
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/0BD593E6136D11F09F542C81C4F9AE02.roa
File: 0BD593E6136D11F09F542C81C4F9AE02.roa (raw, json)
Hash identifier: SWRmAGbxh5hY7JV5X8hEzDbtYDfPhYpW9hzMkzuDG3Q=
Subject key identifier: 68:97:91:E2:84:D0:1C:E6:E0:89:21:3B:26:1D:2C:12:A6:00:AE:1D
Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Certificate serial: 36
Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/0BD593E6136D11F09F542C81C4F9AE02.roa
Signing time: Thu 10 Jul 2025 05:16:35 +0000
ROA not before: Thu 10 Jul 2025 05:16:35 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153526
IP address blocks: 203.77.168.0/21 maxlen: 21
2401:e9a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Validity
Not Before: Jul 10 05:16:35 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=686f4cb3-6d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:35:4a:b0:b1:34:a1:dd:17:66:a1:dd:4f:
8b:20:d3:5f:67:37:4b:7a:2f:11:2f:50:83:24:e8:
a6:a7:11:96:df:fd:9b:b6:dc:46:b7:b7:ec:a0:98:
08:00:e6:bd:4e:00:42:dc:bf:35:cd:6c:2c:cd:97:
7c:8c:7a:41:0d:1a:b8:29:e7:e8:96:3c:e7:32:d8:
17:06:3c:e2:7b:18:b7:8b:c2:ca:8a:9a:41:52:f0:
a4:51:87:1e:fe:ee:f5:fa:6a:b0:36:d9:37:02:5a:
4e:5f:84:11:ef:41:34:42:f2:ab:2c:cc:eb:80:65:
4b:96:b7:62:34:ea:04:e4:95:2a:0b:9c:f8:2a:6b:
98:2b:d9:42:3c:16:11:c5:f9:02:54:7f:58:3d:57:
9a:1b:b4:2f:1c:58:98:b2:0c:29:c2:08:a8:33:f3:
d3:10:45:02:3e:25:fb:71:8f:96:3c:f1:89:66:12:
2f:0c:3e:ba:3b:47:19:08:ac:84:da:41:fc:5d:fb:
47:88:91:a2:99:02:aa:5e:39:da:d1:8f:aa:93:3d:
cf:ee:25:0e:0c:17:77:ae:1f:19:41:c0:24:22:fa:
2a:31:f7:57:80:03:db:79:e7:2c:e0:9a:b6:61:a4:
51:ce:4b:5d:ea:e4:a1:e2:b0:11:e9:2f:c0:ad:5d:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:97:91:E2:84:D0:1C:E6:E0:89:21:3B:26:1D:2C:12:A6:00:AE:1D
X509v3 Authority Key Identifier:
keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/0BD593E6136D11F09F542C81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.168.0/21
IPv6:
2401:e9a0::/32
Signature Algorithm: sha256WithRSAEncryption
59:e0:7b:93:22:b3:85:76:1c:bc:bb:ad:f4:d0:9f:f3:67:a9:
19:74:2b:e9:0b:96:0e:a9:7b:19:47:d7:eb:40:47:18:f2:64:
13:6c:58:5a:11:d9:b6:0d:f7:19:33:cd:df:3b:72:0b:56:d4:
4b:19:89:37:98:73:e1:42:9b:e8:ca:3c:62:38:5c:fa:43:2b:
57:24:3b:77:b7:f9:ec:cd:53:bc:7c:34:83:96:0a:f7:d4:e5:
16:2c:5b:22:cd:26:1d:8c:42:0b:3a:2c:57:81:ed:5d:76:ce:
f1:e9:91:a9:fd:1e:20:f0:f8:68:c0:d3:f9:9a:03:a9:c8:70:
33:29:ab:f1:14:88:ed:2b:25:ca:e8:f4:95:c3:a9:6a:bd:02:
73:e9:ef:44:ce:b6:6b:84:cf:5a:7f:f4:f0:52:c4:a0:ec:cd:
65:87:65:0f:38:dc:9f:73:00:bc:5d:ea:e8:8e:61:a4:c9:66:
3c:40:0a:34:f4:33:9a:66:17:48:d8:d3:2c:86:85:fe:9b:84:
05:7e:d0:41:cd:e6:46:59:83:9e:b5:65:5b:1f:57:39:03:2e:
a6:71:a0:1a:0f:85:ad:e1:e2:31:29:b8:bd:dc:74:09:82:1a:
a6:01:9f:c5:55:50:1c:27:12:05:11:99:48:b2:f7:2c:f6:b1:
a3:fc:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:40:14 2025 by rpki-client