
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/74CA44AA049F11F087661234C4F9AE02.roa
File: 74CA44AA049F11F087661234C4F9AE02.roa (raw, json)
Hash identifier: Dt3Rxw54HIQ46kEi6T0edZoyMwWemQneM/8kvnTf7jo=
Subject key identifier: 6E:64:9B:B0:73:D1:AC:9F:5D:75:81:4C:6C:FB:9C:B8:55:60:0C:CA
Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Certificate serial: 0B54
Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/74CA44AA049F11F087661234C4F9AE02.roa
Signing time: Tue 02 Sep 2025 19:39:26 +0000
ROA not before: Tue 02 Sep 2025 19:39:26 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 5065
IP address blocks: 103.14.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl
rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 19:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2900 (0xb54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Validity
Not Before: Sep 2 19:39:26 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68b747ee-3880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:01:b0:cc:91:9f:3c:3a:db:7a:a9:0d:4c:
e4:08:cb:d8:fb:31:f8:a8:a8:c6:28:19:1d:69:42:
57:df:bd:17:d2:96:68:75:ca:7e:97:b9:df:da:d6:
a2:4c:39:4e:09:13:e0:09:27:0a:47:6d:35:c2:2c:
b2:2b:d5:82:58:fc:dc:80:e7:4e:bf:f2:72:22:eb:
85:09:d9:1e:b0:14:af:9e:e1:ef:2c:e0:81:ed:88:
1d:9b:ec:6e:1f:ca:c4:76:6f:51:17:b5:6e:00:5d:
c4:36:67:84:75:b3:7f:e9:38:ce:2e:f2:44:da:68:
3b:c4:3b:7d:13:32:8a:80:4c:0c:4d:27:5e:23:c3:
fd:6b:c7:52:3a:0a:b8:43:6e:49:59:a8:41:0d:35:
66:9b:04:dc:89:c1:61:a1:40:45:56:99:7b:d0:6f:
c4:40:b7:e9:ae:c1:59:1a:9e:20:7e:97:6b:c6:92:
93:93:ac:25:4e:d2:5b:5d:28:e7:24:34:59:79:4e:
a1:e2:a0:c1:f9:a9:0d:43:70:26:ca:ee:24:63:8b:
97:32:b9:e7:e5:89:b4:a8:70:8a:18:2a:ca:e1:bf:
1a:3a:68:c5:f9:00:dd:64:5c:b3:d5:49:2d:06:11:
56:88:3d:d4:f4:7e:1e:85:e8:c6:eb:f1:06:fb:9c:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:64:9B:B0:73:D1:AC:9F:5D:75:81:4C:6C:FB:9C:B8:55:60:0C:CA
X509v3 Authority Key Identifier:
keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/74CA44AA049F11F087661234C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.167.0/24
Signature Algorithm: sha256WithRSAEncryption
39:04:eb:47:b7:28:18:0f:12:94:5f:ee:99:b8:d5:9c:e0:36:
ef:45:74:70:76:f5:87:81:26:a3:fb:46:3b:a8:f6:7a:bf:b7:
65:c2:90:31:0a:51:b5:20:e8:8a:d1:02:80:23:5d:61:ba:6c:
b8:42:13:56:8b:8c:39:8f:bf:f8:ff:9d:e1:fc:48:67:26:58:
7c:aa:1b:02:7b:5e:91:c0:3c:f7:17:74:e5:e4:e7:47:e9:c4:
85:72:19:67:0a:7a:06:02:22:58:7e:5f:67:93:32:49:d1:5d:
52:d2:c6:c9:7b:07:35:7f:92:8b:8b:73:e6:90:1f:49:f1:91:
ec:27:db:db:11:0d:6f:07:96:66:86:91:be:8a:35:e1:b8:fe:
f7:c6:6b:5e:c3:fd:f6:66:d1:05:1a:a1:e0:b6:4d:ce:bf:49:
99:f0:8e:36:e7:59:45:76:2e:ab:b7:75:e0:0c:5b:a6:34:33:
3c:97:d9:17:be:6c:12:df:ee:45:a8:58:66:ea:61:c8:1b:8a:
51:90:ed:e0:37:7e:ed:ac:a1:4a:cb:cb:88:73:ee:ea:18:05:
80:38:73:b3:77:55:a4:b7:4f:8a:79:65:d7:01:f5:03:6b:7e:
9d:96:d0:8d:ca:3d:36:fd:be:3f:5f:04:88:22:0f:7a:4c:ea:
71:01:0f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:55:27 2025 by rpki-client