
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/8E1DCEDA013B11EF86588545C4F9AE02.roa
File: 8E1DCEDA013B11EF86588545C4F9AE02.roa (raw, json)
Hash identifier: D1DqZOLN1DAWGayGfbLeSFqiB6D8xEIaGywMh12xMLU=
Subject key identifier: 4D:13:E7:E9:70:99:E2:62:0C:32:85:AB:3B:41:E8:8A:4F:B2:7F:75
Certificate issuer: /CN=A91C62B6/serialNumber=C14A0E6082F0E922CAFE22969523E864C7A8F1DC
Certificate serial: F0
Authority key identifier: C1:4A:0E:60:82:F0:E9:22:CA:FE:22:96:95:23:E8:64:C7:A8:F1:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/8E1DCEDA013B11EF86588545C4F9AE02.roa
Signing time: Mon 19 May 2025 04:56:20 +0000
ROA not before: Mon 19 May 2025 04:56:20 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 150718
IP address blocks: 103.14.150.0/24 maxlen: 24
2401:9460::/36 maxlen: 36
2401:9460:1000::/36 maxlen: 36
2401:9460:2000::/36 maxlen: 36
2401:9460:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.crl
rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C62B6, serialNumber=C14A0E6082F0E922CAFE22969523E864C7A8F1DC
Validity
Not Before: May 19 04:56:20 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=682ab9f4-a0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:a1:d1:8a:93:6a:b0:e3:55:f1:72:85:be:
42:e4:27:b4:fe:08:57:41:bb:4a:19:f2:db:1e:de:
0a:1c:fd:1b:b8:a3:d0:8d:0e:4d:77:6c:38:0a:fd:
13:84:ff:f4:7e:7d:b8:c3:60:b2:f7:92:8f:8d:fb:
a2:a1:f9:3a:be:75:b9:04:ce:30:12:4c:63:2c:62:
26:7c:d9:9f:d7:d2:37:03:5a:2d:5c:3a:63:81:06:
23:19:14:d0:f3:68:16:5f:9e:78:ec:66:61:2d:01:
f4:de:80:d5:4e:14:08:19:f1:32:de:ae:32:7a:56:
b0:9c:87:ad:23:fd:17:77:76:91:38:77:b1:1a:b7:
d1:67:5a:16:9b:7c:69:5f:73:4f:a2:6f:85:b9:d3:
29:9b:93:bd:38:70:9d:dc:26:6d:1f:0c:f4:09:d8:
d9:2c:6a:7e:4e:9a:12:85:9f:53:41:fe:4f:3b:6c:
20:da:27:84:71:75:0d:5b:6d:f2:06:93:2e:11:3f:
be:0b:c8:bf:ac:fe:57:66:59:78:95:f3:21:4d:f0:
cf:4a:31:b6:25:1e:1c:d6:c2:2c:57:4a:10:45:ca:
3b:5e:f1:70:76:be:ec:a1:71:56:f7:da:f8:28:2a:
2e:ad:cf:7e:a7:a0:e8:d7:09:bc:95:8f:0c:aa:e0:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:13:E7:E9:70:99:E2:62:0C:32:85:AB:3B:41:E8:8A:4F:B2:7F:75
X509v3 Authority Key Identifier:
keyid:C1:4A:0E:60:82:F0:E9:22:CA:FE:22:96:95:23:E8:64:C7:A8:F1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/8E1DCEDA013B11EF86588545C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.150.0/24
IPv6:
2401:9460::/34
Signature Algorithm: sha256WithRSAEncryption
26:f2:de:75:3a:61:ef:99:0e:76:d2:69:af:64:ff:c9:32:87:
ac:a7:c3:11:2c:ff:f8:55:62:e8:38:f7:2e:5f:d6:bf:0a:8b:
e4:33:d5:df:f5:f2:8c:56:da:89:a9:27:9b:05:36:23:1b:da:
5b:b4:88:c7:98:89:4a:f0:ca:1c:b8:20:ff:8c:b8:af:a7:5d:
cc:62:99:f4:aa:22:9b:6c:4e:ca:b8:56:4c:26:9e:21:a0:f5:
c3:4d:d6:f7:2f:2f:d4:47:c6:16:3a:ef:5c:6f:f1:46:37:d4:
4a:fc:99:1f:b9:43:b1:15:d6:58:a1:1c:bc:2d:f9:5c:62:08:
49:3a:84:97:c8:c6:fe:ca:b7:2a:27:bf:da:f7:dd:09:aa:d2:
67:e9:08:d4:ef:f9:57:14:bb:51:d0:6f:05:a1:fc:77:4b:cd:
84:2a:5a:61:04:ff:43:ca:ef:09:64:d3:41:be:35:9f:bc:4b:
2c:73:e5:f7:bd:5f:9d:61:48:c7:8a:15:20:73:1f:ba:8d:c2:
1f:4f:ad:d8:ac:b2:99:55:e4:b1:10:f2:b7:51:d7:ae:f9:9b:
7b:23:37:77:ca:86:0b:4d:35:54:85:06:be:23:f6:0e:92:b9:
b3:97:62:40:61:18:d5:02:85:7d:c1:e9:a1:83:33:68:f5:6c:
b7:2a:8e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:42:59 2025 by rpki-client