
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/05F9354AB48011F088AD0013C4F9AE02.roa
File: 05F9354AB48011F088AD0013C4F9AE02.roa (raw, json)
Hash identifier: pomJDchvt2RN7hAYLHjLN2Mga9nkvGsLFywiYuDOK+8=
Subject key identifier: 53:3C:2C:72:91:BC:7A:CE:26:31:4C:B4:E7:30:77:E0:B9:24:57:CD
Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Certificate serial: 5E
Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/05F9354AB48011F088AD0013C4F9AE02.roa
Signing time: Wed 29 Oct 2025 04:30:40 +0000
ROA not before: Wed 29 Oct 2025 04:30:40 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 198949
IP address blocks: 203.171.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Validity
Not Before: Oct 29 04:30:40 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=69019870-1a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:e3:a3:c8:0e:42:2b:67:51:55:21:7c:f0:
32:5c:d9:91:65:de:48:2b:ab:19:4e:7c:6b:0c:03:
d2:a6:b3:5a:11:ee:0f:52:db:86:e0:1a:d5:8a:0b:
7d:6e:e5:d9:0e:4e:cd:dc:ee:46:0c:51:0b:ed:68:
21:5c:6f:2a:50:f6:be:40:c9:7b:06:8c:19:3e:f4:
4e:76:6b:ed:c1:65:59:8e:fe:8a:b2:24:79:74:40:
5c:ca:77:9b:fd:aa:dc:a2:1b:5c:bf:07:75:37:09:
81:30:74:fb:ec:b5:21:ec:85:0b:52:f3:98:22:44:
72:f6:fd:06:5f:ce:cf:75:da:b3:ff:82:bb:b7:54:
35:d1:c2:26:28:95:07:a9:8a:29:b7:5c:16:33:1d:
84:0b:ac:b4:51:50:80:4f:cf:90:e1:0d:e3:21:00:
1b:70:46:e6:95:73:c8:73:50:15:5f:8c:38:b2:ea:
97:66:9f:43:ef:f5:2b:16:3a:a2:f7:69:f9:ea:12:
bc:09:81:03:2f:0f:3e:bb:e3:e6:7f:e0:65:a1:11:
a8:1b:94:da:4f:aa:44:9b:c8:ef:9e:26:8a:69:04:
dc:35:f0:3a:5f:c5:45:47:9e:49:db:de:d5:b4:40:
f7:d2:06:3c:67:56:79:ef:5d:a5:d8:1c:f7:ec:28:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3C:2C:72:91:BC:7A:CE:26:31:4C:B4:E7:30:77:E0:B9:24:57:CD
X509v3 Authority Key Identifier:
keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/05F9354AB48011F088AD0013C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.171.223.0/24
Signature Algorithm: sha256WithRSAEncryption
00:38:a5:c3:ac:2b:8f:da:de:10:9b:83:32:9a:e9:30:01:c2:
c9:53:30:73:44:43:55:34:df:95:63:df:a4:46:c0:d0:c2:33:
16:68:bf:f3:16:57:2e:66:39:31:72:99:ad:96:18:35:e2:3c:
f0:ad:b1:f3:4c:a6:ac:25:90:3f:5f:a6:0f:b4:dc:b0:5f:7c:
5b:af:20:81:16:b8:0c:50:e2:c7:df:f7:19:7a:01:3e:0b:fe:
8f:fa:2a:59:09:4e:70:04:c8:67:02:be:87:3d:1d:d1:34:9f:
87:80:84:50:80:8d:13:5e:c1:c7:0e:de:e0:9e:92:e6:e1:55:
8e:6a:a0:bd:32:da:1f:0f:b7:bc:48:7a:d5:92:e9:0a:fc:41:
f1:06:12:0e:c3:12:f3:e6:a8:40:05:2f:62:01:ef:28:c5:89:
f7:bc:09:7a:cd:1a:68:61:66:45:86:09:2f:4b:5f:fa:8f:12:
82:72:e8:16:38:ab:3d:c0:a8:57:8a:e0:d8:fc:64:4b:b2:e4:
c2:b2:0f:15:4f:6e:8e:7b:57:64:a0:d8:d2:22:d2:39:11:dc:
4b:ee:76:23:0c:d6:bd:05:b6:09:ae:2f:ad:77:ac:0b:cb:f3:
cc:87:1f:54:53:be:a3:6b:db:69:ce:db:9c:5d:f2:d6:e5:47:
86:83:48:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 22:15:43 2025 by rpki-client