
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/D056896E592A11E889035A70C4F9AE02.roa
File: D056896E592A11E889035A70C4F9AE02.roa (raw, json)
Hash identifier: aB/CZOa/bktBFkb0MzOXP2VLNM1qXtNibatV1IuSEFo=
Subject key identifier: 30:FD:05:AA:3C:CC:CA:16:42:81:22:B4:E6:8F:5F:C8:3D:9C:3A:C9
Certificate issuer: /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
Certificate serial: 14D9
Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/D056896E592A11E889035A70C4F9AE02.roa
Signing time: Tue 10 Jun 2025 17:17:49 +0000
ROA not before: Tue 10 Jun 2025 17:17:49 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 137567
IP address blocks: 103.113.184.0/22 maxlen: 24
2402:c040::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl
rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5337 (0x14d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
Validity
Not Before: Jun 10 17:17:49 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=684868bd-b7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:bf:cb:15:d5:09:ea:0e:90:32:24:89:4c:
5c:fa:29:92:d5:bf:81:7d:2a:16:7f:1c:5d:73:77:
36:e7:21:b8:c1:67:2f:56:14:3d:c2:68:47:07:e2:
73:2c:d6:c2:16:21:7d:09:e7:ac:0b:c5:dc:42:0c:
62:4c:25:66:e1:2e:f1:30:35:5e:02:23:a8:30:5d:
e8:b9:2f:10:a3:0f:4b:f5:60:a6:01:6c:5b:01:9f:
ff:49:7a:23:9f:ce:a7:c9:c6:9a:31:67:da:f2:68:
63:ec:33:96:bd:f0:e4:5d:69:d9:3d:c7:03:ad:9d:
9c:1c:17:db:09:de:5d:49:40:52:3f:64:d3:55:d7:
0f:95:e4:5f:3c:98:72:91:13:d7:48:25:dc:74:90:
a5:a8:45:2a:20:0f:d7:87:bc:d2:7d:56:72:4d:8c:
db:37:9c:73:5c:7d:95:c8:0f:a0:b4:6f:5e:61:50:
79:e0:bd:cb:71:92:08:ec:1e:e9:a1:23:e1:49:81:
26:3d:00:fe:b8:eb:e6:14:e4:e6:05:f6:70:b3:cf:
5c:9c:a8:f4:3d:9f:c7:f2:53:7e:d1:17:cc:02:ac:
5c:d6:d2:c6:13:b8:bc:85:37:51:8e:c6:d5:80:56:
50:42:9f:13:91:12:fa:e2:99:13:11:05:ec:e0:6d:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FD:05:AA:3C:CC:CA:16:42:81:22:B4:E6:8F:5F:C8:3D:9C:3A:C9
X509v3 Authority Key Identifier:
keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/D056896E592A11E889035A70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.184.0/22
IPv6:
2402:c040::/32
Signature Algorithm: sha256WithRSAEncryption
2c:c5:7f:7a:c8:e9:62:f3:af:de:64:db:e7:b6:69:3b:57:79:
a7:4e:fb:97:16:c8:3a:07:3b:65:a7:b0:b7:da:8e:eb:ed:a3:
54:ac:f7:7f:62:1a:ac:71:03:30:98:89:d3:36:fa:3d:0b:fe:
23:96:19:1a:2d:b4:1f:fa:0b:84:3c:fc:35:82:4e:68:81:3a:
0a:8c:58:e8:1a:fb:86:f9:ec:42:35:3c:8d:3b:9b:e3:8b:1f:
c6:5f:a6:62:84:6d:4f:95:05:3d:4a:d7:6e:9b:cf:54:50:66:
d4:f3:41:68:30:25:a9:ea:f7:6f:bf:b9:82:28:db:2d:b0:1b:
02:36:0b:5d:ab:0e:f9:8a:cf:75:b9:d8:82:ec:2a:0a:f3:c6:
a5:b6:af:bc:f1:76:fb:ee:7d:c3:5d:45:2f:b5:09:cd:ac:a4:
e7:cf:a3:c4:2d:6a:e8:4a:48:5d:c4:f3:5a:f1:22:25:ef:30:
4c:50:6f:da:fc:2b:6b:76:16:03:6c:1d:45:e1:98:f5:63:de:
04:0b:be:ee:91:d9:95:83:8a:dc:01:fe:ea:a7:d6:ae:67:2a:
39:f8:08:96:9c:11:29:3b:de:35:76:cb:f5:77:38:bf:b8:7c:
d9:da:3c:7a:92:04:4a:bd:ad:2e:ab:99:ee:93:72:21:7e:85:
49:d7:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:09:38 2025 by rpki-client