
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EAAF7884450411F09738105FC4F9AE02.roa
File: EAAF7884450411F09738105FC4F9AE02.roa (raw, json)
Hash identifier: tBvhikagp7Nt4A+RvXoPttqaLGkwIsP8h24We8nhn+w=
Subject key identifier: 79:03:CE:47:A9:D6:FE:03:1F:A9:8C:60:DD:08:60:A0:F5:F1:05:2D
Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial: 0360
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EAAF7884450411F09738105FC4F9AE02.roa
Signing time: Sun 03 Aug 2025 01:39:17 +0000
ROA not before: Sun 03 Aug 2025 01:39:17 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 401701
IP address blocks: 103.97.176.0/22 maxlen: 24
103.242.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 02:15:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 864 (0x360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Validity
Not Before: Aug 3 01:39:17 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=688ebdc5-52d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:01:8f:2b:39:96:15:6d:46:4b:a5:15:ad:e2:
02:dd:0d:e5:8f:08:83:7e:42:f0:e3:c3:d0:3f:f3:
f6:fd:b7:79:94:4b:c5:4c:d5:6f:cc:ce:e0:8e:fb:
33:fd:99:3f:ad:72:54:c7:1f:64:28:e8:0a:ae:bc:
f6:ab:10:50:78:a1:b8:70:59:6e:a7:d5:6b:3a:a5:
f1:c8:cf:1d:9e:37:bf:ec:50:0e:56:5d:5c:7a:16:
a3:9c:4b:59:13:dd:fb:3d:13:79:50:9f:60:d1:90:
af:ff:da:db:92:78:5d:cf:49:c1:62:ee:e5:19:b2:
b6:f1:2f:72:b3:b6:95:3f:10:ca:a4:82:a3:a6:0c:
bd:38:89:7d:e4:de:07:78:09:b9:6f:ee:00:f0:f5:
87:33:5d:f7:33:96:14:c4:9f:cb:6b:f8:3d:b2:51:
2c:33:7b:6a:7a:ce:c6:67:27:ad:fe:ec:b2:2d:b4:
d8:48:9d:b1:c1:c9:1d:0d:13:93:02:df:77:15:6c:
b0:d9:3a:e5:9d:02:37:90:2d:c1:9a:c6:b7:2e:f4:
79:2a:60:8a:b6:e9:23:5c:d2:f8:75:ce:f6:8e:31:
20:c5:64:19:70:53:c5:e3:52:7f:e4:3b:be:26:34:
bd:9f:9d:5b:84:a8:87:4f:a0:14:23:06:a8:ec:4b:
e8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:03:CE:47:A9:D6:FE:03:1F:A9:8C:60:DD:08:60:A0:F5:F1:05:2D
X509v3 Authority Key Identifier:
keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EAAF7884450411F09738105FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.176.0/22
103.242.12.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:a0:dd:7f:f9:30:3b:49:5c:2a:13:4f:f5:75:f6:6d:70:c8:
24:78:2c:66:5b:e9:76:05:2b:47:c3:96:7d:5a:69:b9:f6:c4:
ad:fc:af:05:0e:18:71:b0:8d:23:60:db:2d:cd:56:97:24:cb:
55:c4:e9:55:fa:ab:7b:ea:d5:0e:e3:da:44:c2:c9:0e:15:0b:
11:50:58:3f:56:39:9d:3a:61:11:ee:4f:b6:14:c2:64:0f:9c:
76:9d:bb:3a:ce:91:ce:f3:75:81:2c:cc:c8:e7:65:1b:62:4f:
5f:83:5c:2d:39:b2:f2:ed:9b:db:e9:59:e8:a2:a2:70:ef:8a:
5b:86:f3:d4:60:10:b9:1b:5f:84:b2:42:f3:91:00:ae:44:03:
93:15:c7:f4:ad:80:f5:e7:53:38:6b:a1:3d:04:ef:fe:49:40:
a6:10:79:a3:c5:6a:99:18:b9:fc:6d:2d:1e:a7:6d:a7:02:ef:
06:36:97:89:51:b1:4c:57:76:d5:88:8b:83:c3:97:06:cb:25:
88:5d:ca:3e:4d:08:e9:d3:2f:63:e4:74:7f:88:5a:02:e4:09:
6e:3c:c1:0e:a4:43:b7:4b:4b:d4:0f:c0:93:ae:83:3e:c7:92:
d9:f3:c7:28:7d:2f:d5:09:15:ed:f2:a0:16:81:9d:77:7d:ad:
6a:9e:55:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 12:16:28 2025 by rpki-client