
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/97B4F5603B3D11ED822BB46CC4F9AE02.roa
File: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (raw, json)
Hash identifier: 31J9yBONwQ0Slze1cZAXabZLSH29F7mH7omWRFxw8QA=
Subject key identifier: DE:D1:1D:3A:57:5B:BA:F5:34:51:6F:74:14:00:A2:F9:13:E4:E9:9D
Certificate issuer: /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Certificate serial: 025F
Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/97B4F5603B3D11ED822BB46CC4F9AE02.roa
Signing time: Fri 31 Oct 2025 01:45:44 +0000
ROA not before: Fri 31 Oct 2025 01:45:43 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150312
IP address blocks: 103.52.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Validity
Not Before: Oct 31 01:45:43 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690414c7-31d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:f2:ab:2b:f4:59:2d:4a:4a:fd:0e:cc:c4:
a6:e3:20:4b:0b:c3:f1:f1:8d:2a:00:a3:d4:27:11:
6c:8c:49:f3:64:bd:a2:8d:6b:2c:96:1c:d4:60:00:
e9:37:1e:6e:88:e8:7f:46:52:1e:f7:78:a9:ea:a1:
44:89:29:99:9d:9a:42:61:ce:bc:2d:14:29:6d:23:
b2:f9:30:48:7c:ae:89:7c:ee:c8:14:e9:76:07:11:
a7:b4:08:53:1e:02:83:bc:fb:ea:40:52:80:d8:e9:
a0:f4:d2:e3:7e:10:e1:77:e6:ab:86:10:08:a2:36:
9a:17:65:58:18:1b:4c:71:b6:18:9e:4f:16:b3:16:
13:e6:5e:aa:f3:b6:05:d8:2f:ec:c7:ff:41:a8:85:
68:c0:40:c3:58:31:07:2e:c4:0f:70:24:8f:83:07:
ac:eb:5b:c2:a6:76:9e:99:25:82:d9:0d:bc:8a:b6:
71:88:b9:37:f7:84:76:92:da:17:3d:1b:03:f4:fa:
db:9e:28:99:26:a6:e5:61:7f:0c:d0:49:34:69:77:
1c:27:7f:89:58:b3:f4:44:66:95:dd:48:56:8d:17:
8e:f2:46:2f:09:da:85:03:fe:5e:64:df:49:e3:7f:
5f:4f:a6:56:e8:ea:16:42:98:d6:eb:e2:88:6f:ad:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D1:1D:3A:57:5B:BA:F5:34:51:6F:74:14:00:A2:F9:13:E4:E9:9D
X509v3 Authority Key Identifier:
keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/97B4F5603B3D11ED822BB46CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.52.63.0/24
Signature Algorithm: sha256WithRSAEncryption
06:18:78:a8:cf:0f:81:2b:38:b1:19:23:95:15:ed:c0:95:fc:
3e:48:49:d8:c1:ea:d4:5f:e4:50:e1:b6:db:f0:cc:31:bf:7c:
32:28:47:5a:1e:34:be:59:61:8a:f5:47:a5:58:3d:4f:03:86:
84:9a:4f:45:ec:eb:97:58:d0:34:41:00:28:7e:78:ef:8d:a5:
fc:e3:aa:fe:a8:b1:05:04:84:bd:6d:5c:bd:09:07:f6:cd:76:
16:46:75:2d:b4:d3:d9:e6:47:65:ce:8a:cc:c4:74:ee:bc:1a:
cb:2a:e4:92:0b:e9:92:6b:ac:72:3d:86:d9:ff:86:f5:b0:4e:
6f:86:4b:a8:fa:a1:6b:10:af:57:40:23:83:30:47:9d:8a:d5:
e8:cb:a2:82:a4:4f:27:ba:dd:7b:06:b4:d9:d7:ce:7c:52:00:
7f:e2:8c:b0:a4:8a:ce:2a:b5:0a:66:b5:e6:8c:49:7a:cd:ef:
da:80:f4:4f:71:ba:5d:be:63:e5:ea:da:4b:c2:00:ca:e7:4c:
bb:f5:d1:23:c0:ae:ac:e3:ce:b7:e8:48:91:f8:44:d6:1c:cd:
c4:7d:80:01:26:8e:0c:ee:c2:97:69:fb:f6:f7:77:b5:64:d8:
af:bd:39:ca:bd:00:7e:d6:95:57:a1:d0:66:25:b9:47:08:8d:
15:4b:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:35:57 2025 by rpki-client