
$ rpki-client -vvf rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/503DC7FA547F11EE9512EE75C4F9AE02.roa
File: 503DC7FA547F11EE9512EE75C4F9AE02.roa (raw, json)
Hash identifier: prpO02sdaGxa9omiI4KP6Jj37m9PViRORA2hf2czA64=
Subject key identifier: 22:80:8D:F4:96:BC:1E:58:D6:3A:CC:31:E2:9B:A2:EC:C4:C1:0F:60
Certificate issuer: /CN=A919014C/serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE
Certificate serial: 0195
Authority key identifier: 52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/503DC7FA547F11EE9512EE75C4F9AE02.roa
Signing time: Wed 05 Nov 2025 03:48:09 +0000
ROA not before: Wed 05 Nov 2025 03:48:09 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150386
IP address blocks: 103.88.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl
rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919014C, serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE
Validity
Not Before: Nov 5 03:48:09 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690ac8f8-cea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:23:6a:69:b8:a0:79:f8:66:84:55:80:ee:
df:3d:91:07:3e:ab:fb:bf:37:23:e2:27:46:94:f8:
3e:cd:3c:34:01:56:1d:f8:35:05:d4:3e:31:1e:a4:
f1:9f:0d:fb:cd:47:50:eb:24:c4:fa:be:f5:9e:38:
68:28:4f:75:68:bb:32:0c:de:e9:ef:42:89:f2:f9:
e5:17:65:08:d0:3d:ee:9f:62:78:0f:68:06:99:47:
54:86:53:62:45:5d:e0:e5:d2:c4:b6:bd:ea:71:0b:
37:cf:05:58:b6:17:06:12:54:3b:6c:c6:1e:76:8b:
21:d3:03:92:99:1d:bd:54:0a:7d:9f:65:45:58:52:
b9:ab:d9:e6:c9:d6:4c:09:f8:00:46:4c:a2:46:e0:
9d:d6:ae:2c:1e:f8:74:41:e3:f8:86:76:b5:14:dc:
10:45:c8:04:cb:c7:46:1a:c9:b5:42:0d:48:64:49:
64:7f:d5:85:73:d4:49:18:79:cb:11:ed:80:bd:c5:
55:11:32:cb:97:02:49:fa:10:d7:2b:17:5c:96:68:
01:2f:ba:f0:d4:08:db:48:79:32:ac:86:f8:f2:1e:
95:39:f9:c6:ea:12:38:ab:3f:18:db:a6:57:c6:f3:
cc:aa:02:c3:ef:9d:a5:74:85:dd:9a:db:3c:10:54:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:80:8D:F4:96:BC:1E:58:D6:3A:CC:31:E2:9B:A2:EC:C4:C1:0F:60
X509v3 Authority Key Identifier:
keyid:52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/503DC7FA547F11EE9512EE75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.88.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:17:58:57:88:3d:48:57:c2:f9:b8:4e:16:94:72:77:42:c0:
46:2d:0a:87:99:28:d0:e2:c8:4e:e7:16:1e:db:b0:af:2b:09:
de:8d:09:d9:de:15:19:c2:71:ba:8a:75:7e:50:1f:27:ae:2f:
91:cd:b9:01:52:89:8b:fe:a4:5e:b4:58:48:57:1f:24:24:1b:
42:3e:af:1d:fd:58:39:b3:f5:de:e6:05:1f:80:74:c0:87:a5:
05:d5:8a:d7:14:ec:e3:4f:83:4e:52:b7:68:83:0e:9f:f9:da:
92:fa:0e:7f:61:85:08:ed:fb:22:b3:06:8a:96:05:4d:0d:4e:
db:54:77:4d:e4:c0:19:97:1f:ea:2e:9b:84:39:1e:e8:f4:34:
8b:b9:b7:51:3c:e9:71:64:4c:18:05:53:de:c7:3c:b4:66:4e:
8e:58:11:24:c2:43:17:9b:99:0d:a2:c1:95:29:3b:01:90:71:
80:d6:b9:16:cb:b2:c3:ff:1b:3c:4d:ed:a1:82:5a:84:e8:41:
c6:e2:4f:34:b5:69:b2:6e:95:5c:62:60:13:a2:1a:8f:7c:7d:
38:14:39:e2:f8:d5:e1:ed:83:65:07:e9:bb:03:c0:84:bb:cb:
83:aa:4d:68:ba:ff:e7:29:db:9a:2e:bf:cc:3f:92:86:12:a7:
d8:c2:96:b9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTAxNEMxMTAvBgNVBAUTKDUyNzU5REUzNUMwMjY3OURCNkU5MzJFQTg4Njg5REMx
MEQ1Q0NDQUUwHhcNMjUxMTA1MDM0ODA5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBhYzhmOC1jZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0gkjamm4oHn4ZoRVgO7fPZEHPqv7vzcj4idGlPg+zTw0AVYd+DUF1D4xHqTx
nw37zUdQ6yTE+r71njhoKE91aLsyDN7p70KJ8vnlF2UI0D3un2J4D2gGmUdUhlNi
RV3g5dLEtr3qcQs3zwVYthcGElQ7bMYedosh0wOSmR29VAp9n2VFWFK5q9nmydZM
CfgARkyiRuCd1q4sHvh0QeP4hna1FNwQRcgEy8dGGsm1Qg1IZElkf9WFc9RJGHnL
Ee2AvcVVETLLlwJJ+hDXKxdclmgBL7rw1AjbSHkyrIb48h6VOfnG6hI4qz8Y26ZX
xvPMqgLD752ldIXdmts8EFTGlwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCKAjfSW
vB5Y1jrMMeKbouzEwQ9gMB8GA1UdIwQYMBaAFFJ1neNcAmedtuky6ohoncENXMyu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDE0Qy8xNTRGQUMyQzU0
N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1MjI2VExxaUdpZHdRMWN6
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VuV2Q0MXdDWjUyMjZUTHFpR2lkd1ExY3pLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTAxNEMvMTU0RkFDMkM1NDdFMTFFRThFNzEwMDc0QzRGOUFFMDIvNTAzREM3RkE1
NDdGMTFFRTk1MTJFRTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnWDQwDQYJKoZIhvcNAQELBQADggEBAKQXWFeIPUhXwvm4
ThaUcndCwEYtCoeZKNDiyE7nFh7bsK8rCd6NCdneFRnCcbqKdX5QHyeuL5HNuQFS
iYv+pF60WEhXHyQkG0I+rx39WDmz9d7mBR+AdMCHpQXVitcU7ONPg05St2iDDp/5
2pL6Dn9hhQjt+yKzBoqWBU0NTttUd03kwBmXH+oum4Q5Huj0NIu5t1E86XFkTBgF
U97HPLRmTo5YESTCQxebmQ2iwZUpOwGQcYDWuRbLssP/GzxN7aGCWoToQcbiTzS1
abJulVxiYBOiGo98fTgUOeL41eHtg2UH6bsDwIS7y4OqTWi6/+cp25ouv8w/koYS
p9jClrk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:27:45 2025 by rpki-client