
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/4813CD7CB88211F0B689684AC4F9AE02.roa
File: 4813CD7CB88211F0B689684AC4F9AE02.roa (raw, json)
Hash identifier: nxa5+HZlpRX/lbOxWkTwa/AB6o+F9Q2zmcbimMACVmc=
Subject key identifier: F5:8F:B5:CC:68:0A:B8:84:D3:A0:22:E4:BF:DF:10:70:06:BA:9E:BE
Certificate issuer: /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Certificate serial: 02
Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/4813CD7CB88211F0B689684AC4F9AE02.roa
Signing time: Mon 03 Nov 2025 06:56:54 +0000
ROA not before: Mon 03 Nov 2025 06:56:54 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 136897
IP address blocks: 103.86.74.0/24 maxlen: 24
103.86.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Validity
Not Before: Nov 3 06:56:54 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69085236-348f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:5b:28:d0:dd:38:f5:57:cf:c4:33:80:24:
54:11:1b:5d:40:04:4f:97:b9:dd:29:40:33:dd:c7:
82:80:96:f0:45:10:f6:8a:50:bc:5f:d4:47:b5:bc:
17:1f:8d:e7:87:11:fe:38:f1:11:4f:58:47:aa:ba:
b9:fe:63:60:8b:98:69:5a:e7:52:52:40:41:ab:56:
4b:23:2c:82:5c:f5:71:86:9d:fd:23:2a:2b:8a:8e:
fe:e1:69:b2:6a:ed:c8:e3:67:8a:c8:05:30:df:27:
70:96:32:38:3c:da:03:48:89:38:0c:e5:f8:dd:d9:
ae:90:82:75:a5:99:ad:b2:46:1a:58:16:ad:50:f1:
02:48:68:fe:e8:32:ab:7f:ce:91:37:f1:75:d2:9a:
1a:06:3d:f8:a8:af:7e:51:80:f5:c3:82:4e:90:06:
bb:de:99:fb:ac:f1:a2:83:71:2a:de:6f:14:56:5b:
f1:dd:8f:fb:10:e3:c1:dd:38:20:2d:21:11:5b:16:
04:a8:9e:61:32:07:40:1a:88:49:7f:15:65:ff:b0:
ee:26:cb:0d:42:93:ff:d7:49:8c:71:52:4e:16:7a:
ff:27:73:a4:f7:ef:9f:2f:d8:bb:48:cb:3c:6e:b1:
2e:4e:70:7f:dc:b6:9a:0a:34:7c:62:62:d3:8a:2c:
c3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8F:B5:CC:68:0A:B8:84:D3:A0:22:E4:BF:DF:10:70:06:BA:9E:BE
X509v3 Authority Key Identifier:
keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/4813CD7CB88211F0B689684AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.74.0/23
Signature Algorithm: sha256WithRSAEncryption
09:30:fa:0d:2a:66:53:4d:af:b3:98:1b:68:c0:cb:c2:03:a5:
0f:ea:cc:98:6e:e3:54:f0:46:cb:cc:fb:5d:26:74:f1:53:be:
bc:a8:fe:86:36:d6:7e:9d:0a:bd:be:e1:d9:75:b2:1a:e1:65:
a7:28:5d:79:4e:0e:c0:39:61:58:e6:44:99:bd:f1:62:f5:13:
38:d9:b5:7e:9c:e0:df:0e:e0:ed:48:33:ff:7a:88:8c:0d:3f:
54:ff:6b:eb:64:55:fd:9c:4b:02:2e:e2:1a:00:1e:e7:d0:2a:
83:ab:9b:00:56:1c:79:5d:c6:4f:68:c0:e9:db:ee:44:d4:2f:
4f:a3:5f:3d:18:94:54:0b:ef:ae:66:48:f4:97:da:09:5c:b9:
42:b1:19:1c:ed:e9:cf:6e:8b:de:7e:ea:12:4c:d6:12:e9:ca:
3a:e5:b6:99:be:d5:72:56:d7:91:37:9c:e3:05:64:b7:79:43:
96:49:14:25:80:0b:f7:07:c6:2f:4f:b8:ad:48:63:1c:35:08:
f2:48:2b:02:ff:03:bd:58:59:c7:81:39:c3:6a:6d:1a:d1:53:
dc:a4:16:b8:0b:df:28:40:a9:79:ac:5d:60:2f:04:6c:ca:50:
78:20:39:93:7f:32:00:28:82:4f:0a:c5:5c:68:af:61:a3:35:
e8:00:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:37:57 2025 by rpki-client