
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/F6F5BCCE53E711F084348F87C4F9AE02.roa
File: F6F5BCCE53E711F084348F87C4F9AE02.roa (raw, json)
Hash identifier: eEq3ZG4qI8pUpOyGlAwoIW1Iq8bp1Jor6FtXouhYCXM=
Subject key identifier: D1:68:6F:18:55:BC:CD:D6:FC:A4:45:21:A2:BB:AA:13:F2:14:19:27
Certificate issuer: /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Certificate serial: 086B
Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/F6F5BCCE53E711F084348F87C4F9AE02.roa
Signing time: Sat 28 Jun 2025 06:20:20 +0000
ROA not before: Sat 28 Jun 2025 06:20:20 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 149994
IP address blocks: 103.138.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl
rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155 (0x86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3CA4, serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Validity
Not Before: Jun 28 06:20:20 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=685f89a3-8e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:70:cd:cc:a0:c0:e0:66:be:59:80:d3:83:d1:
85:cf:e5:0a:b2:eb:1c:3b:39:3a:e2:93:f0:05:94:
0d:1d:38:da:91:9b:71:3b:2d:94:79:26:81:67:ee:
e3:6d:a8:18:f3:0e:4c:e3:9a:3f:e2:80:ea:ce:a8:
e9:15:c2:11:81:7f:d3:c7:06:83:df:d5:82:6c:23:
64:db:a3:c4:46:91:d4:be:ea:e3:93:b9:20:ee:ba:
68:60:1d:af:b4:6a:de:90:5c:6c:92:b2:ec:68:00:
18:83:f8:9b:ff:94:7f:a9:36:4e:f1:eb:39:cf:1c:
e2:ac:12:49:ba:b3:42:08:b4:bd:b1:0b:f1:82:ef:
c0:d5:76:b9:01:c0:0c:73:fd:cc:e2:fd:46:b6:44:
b9:08:e3:59:1e:94:18:db:e7:1e:60:d4:4b:bf:83:
58:ce:7e:6f:85:e9:74:7d:c6:e9:f2:d3:5a:8e:12:
79:19:e1:b4:a7:97:16:13:50:25:38:38:61:65:50:
0f:2f:5d:63:10:c4:d1:8f:00:9d:f6:d8:50:77:75:
70:e9:03:51:70:ec:57:e0:bc:fc:af:d3:d0:f2:d7:
9b:00:9d:9a:4c:8d:b0:83:a9:ac:a2:40:d7:c7:55:
1a:6f:ec:13:45:9e:60:e8:f8:5c:f3:bb:a1:4d:10:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:68:6F:18:55:BC:CD:D6:FC:A4:45:21:A2:BB:AA:13:F2:14:19:27
X509v3 Authority Key Identifier:
keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/F6F5BCCE53E711F084348F87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.214.0/24
Signature Algorithm: sha256WithRSAEncryption
15:43:4e:4f:8a:76:b6:f7:74:da:05:9d:9a:1a:6c:a1:ec:f7:
98:60:b6:3f:cc:0a:1c:f0:f7:1e:39:52:63:f2:83:c2:ee:eb:
b6:1b:8d:45:6e:b6:0d:c1:87:b5:e0:dd:ff:92:d2:cd:00:a0:
73:e7:a8:d9:d9:d9:23:9c:51:f2:b9:bc:cb:fc:c4:50:80:93:
16:ab:8a:78:f6:40:79:5c:11:92:db:70:65:f5:f0:1a:f0:1a:
29:cc:73:89:34:3e:ef:dc:40:91:7c:2c:45:e3:02:3b:a2:7e:
72:b1:89:ad:37:7f:be:b2:16:51:e8:b3:52:b9:ce:07:dd:aa:
d6:05:77:30:16:ef:ba:43:a9:fe:31:af:49:35:58:21:a1:33:
b7:b0:af:94:07:1b:dc:af:6f:3b:b2:2b:18:4d:ea:74:38:a3:
d9:60:d7:61:74:37:0b:85:8b:8f:af:5d:89:66:8f:93:d3:cb:
1a:57:82:7e:cd:cd:df:a7:26:39:b5:78:8c:18:0f:e2:9f:43:
a7:e6:fd:e2:d0:5f:47:78:86:06:40:48:bb:b1:b5:b1:7c:eb:
b4:1b:19:da:50:44:d7:2c:94:16:fd:c4:1a:e9:32:cb:35:42:
84:08:65:fd:1d:0d:8d:c3:12:75:b5:15:1d:9a:eb:47:8f:23:
56:bf:82:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:25:02 2025 by rpki-client