
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/183E52D8224711EB9EC51D58C4F9AE02.roa
File: 183E52D8224711EB9EC51D58C4F9AE02.roa (raw, json)
Hash identifier: ZGq5JFpnBl6F/9RJYSzWIqvoJrxf/ut9GoB7c3G4b0w=
Subject key identifier: A1:27:73:FD:9C:E8:C3:99:A7:70:75:21:43:47:9E:F6:F8:5D:C9:94
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 362B
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/183E52D8224711EB9EC51D58C4F9AE02.roa
Signing time: Tue 02 Sep 2025 15:01:24 +0000
ROA not before: Tue 02 Sep 2025 15:01:24 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 209181
IP address blocks: 103.230.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13867 (0x362b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Sep 2 15:01:24 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68b706c4-ab90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:df:04:a6:2b:d3:d4:4d:99:b1:41:4e:71:
a9:6c:18:8f:24:6c:e4:db:a3:88:37:97:0c:7c:88:
a5:53:a3:04:2d:47:4d:04:f8:69:ff:58:f1:30:79:
2b:05:a0:9a:f6:2a:34:d5:15:c0:2d:63:63:1d:39:
78:9b:a5:f5:13:76:e8:32:2f:6e:f4:38:8c:07:2e:
13:79:6d:41:3e:68:ef:b2:2f:f9:ea:98:09:8f:08:
3f:75:56:1c:62:19:aa:ac:47:fb:9e:1c:ee:92:40:
d0:fe:7b:c9:8c:47:c0:3f:d5:36:34:db:df:db:76:
a5:c6:93:6b:6a:5f:a9:42:ed:67:9a:1e:d5:52:64:
91:c2:b4:3b:7d:b8:bd:e9:be:ac:78:5c:c5:6a:6d:
55:d7:cf:b6:ae:c9:84:68:83:f5:dc:fd:03:9e:a0:
9f:ec:4f:a5:61:bd:6c:2c:89:c8:b4:8c:1e:6f:d5:
79:b1:77:15:61:da:e5:7c:71:6f:00:1c:a2:db:b4:
10:41:24:52:1a:87:a5:b1:5a:33:45:ac:95:91:65:
86:fc:86:3f:44:ea:4f:f0:4e:31:73:a2:0f:38:2b:
e1:77:0b:df:29:f4:73:5f:cf:d9:8a:a5:eb:be:e5:
16:bc:de:28:fa:22:a9:8d:f5:5c:e8:19:83:fc:fc:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:27:73:FD:9C:E8:C3:99:A7:70:75:21:43:47:9E:F6:F8:5D:C9:94
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/183E52D8224711EB9EC51D58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.70.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b3:16:1d:d4:e8:10:31:fb:ea:6e:3c:98:9f:aa:37:61:4f:
0c:78:37:b1:f9:26:a7:16:13:34:27:ca:94:3d:b6:31:5d:d5:
fd:ba:73:36:33:eb:d1:e2:6e:df:1a:d8:c2:85:22:60:1d:a1:
dd:32:09:b8:4e:ee:cf:ad:91:aa:e6:ac:8b:ec:f7:cb:f9:2f:
79:5f:91:bf:63:77:6d:1c:8a:6b:47:de:c0:34:7b:be:f0:22:
6e:01:1b:e5:b7:1c:c2:a0:d5:09:90:dd:41:b9:2c:b8:e0:33:
2b:00:f8:bb:b8:f7:d3:88:9b:92:f9:ce:16:0c:c9:ab:55:ad:
5a:d1:89:17:e5:79:0b:6a:5b:2f:87:5b:b8:17:e6:23:16:83:
36:81:4b:d0:a2:e5:2e:ec:3f:e1:75:e6:a2:40:c9:5a:53:0b:
2e:df:bb:df:9a:f2:ec:4a:1d:a4:dd:27:46:a6:c4:43:72:92:
3f:c3:4b:a5:4e:cc:9b:2b:50:0b:d0:23:15:bf:d9:8c:30:3b:
cc:e7:18:83:2c:92:9e:06:f2:8f:de:8a:2d:2d:a0:98:a6:94:
78:32:a7:92:0d:9d:f7:87:2e:d2:98:c1:4e:66:99:55:60:d5:
00:87:0c:6b:d9:1e:ff:be:74:6c:f3:16:2f:02:ef:41:90:eb:
96:91:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:44:50 2025 by rpki-client