
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/4A7E3036340811ED9D3D7620C4F9AE02.roa
File: 4A7E3036340811ED9D3D7620C4F9AE02.roa (raw, json)
Hash identifier: e0ssa3aYMf93SekbtHzPrUvWJb3pV0vdOrt0LlRsi20=
Subject key identifier: 4E:69:D9:91:D8:ED:EE:AF:FC:79:FA:C7:B8:0E:CF:43:D2:10:2F:62
Certificate issuer: /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Certificate serial: 1507
Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/4A7E3036340811ED9D3D7620C4F9AE02.roa
Signing time: Fri 02 May 2025 17:25:24 +0000
ROA not before: Fri 02 May 2025 17:25:24 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 103.114.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5383 (0x1507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65E4, serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Validity
Not Before: May 2 17:25:24 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68150004-2fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bd:ec:b3:85:7e:f9:e8:bb:89:c0:df:db:a4:
1c:b9:f0:03:c0:0f:86:67:1d:95:d3:8d:1f:a5:a2:
55:3d:89:3c:2e:e0:52:bc:e4:14:b9:62:1a:76:49:
d7:2d:12:ac:6e:9d:58:a3:2e:8f:09:33:4f:56:ea:
32:78:43:00:bb:a6:8a:44:7f:3a:a2:0b:e9:8b:d1:
53:4e:b1:bf:17:1b:fe:2c:ea:93:ed:28:39:a3:a1:
22:1c:7c:63:a8:09:70:8f:ee:0e:2a:c5:22:db:53:
16:44:24:b3:23:48:cb:b6:93:04:ce:47:6a:39:fe:
7d:54:32:86:07:14:58:cd:a0:9f:c1:2e:4d:ec:49:
cf:3e:4b:11:36:92:b3:c6:20:94:06:f4:4a:31:d8:
29:32:b1:b4:f2:13:21:ac:33:4d:5a:f1:68:e5:87:
08:18:50:21:91:20:30:75:b3:00:81:12:ec:3b:a3:
ce:9b:03:cb:b1:1c:d3:64:78:a3:29:02:f5:80:03:
d1:50:e3:9b:a8:36:90:85:16:25:31:67:2b:53:69:
31:c5:a0:47:83:4f:68:87:65:92:d4:ab:93:b1:da:
05:22:d6:ed:5d:9c:3c:c6:78:2e:a4:9b:53:7e:7b:
dd:9e:74:41:cb:f9:af:e1:c4:4e:ba:fc:9b:14:d1:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:69:D9:91:D8:ED:EE:AF:FC:79:FA:C7:B8:0E:CF:43:D2:10:2F:62
X509v3 Authority Key Identifier:
keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/4A7E3036340811ED9D3D7620C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:fe:10:66:23:fa:23:a1:59:74:c5:d7:66:e5:b7:08:7c:a0:
17:9e:06:1c:ff:cf:1f:af:df:51:bd:d6:20:be:f5:ef:75:e8:
22:e3:55:e0:90:48:56:80:5d:32:f0:24:1a:1f:d5:40:42:a3:
47:78:8a:f3:20:65:56:1b:c2:b3:b3:42:68:5c:e0:c0:57:50:
d2:81:68:bf:ca:f0:0b:57:73:c0:f5:53:0e:f4:97:7b:ed:43:
b6:b9:4b:57:bc:7e:ad:9b:e4:5a:5a:cd:88:45:87:dc:d0:e9:
6a:39:73:7d:0a:08:d8:44:c3:e9:64:55:b8:66:05:c7:4c:fd:
ed:3d:f9:58:de:70:65:5f:67:d2:84:19:4d:b4:c8:d5:21:21:
b9:8e:d6:e2:44:7c:15:9a:2a:4a:c9:36:8a:c2:f9:4b:40:65:
24:61:cc:87:f8:0d:77:22:6c:d2:b9:06:8e:16:55:c5:d4:82:
b6:a7:8c:15:8c:bc:33:b4:10:c5:f3:eb:86:84:5c:9d:19:85:
ca:3d:85:79:c2:09:ae:10:c2:ba:71:34:57:fe:43:ba:1b:9a:
71:2a:20:b8:3e:b6:c6:6f:7f:f7:6d:6b:93:7e:12:1d:8a:06:
74:11:21:2e:bb:e2:51:68:c5:e2:ca:74:3f:2e:87:64:2b:bd:
ab:5d:68:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:53:43 2025 by rpki-client