
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa
File: B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa (raw, json)
Hash identifier: cmHL+jcXVZxk1ExKQVL6FlfnXQXFN7c8jdKbgylZ/70=
Subject key identifier: 1A:C5:20:C6:B2:85:10:DB:C7:80:E3:76:6C:AB:49:47:9F:59:BC:1E
Certificate issuer: /CN=A91C5778/serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540
Certificate serial: 0BBF
Authority key identifier: B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa
Signing time: Thu 06 Feb 2025 18:36:57 +0000
ROA not before: Thu 06 Feb 2025 18:36:57 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 55492
IP address blocks: 103.81.196.0/22 maxlen: 22
103.81.196.0/24 maxlen: 24
103.81.197.0/24 maxlen: 24
103.81.198.0/24 maxlen: 24
103.81.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl
rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 18:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3007 (0xbbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5778, serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540
Validity
Not Before: Feb 6 18:36:57 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a50149-4f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:c1:9e:11:45:79:ec:64:5c:79:f7:10:3c:
a3:d9:b0:52:8e:cb:1a:e5:af:81:87:bb:f5:bf:c3:
bf:d7:7f:cb:07:9e:80:a5:5e:51:52:7e:eb:18:aa:
d0:4c:e6:0b:0d:00:a9:be:c2:ea:ab:bf:ca:f4:ed:
f8:e5:db:9b:1b:bf:ff:8b:7c:fa:86:50:a0:dc:54:
e1:96:bd:ae:b0:fc:1f:a9:e4:b2:4f:30:90:13:1a:
69:0f:7f:d0:56:88:28:cc:54:71:d1:cb:02:25:04:
ed:ce:18:1a:2e:a8:51:ee:3b:2f:28:c9:3d:35:05:
09:c3:c8:96:12:e1:26:97:54:52:44:18:b1:40:ba:
ab:8c:94:22:e2:4b:b4:89:ce:f5:44:ac:94:36:a4:
38:d7:3f:f5:41:4f:f7:f0:69:73:4f:f5:d2:0f:16:
fc:64:6d:3d:aa:12:3d:c6:df:26:c3:4f:e6:9e:28:
06:1f:44:a7:e0:b2:cb:73:53:7a:e7:d9:3b:1c:98:
ff:42:4b:c7:f7:62:24:9c:44:25:f8:dd:96:69:fa:
27:7d:a6:0c:04:56:2c:f9:81:fe:90:46:b4:3e:9f:
7b:bb:6c:e7:95:bf:7d:45:d6:ac:b9:5a:07:df:a4:
e1:50:6b:c6:eb:a7:c3:eb:b5:01:80:03:b8:8e:e4:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C5:20:C6:B2:85:10:DB:C7:80:E3:76:6C:AB:49:47:9F:59:BC:1E
X509v3 Authority Key Identifier:
keyid:B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.81.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:1c:75:32:3e:14:3f:9f:09:34:7d:68:8d:8e:56:8a:d8:c0:
6d:7b:7a:53:c8:99:61:be:51:18:eb:fc:90:06:02:6a:8b:12:
7e:60:56:9a:fc:12:53:a5:f0:22:b3:f7:f3:bd:bf:1d:ac:c9:
ec:84:2c:bc:38:75:b5:96:a6:e4:6e:02:85:45:33:71:bd:0c:
7c:37:3e:a2:72:66:e1:a3:1b:ff:01:fb:20:38:d0:91:18:da:
02:72:18:a1:fe:58:fb:2b:a1:51:4d:92:21:2f:0e:ea:5a:ea:
cc:34:09:43:a6:d9:c5:15:8c:d2:7e:d5:7d:7e:02:b2:55:26:
59:0c:eb:39:9c:cd:a4:4c:c9:ab:f2:8d:41:99:34:a2:74:84:
fc:06:2f:36:df:b3:aa:dd:ea:44:7d:02:c2:1c:ca:38:d1:e2:
36:10:b4:1a:12:73:4a:0b:75:3b:28:6b:97:a5:a3:f5:0a:6c:
41:e1:cf:aa:a0:7e:5c:b2:84:dc:ac:d2:f3:ec:67:2c:e3:38:
75:03:1f:70:3c:c6:de:90:3c:98:e0:cd:d7:d1:bb:42:fd:f7:
c6:38:13:29:b2:42:b1:87:b0:b3:e0:b6:cb:37:ff:ea:4e:0a:
2d:1e:b0:0d:d0:da:9f:3a:92:e3:80:8d:f6:d8:ff:56:df:ef:
ef:90:cb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 06:47:16 2025 by rpki-client