
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/CC1ACE7A6BC711F098C3B76CC4F9AE02.roa
File: CC1ACE7A6BC711F098C3B76CC4F9AE02.roa (raw, json)
Hash identifier: l12GGHb5zU8WFaP5yfw8CrXUTcEdQRcdzqYPOrrqqtY=
Subject key identifier: B4:B6:4A:CE:6D:FA:61:4B:FB:55:33:34:12:9E:1D:A6:55:06:F1:FA
Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Certificate serial: 02E3
Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/CC1ACE7A6BC711F098C3B76CC4F9AE02.roa
Signing time: Fri 29 Aug 2025 02:18:48 +0000
ROA not before: Fri 29 Aug 2025 02:18:48 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 151835
IP address blocks: 103.190.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl
rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 03:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Validity
Not Before: Aug 29 02:18:48 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68b10e08-f1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:08:33:f7:33:ee:9d:26:f9:83:87:aa:13:af:
68:d9:42:d6:0f:84:96:58:55:30:81:a1:0e:29:4d:
f6:12:d0:4c:60:80:3c:21:3d:f4:ee:c7:d3:05:7e:
29:21:89:ba:49:67:21:82:4c:e5:f8:11:bf:75:92:
4a:c5:05:cd:bc:2c:ce:b7:ec:0c:c2:59:0c:45:c3:
4a:20:dc:55:34:4c:e1:17:ee:51:25:0d:89:59:86:
26:d2:52:59:f9:c7:76:e5:92:b4:c6:60:82:32:c4:
a2:48:b2:ef:df:7a:9e:70:b9:81:bf:ee:f0:b3:6b:
ab:c5:34:88:b5:b5:cf:be:b6:c2:99:d0:4d:b1:cd:
8f:b5:e1:1b:dc:61:99:9e:d4:97:58:40:7c:f2:18:
31:db:40:5d:93:30:9b:50:0e:95:88:2d:3e:ee:99:
df:ad:a7:83:10:a4:c9:a8:51:50:3c:27:45:4f:5a:
9f:5f:ec:30:0c:1e:51:a2:a4:d2:e1:a2:e0:94:3a:
9a:dd:82:8c:d5:44:5d:e1:55:0e:0d:92:2c:f3:58:
fe:fc:2e:fd:85:c8:97:6c:f4:5b:6f:18:1d:ab:d8:
fe:44:82:83:c8:18:11:58:71:57:2b:39:fd:b1:17:
c8:cb:68:d6:f3:e7:ff:83:d2:25:6c:65:c8:88:a7:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B6:4A:CE:6D:FA:61:4B:FB:55:33:34:12:9E:1D:A6:55:06:F1:FA
X509v3 Authority Key Identifier:
keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/CC1ACE7A6BC711F098C3B76CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.72.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a8:b2:17:2d:e0:c4:1b:76:74:76:d8:ac:d1:48:7b:fc:1c:
52:c0:da:4f:11:1a:77:d0:9d:c7:81:62:cd:02:4b:cd:eb:9c:
17:97:38:56:a5:1c:24:54:0f:52:8a:65:a8:1c:5e:a3:78:5b:
a9:7e:bb:67:be:b8:a0:d3:fb:39:78:a5:89:2b:1a:ad:af:34:
ab:62:1a:37:bc:96:69:ad:41:42:b6:5b:5d:8c:19:ca:b9:1f:
d8:66:ee:8c:13:3c:a2:b2:ca:64:fa:77:eb:2b:1e:19:d4:75:
dd:8d:48:86:18:c8:a7:7e:a6:a7:90:c6:b7:e8:fb:f9:2b:9d:
63:b5:20:09:88:89:92:95:60:e5:86:fc:e4:e2:98:d5:26:77:
15:9a:a2:00:67:e2:a0:ff:6d:bc:2a:33:89:7f:e1:fd:b6:8b:
d9:74:eb:28:a7:04:b5:15:36:66:f2:c8:db:2c:67:72:cd:aa:
5f:d6:21:25:e3:81:0b:e0:2e:c4:df:83:f1:f0:ab:8e:91:62:
e3:ca:c1:ff:42:44:d6:10:14:8b:ff:eb:6f:5a:e9:61:74:c3:
53:a9:b9:e7:cd:ca:39:df:36:2d:50:c8:79:79:28:c5:e6:a4:
9d:08:8f:ff:82:9e:36:2d:a7:35:29:a9:e6:7b:fd:69:a2:5b:
6e:d0:74:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:08 2025 by rpki-client