
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/25C80478053A11F08A0D6F31C4F9AE02.roa
File: 25C80478053A11F08A0D6F31C4F9AE02.roa (raw, json)
Hash identifier: hjlB+aB6tVZtBmOR1311n7Du0s/A2ct9E2kTQriis3g=
Subject key identifier: 04:5B:80:0E:5C:85:D9:B7:0A:49:75:2A:3E:0E:C9:C5:D7:0C:6D:2E
Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Certificate serial: D3
Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/25C80478053A11F08A0D6F31C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:44:11 +0000
ROA not before: Thu 13 Nov 2025 04:52:14 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 4764
IP address blocks: 203.23.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 06:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABA84, serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Validity
Not Before: Nov 13 04:52:14 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a5942b-9206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a4:1d:0b:34:fb:8e:77:a7:85:b1:fa:93:09:
16:fa:fb:cb:12:14:0a:23:f2:7b:6a:22:29:ee:fc:
82:37:49:a7:a2:45:e1:19:b6:18:39:22:2b:c9:7e:
47:0b:60:32:ae:1d:c5:1a:02:c8:4f:e1:c4:d4:42:
df:36:76:9a:4c:bd:f2:05:fe:fd:cb:74:7a:5a:36:
dd:ad:c5:77:19:3d:2d:21:8b:f9:f5:f7:93:cf:9c:
df:4c:90:41:40:53:32:dc:a6:a8:00:15:97:5c:02:
18:a3:bb:bf:95:76:d3:c3:9f:dd:11:46:04:6d:ed:
1e:94:ae:6b:03:26:f2:23:dd:9a:30:12:99:7f:3e:
d4:e7:62:4f:d4:ec:de:b7:5f:53:14:f9:27:e5:6b:
b0:11:1d:86:ca:87:5a:86:27:be:8e:1b:a7:b6:42:
aa:95:8a:f1:0d:ca:4c:3d:11:83:3c:5e:68:a8:72:
c6:17:4c:53:b3:c7:16:bd:ae:87:3b:15:4b:89:12:
81:22:be:55:09:99:1d:0c:a7:b2:6f:13:9c:1d:5f:
49:76:17:91:23:52:e1:db:fa:83:be:d3:e5:57:8d:
18:1f:14:76:60:ac:fb:8f:82:3b:03:92:4a:a5:83:
38:00:9c:05:b5:db:f6:1b:64:9d:68:38:47:bf:58:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5B:80:0E:5C:85:D9:B7:0A:49:75:2A:3E:0E:C9:C5:D7:0C:6D:2E
X509v3 Authority Key Identifier:
keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/25C80478053A11F08A0D6F31C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.23.57.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ce:4d:0c:4b:8d:32:f9:97:7d:e8:3e:18:a8:a9:78:fa:13:
74:ab:7f:6a:4b:23:93:c8:47:60:36:fc:5e:cb:99:b1:8e:63:
26:6c:71:bb:80:28:99:ba:a2:44:76:8f:a3:73:67:c4:58:5f:
1c:dc:97:f1:2d:c4:e7:51:5e:88:d9:1d:8f:70:45:34:5f:09:
68:ae:cb:26:43:3b:41:4c:20:ff:1c:d9:1d:ca:dc:98:5b:ae:
c8:58:38:37:36:4b:bf:46:fb:e6:ab:02:78:4b:60:ed:da:96:
be:e4:df:00:03:fa:c8:51:53:8f:ef:cc:12:df:fe:60:fc:a3:
3f:6e:6f:ea:36:76:82:0c:07:96:cc:f5:32:bc:08:22:58:b5:
d7:4a:7c:31:7b:d5:8e:0f:3f:7f:49:b5:b7:bd:38:68:d2:04:
f3:e5:24:60:8f:e9:8d:65:ee:fc:c9:b5:c4:86:13:ac:7e:54:
9f:f7:1b:a4:47:fe:87:f1:24:c9:5e:14:7d:4b:46:6d:1d:89:
23:6a:c4:95:b3:d8:a2:ad:0d:73:83:7c:b8:2a:fc:d4:4c:3c:
ac:37:73:93:8e:af:0e:50:c1:72:2b:e6:9f:69:8a:24:bb:57:
13:bc:f4:50:00:f9:84:1e:6a:fa:1d:f2:3e:79:af:85:3b:0e:
d5:a7:bc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:48:20 2026 by rpki-client