
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/87A141747A5511EBA4258A7DC4F9AE02.roa
File: 87A141747A5511EBA4258A7DC4F9AE02.roa (raw, json)
Hash identifier: rt6Bny5AcJrI2S637EuL4TLyFA4SjY1ZgYuhkIe6es0=
Subject key identifier: 29:D9:FF:9F:46:03:D8:64:5A:90:96:C0:B7:79:13:9C:8D:1F:BC:9A
Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
Certificate serial: 0942
Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/87A141747A5511EBA4258A7DC4F9AE02.roa
Signing time: Wed 02 Jul 2025 20:59:25 +0000
ROA not before: Wed 02 Jul 2025 20:59:25 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132825
IP address blocks: 103.151.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl
rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 20:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2370 (0x942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
Validity
Not Before: Jul 2 20:59:25 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68659dac-64c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c9:b3:98:ce:a3:d5:9c:8c:ea:7d:28:0f:0f:
50:3d:81:92:c8:fd:c3:45:12:09:5e:64:42:5b:9d:
2c:a9:6a:11:50:19:3c:28:e5:0f:4a:d8:88:87:ad:
99:38:fb:00:2d:e8:31:8c:28:fc:fe:b3:23:35:92:
25:f7:18:22:0b:d7:2f:72:0d:fd:2b:37:c2:52:1e:
65:d1:81:38:d8:53:a6:0b:10:3d:95:56:7c:a2:64:
05:3d:18:93:05:53:5c:aa:e7:6a:83:3a:21:25:84:
46:1c:d5:b5:98:2f:cf:e5:e5:6a:78:cf:0d:bf:33:
de:1b:ef:94:ea:ba:a6:f3:22:ef:0d:4b:15:92:b8:
89:62:98:73:10:0c:ad:e9:eb:7f:10:79:ce:6b:9a:
af:f5:06:ce:59:18:ba:7a:90:4e:50:c1:3a:fc:e2:
3b:e9:91:14:b6:1c:4e:3e:c5:17:a8:00:68:43:16:
c9:51:90:3b:b7:f1:ef:a2:f5:b2:03:0d:c8:40:3b:
cf:d3:8a:6b:4b:59:9b:61:df:d1:09:05:00:b1:2f:
32:91:25:fb:21:bd:56:f4:0c:f9:64:e5:66:e5:2d:
db:17:54:ea:16:ff:61:fc:af:6d:a4:87:00:95:ff:
f6:f7:ee:99:89:40:eb:41:3e:e1:32:d6:1e:a2:52:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D9:FF:9F:46:03:D8:64:5A:90:96:C0:B7:79:13:9C:8D:1F:BC:9A
X509v3 Authority Key Identifier:
keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/87A141747A5511EBA4258A7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.216.0/23
Signature Algorithm: sha256WithRSAEncryption
e3:3b:00:a0:39:ed:17:80:a9:b5:e6:1f:bf:25:e1:37:83:7d:
e9:7c:0e:62:62:f8:ee:ec:cc:db:7b:ba:a6:90:b6:02:51:2e:
72:e5:a5:ad:d7:97:57:f0:6c:55:68:d0:20:49:e0:d1:b7:65:
90:9b:8c:8b:7c:4d:09:22:7a:6e:80:18:ef:91:e4:6a:f8:02:
b1:d1:4b:59:58:f2:5b:77:eb:2e:f8:97:0f:6a:c3:82:06:45:
5c:2e:69:5d:22:1f:c8:bf:77:e6:4a:96:78:bc:eb:98:42:49:
b3:a3:20:99:af:26:3b:13:9f:7a:da:35:bd:69:48:32:7e:c8:
12:b3:68:07:07:73:15:34:86:13:14:01:e3:99:12:a7:e4:ce:
68:a5:45:ef:53:61:3a:16:70:e9:a3:d5:67:11:64:bb:92:71:
19:c8:b4:84:1e:40:f4:66:64:8e:3e:7e:94:41:6b:cc:f6:87:
e7:0b:29:93:73:16:86:2a:e0:82:2b:4f:08:2f:ad:e3:72:60:
c8:f0:73:a2:8e:1d:91:75:4e:ec:47:cd:05:93:04:95:e5:f8:
2c:91:db:5e:e7:3a:22:ce:c7:1a:6b:37:cd:91:c7:07:98:5f:
bb:ff:ad:65:4b:bc:4b:21:b4:05:c8:ff:b3:18:df:3d:ad:3e:
11:77:7b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 09:21:22 2025 by rpki-client