
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/C25C2A1A4A3211F1BD5DF90392833773.roa
File: C25C2A1A4A3211F1BD5DF90392833773.roa (raw, json)
Hash identifier: 4kmKcblD4wdTmxGgk/4VMvZd46VPu73tC+rcETmeaGY=
Subject key identifier: 00:5A:9A:D6:A7:12:A8:B4:B7:04:E8:B0:14:DF:08:B9:8B:CA:87:83
Certificate issuer: /CN=A91FDC31/serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
Certificate serial: 40
Authority key identifier: D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/C25C2A1A4A3211F1BD5DF90392833773.roa
Signing time: Wed 02 Sep 2026 04:33:39 +0000
ROA not before: Wed 02 Sep 2026 04:33:39 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 134993
IP address blocks: 163.52.100.0/24 maxlen: 24
2001:df6:bd40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl
rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC31, serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
Validity
Not Before: Sep 2 04:33:39 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a97a723-7482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a0:bb:bd:79:0e:85:3d:da:df:12:2e:00:3b:
2d:60:5b:31:fb:5a:d2:44:d6:83:87:fa:ba:e8:2e:
1f:12:84:97:b9:ca:47:85:60:27:18:eb:3f:d7:a1:
69:c9:45:7b:80:32:5a:6f:51:d7:20:bf:cc:d6:55:
72:50:85:29:2d:e6:c5:e3:84:74:15:3e:72:b7:99:
f7:4e:4a:9f:ed:e6:6b:d1:fa:64:18:6f:c5:9d:8a:
fc:35:ea:dc:9a:f6:22:8a:9f:fb:73:e0:41:88:23:
eb:fc:2b:f2:d1:1c:48:71:98:77:4c:c4:5b:b7:ec:
c9:de:c2:24:aa:47:79:d1:bf:3b:00:cf:25:4e:2e:
d7:b6:80:9d:fe:56:26:c0:ad:c5:c4:97:5c:0d:12:
00:da:4a:0a:75:44:9f:61:9d:c9:1e:2a:03:a5:fb:
f8:f0:02:68:b9:44:2c:c4:45:59:85:fd:2c:76:40:
a5:7c:5d:9e:52:5a:a2:20:81:e6:f9:f6:57:18:be:
e9:69:df:c5:6f:3a:16:d6:dc:51:d2:e4:65:f5:a2:
b4:0b:e5:eb:18:ea:8a:df:be:08:fe:6a:96:3d:2d:
c4:59:73:0d:bb:62:36:21:db:2b:a0:96:f4:94:f4:
f4:0e:82:68:93:ea:ab:08:87:c4:20:e8:c8:1f:89:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5A:9A:D6:A7:12:A8:B4:B7:04:E8:B0:14:DF:08:B9:8B:CA:87:83
X509v3 Authority Key Identifier:
keyid:D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/C25C2A1A4A3211F1BD5DF90392833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.100.0/24
IPv6:
2001:df6:bd40::/48
Signature Algorithm: sha256WithRSAEncryption
76:fb:b1:93:2f:6d:2e:e6:3f:3b:d3:ee:0a:31:20:1d:84:58:
36:25:f3:51:c8:89:94:aa:ea:f3:2a:b1:15:86:ed:c7:74:ad:
12:45:cb:c9:ae:9b:e6:77:41:05:38:10:40:46:26:6a:3f:da:
46:3c:3a:30:2e:69:9d:ae:a8:e2:48:63:70:17:a9:04:c2:eb:
52:ea:0d:b2:6f:23:7c:d1:f2:a0:29:f2:58:cd:67:a9:27:e9:
0b:dc:43:3b:45:16:b9:7b:f2:fd:62:0d:e1:19:ff:b9:22:9b:
6b:07:7f:35:87:c8:00:a2:f9:4d:af:7e:d1:31:a7:97:91:26:
68:a2:9d:9a:f5:44:86:cc:81:27:d4:55:3b:e4:3b:5b:0c:ee:
34:68:55:ac:08:e2:89:2a:d6:14:06:ab:fa:0e:2b:27:3f:92:
97:e2:c6:53:51:7e:77:57:a3:01:62:a5:8d:47:ac:a0:ee:ec:
bc:89:56:5f:b0:72:4c:6b:a6:03:f6:69:81:f3:04:a6:ca:f9:
3d:20:61:04:b6:bc:9e:80:0a:5c:44:9e:52:72:61:88:37:af:
b1:6d:13:3c:33:c0:25:24:d6:62:bf:0d:5f:b4:2c:5d:3d:be:
0d:8e:58:01:a9:04:0b:7f:a5:87:73:98:20:ef:3f:de:5e:ad:
30:3f:8b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:47:58 2026 by rpki-client