
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
File: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (raw, json)
Hash identifier: 8N17MFKiZRA58NKBpmx9ZFKXCm0hJsn02fp1o1On+1I=
Subject key identifier: D2:23:C5:FE:A1:72:21:CB:A0:A8:46:50:B5:21:8A:AC:E5:B4:67:2D
Certificate issuer: /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Certificate serial: 042C
Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
Signing time: Fri 01 Aug 2025 01:37:50 +0000
ROA not before: Fri 01 Aug 2025 01:37:50 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 140900
IP address blocks: 103.179.246.0/24 maxlen: 24
103.179.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 02:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0AAD, serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Validity
Not Before: Aug 1 01:37:50 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=688c1a6e-244a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e5:3b:6e:18:62:4a:0c:a3:2b:1c:19:41:c6:
8d:35:63:27:b3:c7:ef:6e:90:a8:09:4c:88:b2:d0:
e0:ae:49:14:0a:19:df:9c:52:b3:f5:a5:4c:ed:5f:
70:43:8d:f9:36:02:7b:a7:c3:a5:16:b8:a2:fb:ae:
cc:4d:94:d6:7a:cd:59:d9:ca:f0:7a:8b:e9:b5:14:
6b:66:85:84:09:7b:49:26:a6:cc:0c:98:67:00:4e:
01:35:2f:a4:8f:2a:71:a6:c8:05:aa:9f:24:0c:b2:
89:af:02:6e:b1:b3:b6:3d:99:45:ee:cb:97:65:9d:
bf:3b:94:00:d2:ad:ae:4c:93:81:03:28:43:4e:0d:
36:38:f9:f1:d4:ba:e6:a4:47:b1:70:dd:b5:90:47:
63:79:c0:f5:24:2b:a9:11:41:24:76:cc:84:07:0e:
28:95:31:66:a2:19:26:69:5a:b3:5d:d0:7d:03:d2:
cf:2a:5e:c3:00:01:c4:9f:e9:2b:ef:de:ab:fe:f3:
d2:cf:c9:25:bf:c4:5d:2c:71:a1:f4:0f:27:de:a2:
2d:44:60:ec:cb:5a:97:f1:cf:8f:ae:34:59:86:11:
e7:11:0a:ef:d2:ea:f0:a2:46:2a:82:c9:62:9b:12:
ae:cd:32:e7:ba:a4:82:7d:77:81:1e:88:eb:31:29:
2b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:23:C5:FE:A1:72:21:CB:A0:A8:46:50:B5:21:8A:AC:E5:B4:67:2D
X509v3 Authority Key Identifier:
keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.246.0/23
Signature Algorithm: sha256WithRSAEncryption
69:a9:5b:83:dd:11:76:65:86:61:ed:f3:48:d1:77:90:6d:30:
d5:c5:26:9c:c0:a8:3c:d2:c7:18:85:65:83:cc:33:40:eb:73:
05:ae:d2:3d:00:f5:8c:f4:61:63:93:38:f8:13:00:11:e8:31:
34:55:14:f2:f4:0a:5e:21:19:f2:67:6b:1f:1c:cc:60:76:2f:
b3:72:4a:a6:5e:6c:a3:7b:80:0e:d4:de:42:27:81:fb:46:de:
cc:97:30:47:73:55:ae:42:6e:11:d0:bb:1b:1e:5e:64:82:f3:
1b:45:b6:df:d9:2a:c0:3e:d1:7f:27:50:27:4b:83:5e:ce:fa:
fa:7c:a6:72:a5:18:b0:ff:35:fe:f0:1e:92:c4:18:de:43:7e:
ed:d0:72:2a:c9:5c:22:18:0c:4a:91:88:9b:e9:62:56:5f:9b:
5f:9e:36:fc:1b:3f:94:b6:9f:6f:32:1c:7f:b8:04:65:dc:65:
fb:3a:d7:5b:93:25:20:18:f7:29:2a:2e:2d:5e:a7:6b:01:70:
34:f2:0f:17:d0:7a:4e:8d:93:c7:4b:50:5e:82:b6:0e:a9:64:
45:ce:9f:c3:cd:5a:56:f0:f7:33:34:d7:ad:a9:a5:df:e4:9f:
8b:af:92:4c:21:44:e8:07:d6:15:64:df:17:bf:99:f1:83:b9:
05:28:c1:96
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBBQUQxMTAvBgNVBAUTKDAwMTczNDdEQTNGMzVCNzUzOTUxQkRGNEIxQjA3Rjc2
MUUzRDlFQkYwHhcNMjUwODAxMDEzNzUwWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhjMWE2ZS0yNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5+U7bhhiSgyjKxwZQcaNNWMns8fvbpCoCUyIstDgrkkUChnfnFKz9aVM7V9w
Q435NgJ7p8OlFrii+67MTZTWes1Z2crweovptRRrZoWECXtJJqbMDJhnAE4BNS+k
jypxpsgFqp8kDLKJrwJusbO2PZlF7suXZZ2/O5QA0q2uTJOBAyhDTg02OPnx1Lrm
pEexcN21kEdjecD1JCupEUEkdsyEBw4olTFmohkmaVqzXdB9A9LPKl7DAAHEn+kr
796r/vPSz8klv8RdLHGh9A8n3qItRGDsy1qX8c+PrjRZhhHnEQrv0urwokYqgsli
mxKuzTLnuqSCfXeBHojrMSkroQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNIjxf6h
ciHLoKhGULUhiqzltGctMB8GA1UdIwQYMBaAFAAXNH2j81t1OVG99LGwf3YePZ6/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEFBRC8wREU1QjQwRTc5
RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelczVTVVYjMwc2JCX2RoNDlu
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FCYzBmYVB6VzNVNVViMzBzYkJfZGg0OW5yOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTBBQUQvMERFNUI0MEU3OUUyMTFFQ0I1MDEzMTQ4QzRGOUFFMDIvMEJFNkYzOUU3
OUU2MTFFQzk5REExQjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFns/YwDQYJKoZIhvcNAQELBQADggEBAGmpW4PdEXZlhmHt
80jRd5BtMNXFJpzAqDzSxxiFZYPMM0DrcwWu0j0A9Yz0YWOTOPgTABHoMTRVFPL0
Cl4hGfJnax8czGB2L7NySqZebKN7gA7U3kIngftG3syXMEdzVa5CbhHQuxseXmSC
8xtFtt/ZKsA+0X8nUCdLg17O+vp8pnKlGLD/Nf7wHpLEGN5Dfu3QcirJXCIYDEqR
iJvpYlZfm1+eNvwbP5S2n28yHH+4BGXcZfs611uTJSAY9ykqLi1ep2sBcDTyDxfQ
ek6Nk8dLUF6Ctg6pZEXOn8PNWlbw9zM0162ppd/kn4uvkkwhROgH1hVk3xe/mfGD
uQUowZY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:25:02 2025 by rpki-client