
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/28BD1EFC3B4311EDAB5E6382C4F9AE02.roa
File: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (raw, json)
Hash identifier: hSxxv7yEYI5INFfNtlzvX7licwypObuutfzfApfV0oE=
Subject key identifier: 32:2C:D2:96:CE:1F:7E:FF:E2:94:52:5A:C9:F3:3B:CD:F2:75:B8:38
Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Certificate serial: 0340
Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/28BD1EFC3B4311EDAB5E6382C4F9AE02.roa
Signing time: Sat 17 Oct 2026 01:49:40 +0000
ROA not before: Sat 17 Oct 2026 01:49:40 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 140499
IP address blocks: 103.57.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 00:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832 (0x340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Validity
Not Before: Oct 17 01:49:40 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6ad2d434-e88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:f7:17:4d:0d:7c:10:d9:c2:ec:94:53:9c:
52:07:18:ab:cf:e0:a2:6e:e8:a5:ce:6b:54:c4:f2:
63:6b:c0:14:6e:55:0a:46:93:fb:b5:b4:86:b8:30:
3e:11:5a:cd:ab:bf:76:51:ff:c0:2c:84:44:98:f0:
e8:cd:fc:b1:16:fe:22:e1:7b:5d:1c:25:16:52:3f:
85:39:c6:28:7f:11:d8:2d:c9:91:1a:de:5e:db:6b:
94:06:db:a8:01:f2:de:2b:13:85:f9:4e:64:ac:60:
0b:b7:61:f8:78:cb:80:d6:26:bf:75:ff:b9:44:e9:
bf:1e:9a:5b:86:3e:02:23:ff:21:65:aa:b9:e3:ca:
cb:3e:34:27:30:38:c8:a5:62:0a:4e:00:25:84:7b:
71:ee:7e:d7:11:bc:a5:a6:70:7f:ef:a1:e9:55:96:
6b:2f:a8:28:64:e5:de:5a:73:dd:26:0f:6a:0d:2b:
7c:4c:f9:10:b3:0a:de:51:7d:f5:24:7d:39:28:c2:
ce:b5:4d:d4:0b:a9:f8:97:c6:c0:b4:29:3a:1f:be:
30:db:bb:28:e4:7a:a3:76:45:b0:6d:14:b5:b5:c4:
4b:33:25:ad:fd:ea:64:89:e2:b6:35:98:b7:6c:44:
85:a3:c5:5b:05:80:ba:77:44:a7:69:61:b9:a4:9e:
6e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2C:D2:96:CE:1F:7E:FF:E2:94:52:5A:C9:F3:3B:CD:F2:75:B8:38
X509v3 Authority Key Identifier:
keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/28BD1EFC3B4311EDAB5E6382C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.57.225.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f5:49:ef:69:ea:f0:3f:dc:14:9a:fc:8a:24:95:c4:45:47:
2e:12:e1:70:10:73:51:6d:92:bc:d2:9d:af:30:e3:98:ec:40:
8e:95:d0:3a:c6:6e:fa:3c:78:3c:12:b9:d6:d9:b9:83:49:5a:
e9:3d:76:a6:39:ba:65:0c:dc:93:92:52:7a:6e:d3:f1:c8:99:
e7:59:02:14:13:3a:df:37:02:df:1d:ad:ed:c1:b1:47:69:db:
94:4c:29:23:41:a5:9b:cc:df:1c:f0:86:ca:87:fb:ba:18:43:
42:d2:8c:43:38:a3:7d:94:bc:0b:82:18:eb:f5:94:0f:d5:ca:
4b:5d:04:b8:00:60:54:03:d9:7f:a8:12:38:44:73:bd:59:f5:
f9:0a:80:91:50:cb:a5:97:83:11:44:c6:2b:a5:3c:53:58:eb:
5a:d3:e2:88:44:43:90:41:7e:62:62:a0:65:a2:cc:05:f0:fb:
09:59:af:96:5d:f8:05:7e:4b:17:92:99:5a:97:3c:f8:03:00:
45:16:c0:3e:8a:2c:b5:51:e3:da:79:f6:24:65:45:b1:00:4e:
6b:20:03:1e:86:3a:87:cc:ee:01:79:89:70:b0:09:7b:e8:b5:
fb:c6:6f:f2:66:d2:29:cf:08:fc:4a:8d:82:0a:21:38:52:35:
15:46:61:f9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk3RDAxMTAvBgNVBAUTKEFFQTZERkIzNjRBMkIzQjU5MjdGMDA3QTRFODI0RjMy
QzQwOEU1QzgwHhcNMjYxMDE3MDE0OTQwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQyZDQzNC1lODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0O/3F00NfBDZwuyUU5xSBxirz+CibuilzmtUxPJja8AUblUKRpP7tbSGuDA+
EVrNq792Uf/ALIREmPDozfyxFv4i4XtdHCUWUj+FOcYofxHYLcmRGt5e22uUBtuo
AfLeKxOF+U5krGALt2H4eMuA1ia/df+5ROm/Hppbhj4CI/8hZaq548rLPjQnMDjI
pWIKTgAlhHtx7n7XEbylpnB/76HpVZZrL6goZOXeWnPdJg9qDSt8TPkQswreUX31
JH05KMLOtU3UC6n4l8bAtCk6H74w27so5HqjdkWwbRS1tcRLMyWt/epkieK2NZi3
bESFo8VbBYC6d0SnaWG5pJ5ufwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDIs0pbO
H37/4pRSWsnzO83ydbg4MB8GA1UdIwQYMBaAFK6m37NkorO1kn8Aek6CTzLECOXI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdEMC9CODlGQTNDNjMw
MzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3V1Nmd0I2VG9KUE1zUUk1
Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JxYmZzMlNpczdXU2Z3QjZUb0pQTXNRSTVjZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTk3RDAvQjg5RkEzQzYzMDMyMTFFRDlCREMwQTgzQzRGOUFFMDIvMjhCRDFFRkMz
QjQzMTFFREFCNUU2MzgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZznhMA0GCSqGSIb3DQEBCwUAA4IBAQBR9UnvaerwP9wUmvyKJJXE
RUcuEuFwEHNRbZK80p2vMOOY7ECOldA6xm76PHg8ErnW2bmDSVrpPXamObplDNyT
klJ6btPxyJnnWQIUEzrfNwLfHa3twbFHaduUTCkjQaWbzN8c8IbKh/u6GENC0oxD
OKN9lLwLghjr9ZQP1cpLXQS4AGBUA9l/qBI4RHO9WfX5CoCRUMull4MRRMYrpTxT
WOta0+KIREOQQX5iYqBloswF8PsJWa+WXfgFfksXkplalzz4AwBFFsA+iiy1UePa
efYkZUWxAE5rIAMehjqHzO4BeYlwsAl76LX7xm/yZtIpzwj8So2CCiE4UjUVRmH5
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:44:24 2026 by rpki-client