
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa
File: 827329BE232B11EBB2348B23C4F9AE02.roa (raw, json)
Hash identifier: dCRsUxTYQfbVmR8r076QUZHUhBb4kgZRsGIm5GyZ/CI=
Subject key identifier: 68:EC:B5:74:5E:18:0E:E3:93:10:DF:9E:4B:4A:A1:2C:5D:77:11:15
Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial: 07A4
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa
Signing time: Sat 30 Aug 2025 22:13:51 +0000
ROA not before: Sat 30 Aug 2025 22:13:51 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 137969
IP address blocks: 103.153.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 22:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1956 (0x7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Validity
Not Before: Aug 30 22:13:51 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b3779f-bd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8b:21:22:c8:bf:5f:f2:b3:80:da:80:17:6a:
c6:bb:c8:c1:ab:23:a1:b2:3f:0f:a2:04:c6:ca:a5:
40:67:5b:f9:26:ae:8c:45:b9:54:db:cb:b5:5d:7c:
31:97:b8:f8:7f:4e:55:16:c5:55:14:49:a5:40:03:
49:36:be:2f:97:76:14:09:de:7d:3d:92:56:d9:cd:
90:1d:91:a0:1f:80:ff:c7:0a:72:67:72:db:34:b5:
d6:99:21:2f:a3:90:ac:db:4f:03:d1:4b:cd:f5:a4:
d8:14:43:88:55:49:a7:cd:eb:aa:79:f5:df:87:93:
e4:f1:97:5e:2f:01:1f:e1:56:86:67:c9:42:a2:89:
0b:a2:a9:07:d3:84:a3:7a:02:b4:ae:06:f0:3c:2c:
df:44:45:1f:bb:cb:15:65:e4:b4:38:29:83:93:11:
b4:81:c1:af:a5:74:16:e1:a6:84:72:f3:42:f0:a5:
ad:3f:c2:aa:aa:d3:29:61:12:c9:7b:fe:3a:9a:d6:
d9:d5:81:4f:9a:6a:55:d0:ef:e6:9e:35:25:fd:f3:
e4:0c:1a:c1:af:95:f2:f2:a8:81:0b:e0:30:16:60:
07:9c:0a:81:c9:2e:d2:48:c0:5b:ad:9b:67:6f:24:
32:09:1d:c4:12:c0:19:4c:5b:d6:29:be:ed:d9:2a:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EC:B5:74:5E:18:0E:E3:93:10:DF:9E:4B:4A:A1:2C:5D:77:11:15
X509v3 Authority Key Identifier:
keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.100.0/23
Signature Algorithm: sha256WithRSAEncryption
48:26:c4:f2:b5:12:95:2d:0a:d5:35:2a:5e:0b:57:48:d2:a9:
b4:29:cc:44:bf:da:ba:40:0b:1e:b7:46:0e:aa:1a:85:39:2d:
0e:de:90:7d:25:b7:68:30:bb:2a:6e:4a:bb:04:f6:29:dd:e2:
a3:83:96:ef:a4:cc:a2:28:ec:2c:fa:54:4c:6a:43:8c:cf:3a:
37:95:24:ec:a9:8c:4b:42:9b:41:68:6c:64:12:3b:af:fc:26:
39:b7:54:4e:11:12:55:a9:ea:7a:3b:7a:0e:aa:27:bb:0e:e6:
ab:cc:e0:61:60:60:d0:40:c4:44:03:3a:5a:22:dc:13:a6:89:
e6:ab:94:db:8e:39:ec:3d:bd:eb:05:bd:63:aa:9b:3a:eb:cf:
7b:36:fd:4a:92:74:4a:2a:ef:dc:a0:bb:f3:71:37:ca:68:e6:
5a:80:09:f7:0d:4f:6b:0c:6b:18:81:96:d1:78:28:db:61:a5:
9b:cc:b0:c1:dc:96:da:59:9b:ad:6f:f6:e4:18:e4:f1:0f:c8:
7d:08:86:2a:49:47:b6:76:9c:39:1a:19:f3:e8:96:7c:48:c4:
1e:29:83:f2:db:f5:f7:ac:73:7b:60:14:8a:a2:7a:35:50:af:
18:37:ae:ea:cd:24:43:f0:ec:15:8d:38:ec:d7:b9:a6:bb:9f:
6a:1e:c7:aa
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex
MEEyMTQ3QjIwHhcNMjUwODMwMjIxMzUxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIzNzc5Zi1iZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8IshIsi/X/KzgNqAF2rGu8jBqyOhsj8PogTGyqVAZ1v5Jq6MRblU28u1XXwx
l7j4f05VFsVVFEmlQANJNr4vl3YUCd59PZJW2c2QHZGgH4D/xwpyZ3LbNLXWmSEv
o5Cs208D0UvN9aTYFEOIVUmnzeuqefXfh5Pk8ZdeLwEf4VaGZ8lCookLoqkH04Sj
egK0rgbwPCzfREUfu8sVZeS0OCmDkxG0gcGvpXQW4aaEcvNC8KWtP8KqqtMpYRLJ
e/46mtbZ1YFPmmpV0O/mnjUl/fPkDBrBr5Xy8qiBC+AwFmAHnAqByS7SSMBbrZtn
byQyCR3EEsAZTFvWKb7t2SodRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGjstXRe
GA7jkxDfnktKoSxddxEVMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz
MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkI5NEQvMkM3MTYyQ0MyMzI4MTFFQjlGRjZFOTFBQzRGOUFFMDIvODI3MzI5QkUy
MzJCMTFFQkIyMzQ4QjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnmWQwDQYJKoZIhvcNAQELBQADggEBAEgmxPK1EpUtCtU1
Kl4LV0jSqbQpzES/2rpACx63Rg6qGoU5LQ7ekH0lt2gwuypuSrsE9ind4qODlu+k
zKIo7Cz6VExqQ4zPOjeVJOypjEtCm0FobGQSO6/8Jjm3VE4RElWp6no7eg6qJ7sO
5qvM4GFgYNBAxEQDOloi3BOmiearlNuOOew9vesFvWOqmzrrz3s2/UqSdEoq79yg
u/NxN8po5lqACfcNT2sMaxiBltF4KNthpZvMsMHcltpZm61v9uQY5PEPyH0IhipJ
R7Z2nDkaGfPolnxIxB4pg/Lb9fesc3tgFIqiejVQrxg3rurNJEPw7BWNOOzXuaa7
n2oex6o=
-----END CERTIFICATE-----
Generated at Sun Oct 26 06:34:22 2025 by rpki-client