
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/C0BBFCC003A911EF9DE2F919C4F9AE02.roa
File: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (raw, json)
Hash identifier: Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=
Subject key identifier: 09:3F:9C:39:70:9E:5B:E5:F5:D3:FE:E3:7D:6B:48:E9:F3:8B:AA:84
Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Certificate serial: 0361
Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/C0BBFCC003A911EF9DE2F919C4F9AE02.roa
Signing time: Tue 15 Apr 2025 01:05:58 +0000
ROA not before: Tue 15 Apr 2025 01:05:58 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 58945
IP address blocks: 103.181.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl
rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 01:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865 (0x361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Validity
Not Before: Apr 15 01:05:58 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67fdb0f5-927a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:28:ed:dd:e1:44:66:77:ba:ac:70:97:4f:
77:89:e7:ea:5a:a5:72:b3:cb:84:1b:42:bd:ee:28:
cc:ad:ae:de:47:de:c1:21:24:57:19:bc:4e:cf:33:
de:d1:55:77:5f:68:8e:10:36:15:bd:27:58:c8:b5:
81:6c:9e:b8:65:92:22:b0:ca:d3:f1:5f:97:fc:3b:
94:64:c5:54:d1:02:92:c1:fd:7b:7d:8a:68:da:5a:
6e:7d:e5:9e:4b:26:a1:6c:b0:1e:81:5a:ca:62:90:
02:3d:b9:cd:50:13:4e:dd:ec:d0:11:4c:96:76:d7:
63:cb:b5:fd:e3:b8:f5:e2:1f:43:2f:65:73:9f:64:
ec:d6:4b:21:0f:2f:32:f4:45:18:bd:56:e0:60:10:
74:17:5e:10:d8:de:ea:9d:61:70:6b:19:7b:2c:a0:
d4:23:32:a6:0b:54:d7:7b:81:71:f8:e5:04:26:0a:
87:47:30:a6:f2:69:e5:29:65:0f:42:da:d3:96:95:
a7:08:fa:16:ff:1f:2a:15:38:7c:88:e1:fc:92:ed:
10:41:74:b6:62:9c:14:1a:1b:0b:5c:a6:f0:17:31:
15:8d:d0:89:15:94:54:77:fc:5d:ee:7a:51:53:c2:
f2:ce:86:32:25:02:20:b8:9d:73:5c:d4:ab:de:aa:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3F:9C:39:70:9E:5B:E5:F5:D3:FE:E3:7D:6B:48:E9:F3:8B:AA:84
X509v3 Authority Key Identifier:
keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/C0BBFCC003A911EF9DE2F919C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.163.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:75:f1:84:d5:dc:f8:49:bf:69:68:23:e2:87:69:a4:f4:14:
7a:58:b4:2c:fa:8b:72:8d:17:d9:6c:47:b8:14:80:26:d2:94:
07:4b:94:4f:7d:66:a0:d8:1c:8e:a1:73:50:16:a7:f8:46:d6:
97:aa:33:a3:b0:70:93:ce:fd:93:e0:77:38:b9:14:15:07:e3:
e1:91:12:47:14:9b:37:ad:5b:e8:70:64:ce:a6:7f:48:a5:e2:
b3:60:d0:26:d8:4c:66:5f:57:81:cc:da:a7:89:00:32:32:d1:
04:e9:ec:ac:19:3b:95:37:ad:38:94:58:45:ee:60:03:b9:42:
a7:8b:1b:14:24:9e:c5:58:0f:fd:ef:cf:d9:cc:21:84:66:82:
d6:82:7e:8e:f1:37:d3:07:78:3b:65:6e:c2:55:1b:3b:87:00:
40:89:3b:fd:61:cb:98:bd:a3:28:c9:6e:55:b8:49:91:9f:7d:
41:38:1c:34:98:60:97:bc:09:40:6f:2c:08:a9:d3:02:fb:5d:
1a:71:45:72:bf:73:83:bb:26:b1:d5:f2:b9:8c:db:3b:b2:80:
89:12:3d:ed:eb:46:d5:26:19:c2:3e:10:14:fc:d5:ee:06:4e:
35:90:95:7d:8d:fb:c5:44:fe:df:0a:74:44:55:2d:de:3e:53:
03:2c:03:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:25 2025 by rpki-client