
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/051D87824A9A11ED9B9F6E25C4F9AE02.roa
File: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (raw, json)
Hash identifier: xNOCVL67QUmTmGocS6l83l1PTGVVO5dlYlS+P9v2qqM=
Subject key identifier: 59:A5:21:40:D8:89:70:EF:40:EB:41:76:AE:5E:4F:B1:11:DF:57:0C
Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66
Certificate serial: 024F
Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/051D87824A9A11ED9B9F6E25C4F9AE02.roa
Signing time: Wed 15 Oct 2025 04:27:58 +0000
ROA not before: Wed 15 Oct 2025 04:27:58 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 59204
IP address blocks: 103.93.82.0/24 maxlen: 24
103.242.182.0/24 maxlen: 24
2407:38c0:61::/48 maxlen: 48
2407:38c0:64::/48 maxlen: 48
2407:38c0:82::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl
rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66
Validity
Not Before: Oct 15 04:27:58 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68ef22cd-8aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:e5:74:73:ac:4b:4f:6b:5e:b1:85:d8:bd:
b6:15:62:0e:da:8c:cd:31:d5:30:23:7b:0e:c8:7e:
d9:31:bc:3d:8f:cc:71:ff:b4:9a:2d:96:71:ae:73:
5b:02:57:d8:af:3a:30:37:98:78:8f:5c:b2:13:12:
23:c8:26:8a:16:f5:cf:75:89:81:a5:64:47:2d:5e:
10:80:31:8d:ba:7d:b4:30:58:3c:a5:91:5f:ce:89:
01:f3:f1:6a:94:64:be:f2:24:fe:e6:f0:c0:52:4e:
b9:bb:8b:7d:8d:3a:b6:02:f0:28:2b:aa:79:fd:ba:
cb:36:eb:f1:3e:b3:39:2c:d8:81:ad:07:f6:c5:8e:
d5:3e:02:3a:51:04:96:f6:3a:84:a9:7a:57:b6:f3:
8f:23:37:c8:82:1d:3e:bb:7a:f1:1c:59:99:3f:d2:
ec:f0:df:37:9a:ce:79:35:82:02:9c:a9:89:d5:0b:
24:e1:11:32:96:c1:c7:9a:f1:ef:cd:48:c1:a4:e2:
d4:3d:68:84:56:2f:e8:01:46:9d:cd:5a:88:d3:c1:
e9:10:4f:ac:e8:59:e0:ad:cf:79:89:50:f2:41:ce:
00:0e:99:d3:10:18:15:14:83:a2:c8:1b:b1:4e:05:
50:37:54:e8:31:65:76:23:59:5b:17:e4:5b:35:ab:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A5:21:40:D8:89:70:EF:40:EB:41:76:AE:5E:4F:B1:11:DF:57:0C
X509v3 Authority Key Identifier:
keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/051D87824A9A11ED9B9F6E25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.93.82.0/24
103.242.182.0/24
IPv6:
2407:38c0:61::/48
2407:38c0:64::/48
2407:38c0:82::/48
Signature Algorithm: sha256WithRSAEncryption
5d:06:5b:5f:62:a5:71:fa:84:58:36:9e:96:46:d8:ac:df:fa:
f9:d0:ec:32:e4:55:98:9b:f6:25:83:48:05:db:f4:7f:15:27:
22:ad:a3:b2:ad:9a:4c:5a:6e:5d:34:19:d4:4a:50:c4:c1:ad:
7d:c6:4e:63:10:8d:90:b3:62:c8:02:86:64:ff:06:c5:1e:0a:
17:57:1b:b7:ff:35:70:34:5f:b3:97:9b:64:83:5b:33:a3:c0:
b2:45:b5:50:0d:fc:25:4c:3e:8f:f6:7b:be:c1:11:a1:df:52:
bd:62:11:31:09:37:22:29:40:d8:12:cc:cf:6a:06:73:16:be:
69:52:5c:9b:c0:e1:33:4c:77:ce:0d:46:20:e8:2c:58:ba:2a:
8c:84:f9:25:d5:90:f3:20:59:40:00:fb:e1:46:3f:3b:d5:29:
28:de:a4:04:eb:c2:19:75:8d:ad:32:e5:66:31:dd:3b:58:cb:
95:16:d9:58:e3:75:48:15:b1:e0:12:0c:11:7e:32:0a:bc:5e:
1d:41:f9:e2:cc:da:df:28:9f:7e:26:12:60:7a:72:a9:15:cd:
dc:8f:16:f3:c5:09:d4:76:0b:bf:e3:42:8c:67:e2:c3:ad:54:
3d:1b:4b:f8:46:53:bf:06:66:e7:6a:1c:3d:8e:3c:9f:88:70:
82:8a:47:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:45 2025 by rpki-client