
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/7633392033B411EB98035F74C4F9AE02.roa
File: 7633392033B411EB98035F74C4F9AE02.roa (raw, json)
Hash identifier: 7jewiEiBEZ9bz5FtGjVeeC/IQVsbYDK8Mriosy8TldQ=
Subject key identifier: 75:95:69:BD:25:83:C8:57:E3:34:33:00:7D:70:EB:F8:B8:48:D2:6E
Certificate issuer: /CN=A91CCA34/serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B
Certificate serial: 076B
Authority key identifier: BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/7633392033B411EB98035F74C4F9AE02.roa
Signing time: Thu 18 Sep 2025 22:03:39 +0000
ROA not before: Thu 18 Sep 2025 22:03:39 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138339
IP address blocks: 103.130.148.0/22 maxlen: 22
2403:bc40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl
rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 22:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1899 (0x76b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCA34, serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B
Validity
Not Before: Sep 18 22:03:39 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68cc81ba-a143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:f7:a2:8b:69:60:9d:d8:8b:43:d4:1d:e0:
72:3b:65:c0:f3:05:a0:90:62:c0:24:da:c4:58:7a:
c3:55:8a:69:7b:36:02:e5:5b:f6:c1:12:c1:9f:f3:
fc:e9:07:b3:36:d0:15:be:6b:62:03:d5:9d:99:5f:
58:ad:0f:f5:81:7d:98:6b:0b:a7:34:92:f0:b0:15:
75:d4:c5:92:d3:e1:d7:41:ba:33:ef:7e:b4:bb:e8:
bd:5e:48:7b:5f:f8:b6:85:7a:6c:06:53:af:ae:f9:
c0:19:4c:c2:3c:ce:21:c5:62:9a:1d:74:a0:4a:ad:
a5:82:50:57:9a:9f:21:d7:7a:1c:8f:2c:1e:13:8f:
41:da:c7:e2:cb:02:ed:3b:cb:8d:c0:13:1c:21:b7:
0e:26:c1:e1:e9:ef:82:c2:12:64:4d:5a:52:81:b9:
80:b9:06:43:51:79:e6:30:7c:73:4d:80:54:32:1b:
c2:c6:c8:1a:e7:3d:bf:f5:7d:48:98:eb:0e:9e:0c:
71:13:2b:cc:13:ea:51:fd:28:28:9d:45:a7:76:6f:
90:90:fb:7d:d3:21:fb:c7:9d:a2:cd:d0:59:94:59:
18:1c:25:70:a8:7c:ea:6f:60:d6:11:16:b6:6b:24:
2b:1d:c2:a0:21:b8:5c:5d:78:3d:00:4a:bd:19:34:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:95:69:BD:25:83:C8:57:E3:34:33:00:7D:70:EB:F8:B8:48:D2:6E
X509v3 Authority Key Identifier:
keyid:BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/7633392033B411EB98035F74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.148.0/22
IPv6:
2403:bc40::/32
Signature Algorithm: sha256WithRSAEncryption
86:24:37:c1:39:54:ec:c4:4b:d4:8c:1b:cd:46:e8:0b:de:0c:
02:c5:82:d8:d7:b7:56:a4:6a:75:cb:62:5f:10:9e:31:a0:69:
b1:14:71:a6:cd:f1:ee:fc:95:f1:ca:90:75:de:d0:4e:a5:bf:
44:69:f7:1e:14:d6:e3:0d:6e:1d:54:ab:c0:89:38:a4:5b:96:
44:fc:9f:62:a8:f5:88:df:42:a0:2a:b5:e9:a1:49:03:ad:bc:
d5:fc:14:c9:35:d6:a3:40:5a:4e:58:58:1c:b4:ee:26:e1:4d:
af:1f:86:0e:47:07:92:9a:4b:4a:be:5b:ba:d2:33:0e:46:b3:
36:94:a5:9f:6b:0d:eb:d8:fb:b7:89:84:3f:d6:3f:ba:c3:54:
70:80:d5:33:e6:9c:3a:66:cd:6f:3a:43:65:32:1b:60:89:e9:
b5:17:b6:94:9e:fb:29:ff:4b:41:fb:0a:e6:c6:f3:40:ea:f3:
eb:45:b7:ef:ca:04:b9:ed:f4:d0:dc:54:b0:06:d4:78:07:1a:
97:03:2d:1b:e9:95:7b:19:bc:62:04:fb:91:d6:6d:cf:8c:ab:
c0:59:8a:8e:91:d2:4d:b6:a5:52:87:b5:62:c2:d0:32:cb:8d:
d6:50:6f:44:92:c9:8a:01:d0:07:ed:84:5b:9e:62:83:6d:27:
35:65:b5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:05 2025 by rpki-client