
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/7FBF284EF5B211EB8419A23AC4F9AE02.roa
File: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (raw, json)
Hash identifier: edmH+zoE3tcqcciZuFe0JER5V1TWvNXJvKg0Me+DQ90=
Subject key identifier: 64:D7:03:B9:7D:2B:E6:74:05:D7:C7:5C:B7:89:8E:96:BE:0D:37:10
Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Certificate serial: 056E
Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/7FBF284EF5B211EB8419A23AC4F9AE02.roa
Signing time: Sat 09 Aug 2025 00:05:34 +0000
ROA not before: Sat 09 Aug 2025 00:05:34 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142552
IP address blocks: 103.169.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Nov 2025 23:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1390 (0x56e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Validity
Not Before: Aug 9 00:05:34 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=689690cd-46c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:b1:3d:dc:d9:ed:ee:0b:47:ec:55:48:87:
2f:c2:1a:fb:74:2d:32:aa:8e:61:3a:14:f9:9e:54:
a6:75:ac:0e:75:38:97:57:00:99:f1:a2:c8:d0:7a:
1c:85:af:8b:5a:b6:6e:54:0c:65:f0:df:a1:0e:d3:
6f:9a:eb:5a:d0:1c:f7:c8:f8:8f:57:9a:ff:60:a7:
b4:56:e7:f6:e4:f7:37:7a:6e:be:2b:5d:79:c3:73:
82:8e:ba:e1:01:6f:70:e2:d1:37:68:57:55:3e:6d:
3d:e0:e8:07:97:de:4a:05:16:76:88:46:a9:fe:11:
a5:4c:20:86:e0:db:61:88:c8:25:d5:05:f5:f8:25:
bd:85:50:5e:39:ec:e7:48:21:4e:d0:86:72:42:f7:
65:25:6e:63:cf:2f:4d:75:06:ee:23:f0:66:b9:99:
69:87:1a:c3:d1:ed:7c:4d:4e:33:47:21:6a:ce:ce:
e8:3e:48:f4:38:bf:63:17:59:46:6e:19:5e:df:7c:
5e:57:85:5f:c6:35:3d:1a:af:c9:1b:7a:2f:ae:b9:
2b:e0:7d:67:8c:17:b7:bb:67:8b:b1:41:24:bb:33:
ca:92:e4:f6:9c:e6:ad:b7:8e:f4:bc:70:bd:92:41:
1f:28:51:0a:a0:77:d7:e1:df:5a:de:10:d3:88:22:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D7:03:B9:7D:2B:E6:74:05:D7:C7:5C:B7:89:8E:96:BE:0D:37:10
X509v3 Authority Key Identifier:
keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/7FBF284EF5B211EB8419A23AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.65.0/24
Signature Algorithm: sha256WithRSAEncryption
be:5b:54:1a:29:f9:41:61:0d:34:7e:3a:4e:57:30:d5:f8:c3:
aa:e7:8e:0d:95:0b:2d:69:bc:ff:e2:95:5c:17:e0:62:63:8d:
80:f0:d4:ce:53:9a:2b:d0:b3:15:89:d3:a1:2b:b7:f0:4a:62:
38:2e:b8:33:22:3c:a7:54:39:f9:0e:7c:f1:07:57:54:46:7f:
1b:38:7f:da:e4:28:2f:48:b4:53:48:e7:de:ca:0c:98:f8:bf:
7b:f5:24:48:66:ee:03:90:25:97:70:94:31:13:18:6b:82:97:
b7:d5:24:15:13:21:23:6f:e3:0a:20:85:0e:7c:21:52:73:07:
19:d8:43:dc:c7:f3:01:05:03:f8:32:8b:d4:d3:f4:86:60:a8:
c9:5c:f6:70:42:92:43:88:b5:88:fd:40:bd:6c:a0:0a:a2:97:
96:be:33:6e:e8:62:6c:e2:76:a3:1d:88:72:09:fe:c5:5e:06:
3a:c0:12:ee:87:92:93:23:7d:7b:d5:47:56:0d:7f:94:fa:d2:
87:63:5a:35:62:68:52:0c:21:19:48:df:80:bf:1f:ba:17:b2:
4c:1b:5b:15:7c:6e:4d:f0:43:ef:8f:3d:c1:fa:17:c7:58:52:
18:de:52:54:77:cc:9a:4a:09:fb:c1:24:3f:7f:75:49:23:1a:
81:7e:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 06:47:45 2025 by rpki-client