:a0:bd:9c:f1:d0:20:34:66:30:0e:62:32:
86:c7:ad:e8:ec:26:9e:26:4e:7c:61:93:11:33:1f:
49:c7:df:c3:56:7b:2c:40:f7:54:b5:4a:57:3c:17:
1e:cd:ba:6f:cd:7c:51:93:39:5d:3f:5a:e2:de:53:
19:cd:2e:36:b8:c9:d0:87:20:44:73:f0:80:36:93:
2a:4b:66:2a:03:cb:c6:66:f5:06:3a:c6:1c:e9:47:
4f:db:a1:d5:69:c0:d6:fb:74:49:78:f9:10:9f:8d:
f2:96:7b:b0:a5:33:79:38:ab:c1:9d:a3:f2:06:fb:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0F:10:DE:82:01:C0:98:22:27:72:82:CF:AF:2F:F6:2C:99:20:99
X509v3 Authority Key Identifier:
keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A074721624CA11EF93486579C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.37.228.0/24
Signature Algorithm: sha256WithRSAEncryption
95:06:99:37:ea:bc:63:0b:5e:90:b3:80:e2:b2:e0:2d:68:c7:
05:79:81:15:82:43:ac:e6:bb:cb:cf:b5:01:e4:50:ad:28:81:
34:b3:85:69:49:93:c7:a2:b7:ca:70:87:b8:22:b8:77:fd:60:
6a:cc:73:20:f8:00:52:76:1b:d9:36:97:d5:4c:d0:22:fb:a0:
45:ab:1d:43:cf:46:a9:92:b6:f5:a6:d2:a8:72:2a:13:14:15:
ef:1a:71:13:2f:37:81:f4:e6:17:a1:82:b5:37:67:d0:5d:76:
cd:34:02:db:a7:bc:4a:f7:01:97:1b:a1:ce:4a:4c:6f:a6:f7:
24:ff:13:fc:99:35:f2:1b:f8:7f:ca:e7:b0:66:1c:4f:51:38:
45:93:84:d4:ba:17:a5:c4:2b:52:55:11:bf:f5:89:c3:a9:f2:
b7:31:c8:ea:4d:27:76:69:cd:15:92:25:53:ec:f9:3f:f4:72:
8d:95:e4:22:78:ed:7a:07:98:ef:e5:d1:73:e3:31:04:63:fc:
ab:c1:1a:96:93:82:61:90:73:c4:59:e6:ce:c3:d8:1f:64:d1:
7d:bc:b6:d5:90:d2:9a:f8:fb:fe:e2:15:7d:20:0e:03:8f:a3:
b2:03:b1:15:03:29:51:5c:45:f1:e0:80:ed:e4:c6:55:d3:34:
77:85:c1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 12:57:53 2025 by rpki-client