
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/56EC0F5EABD411F0ADCDD73CC4F9AE02.roa
File: 56EC0F5EABD411F0ADCDD73CC4F9AE02.roa (raw, json)
Hash identifier: OqbQu7kEO5HyQlsajTkQ2cRmRukKYtR+ZcR573z3wAk=
Subject key identifier: 7A:E1:1F:D2:E0:ED:9C:07:CF:0D:55:B9:1B:A5:EB:E1:A8:5A:D7:F0
Certificate issuer: /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Certificate serial: E5
Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/56EC0F5EABD411F0ADCDD73CC4F9AE02.roa
Signing time: Sat 18 Oct 2025 03:41:33 +0000
ROA not before: Sat 18 Oct 2025 03:41:33 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 26658
IP address blocks: 103.207.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 06:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Validity
Not Before: Oct 18 03:41:33 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=68f30c6d-647d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:41:ad:d7:4f:4b:4a:6c:65:81:dc:23:c1:
77:5f:d8:98:9d:f2:af:54:06:de:8a:ed:e0:20:96:
a1:76:4b:d6:e7:03:67:b0:75:0d:9d:18:2c:70:fb:
ef:b0:bd:13:41:26:e0:07:6c:da:1d:29:25:38:60:
ac:07:d7:a4:68:38:bb:64:fd:00:69:c5:bf:6d:e2:
fa:50:72:a8:0b:da:75:11:31:c3:13:60:ee:13:79:
73:fd:ca:16:6f:44:53:03:73:34:45:bf:88:30:3f:
81:e9:08:5e:97:5c:b9:89:84:22:d9:9c:37:fc:a3:
ab:34:51:99:fe:05:97:d3:f6:34:d2:c1:f1:fa:be:
73:23:78:f2:21:07:7d:81:d2:7b:8d:d2:e4:bf:a3:
00:79:16:08:0e:e6:49:d6:c3:68:85:0c:9f:4a:ca:
0c:9c:55:54:bb:90:be:53:15:09:17:fe:ec:51:74:
f2:4e:6f:88:8c:be:73:65:ad:47:d9:74:1b:17:ac:
14:e4:41:f3:f6:8c:ec:46:9a:69:db:7f:a6:c0:91:
73:56:e9:c7:52:c4:3b:84:35:c2:92:24:1e:fe:f9:
96:ff:63:ae:69:81:56:35:7b:6c:dd:2e:ee:88:6c:
62:25:b4:eb:94:8e:de:a9:0b:c7:0b:71:12:09:28:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E1:1F:D2:E0:ED:9C:07:CF:0D:55:B9:1B:A5:EB:E1:A8:5A:D7:F0
X509v3 Authority Key Identifier:
keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/56EC0F5EABD411F0ADCDD73CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.116.0/22
Signature Algorithm: sha256WithRSAEncryption
77:7d:6e:57:b5:df:82:d4:0d:85:b2:0f:ba:56:96:0c:ab:ae:
4e:d2:de:4c:0a:06:c1:bd:eb:69:d3:81:93:e5:7a:b6:7d:c3:
aa:e7:9e:35:41:ce:e8:99:47:a1:37:00:de:a2:de:1e:ff:0a:
a3:89:97:8d:9b:e5:05:42:67:bd:a7:38:b5:e9:32:43:5c:d1:
af:ac:f0:fd:99:2b:90:a6:82:82:52:7e:d7:10:94:16:0e:57:
9e:f1:f9:b3:ea:38:d7:26:d6:f4:b8:bd:9a:57:0c:53:6b:ce:
58:be:0b:b6:2a:ed:d4:48:ef:2b:a5:76:1e:09:a1:1d:ed:8b:
48:48:ca:b5:07:b5:02:58:45:5c:03:f5:1e:45:ec:8f:62:9e:
67:a6:bb:60:cb:b3:af:1b:b8:ac:a1:25:9c:56:99:70:78:4f:
15:70:e6:39:8c:e7:af:62:97:d1:d0:7e:9a:52:a9:2c:ea:02:
39:24:f7:bd:d4:31:65:f6:54:f2:dc:3b:84:61:78:3f:00:89:
9d:ae:46:5c:d4:bd:e7:6a:a2:15:ae:28:b7:34:e3:05:e8:23:
4d:94:9e:f3:77:eb:fe:a8:4e:43:9f:b5:82:f8:23:11:ac:f6:
fd:8f:c8:47:9a:a8:3a:cf:68:ec:13:88:f6:42:bd:bc:18:7a:
b2:19:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:07:35 2025 by rpki-client