
$ rpki-client -vvf rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/18193690B83511F08571AD3BC4F9AE02.roa
File: 18193690B83511F08571AD3BC4F9AE02.roa (raw, json)
Hash identifier: aL67QMTvuP9QDW4aS9FvbcDQzDQ8WZjICzE6ZFXle3M=
Subject key identifier: 3B:A7:2C:99:68:E5:A0:E1:1B:91:1C:B0:2E:22:CB:4F:7E:06:41:71
Certificate issuer: /CN=A91109D7/serialNumber=55FEC9E207B3DB4DED652E4958336F43D9E2739C
Certificate serial: 0F
Authority key identifier: 55:FE:C9:E2:07:B3:DB:4D:ED:65:2E:49:58:33:6F:43:D9:E2:73:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/18193690B83511F08571AD3BC4F9AE02.roa
Signing time: Sun 02 Nov 2025 21:44:22 +0000
ROA not before: Sun 02 Nov 2025 21:44:22 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 154275
IP address blocks: 203.100.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.crl
rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91109D7, serialNumber=55FEC9E207B3DB4DED652E4958336F43D9E2739C
Validity
Not Before: Nov 2 21:44:22 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6907d0b6-115c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:7d:fe:ac:0b:01:9e:e4:ae:d0:f4:ea:c4:
2e:17:ec:5f:04:9e:aa:f8:d7:8c:72:6b:a0:2c:24:
63:c7:46:ad:25:90:7d:96:0a:f1:fe:8f:80:8f:e0:
ff:b9:3b:58:a7:da:5b:28:75:2e:aa:fb:95:31:e4:
aa:a4:c4:a3:4e:43:73:cc:58:bd:d8:a2:59:9c:59:
65:8f:d9:fb:44:d6:57:ba:57:49:b1:a7:47:cb:fa:
1d:83:1d:25:45:a5:67:7a:aa:6c:de:c2:4e:fc:97:
8e:f3:3a:b1:c8:d8:5a:d9:16:87:42:e8:54:b0:74:
2d:bd:c1:25:73:af:60:aa:c6:23:c1:a7:ce:a0:e3:
93:5f:0d:fd:15:44:1a:26:0d:76:67:40:1a:05:0d:
85:38:65:02:62:f0:59:24:f4:3a:10:dc:01:de:4b:
f6:b8:81:2c:8c:71:0f:a6:c7:4d:55:04:7f:f3:9e:
02:61:4b:ab:ca:47:3e:da:19:e2:32:76:3e:bb:9f:
92:8c:31:65:86:93:6d:57:97:55:06:dd:f0:06:d4:
f8:fa:a3:e7:ce:f3:e8:e9:38:41:a8:d2:04:aa:37:
59:83:9e:2a:55:2d:db:e6:5e:60:8c:92:a9:fb:fd:
71:a2:3e:8d:ef:9f:a5:74:85:bd:82:75:ba:07:15:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A7:2C:99:68:E5:A0:E1:1B:91:1C:B0:2E:22:CB:4F:7E:06:41:71
X509v3 Authority Key Identifier:
keyid:55:FE:C9:E2:07:B3:DB:4D:ED:65:2E:49:58:33:6F:43:D9:E2:73:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/18193690B83511F08571AD3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.100.62.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c6:94:6a:e6:dc:59:57:d0:92:34:da:bd:a6:91:99:c0:f4:
ae:1b:d4:85:d5:a4:59:d7:3f:11:b3:f7:a2:6e:c2:03:8a:99:
55:03:ab:23:1a:26:5f:5f:3a:59:43:9c:39:a2:c3:0d:0c:5e:
53:b7:49:43:d8:db:60:a9:6a:18:52:d4:0e:1e:1a:2c:c7:46:
a6:3c:00:ff:1a:ef:57:49:d2:67:79:b7:ec:ec:01:ae:a3:55:
96:ba:a3:69:ca:c9:41:5b:f9:ff:56:a5:d3:98:ba:05:8e:62:
12:fe:18:bd:07:e9:52:eb:48:c8:4c:d6:3f:33:9b:87:9b:93:
4f:00:df:c6:0f:98:77:e0:87:1c:e3:ff:ee:d9:98:80:21:1b:
a2:e6:6b:71:e2:7a:1f:ef:d7:5f:21:a8:6d:d3:50:9d:1b:01:
dc:ae:77:e8:19:a6:c2:6e:06:41:80:0d:3a:28:b2:8b:71:1f:
a8:37:d7:2f:25:5e:24:be:65:6b:3a:5d:80:1c:44:40:fd:99:
5c:d6:aa:5e:7f:5b:cb:20:ae:00:5a:fd:48:db:cd:84:ac:60:
a0:fa:da:18:2e:91:3a:3f:98:42:ec:30:ca:0c:63:7f:ff:f9:
ba:7e:49:46:02:f8:4e:69:0a:ad:0b:b2:ad:30:95:05:71:0e:
54:86:8d:be
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MDlENzExMC8GA1UEBRMoNTVGRUM5RTIwN0IzREI0REVENjUyRTQ5NTgzMzZGNDNE
OUUyNzM5QzAeFw0yNTExMDIyMTQ0MjJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MDdkMGI2LTExNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCIX3+rAsBnuSu0PTqxC4X7F8Enqr414xya6AsJGPHRq0lkH2WCvH+j4CP4P+5
O1in2lsodS6q+5Ux5KqkxKNOQ3PMWL3YolmcWWWP2ftE1le6V0mxp0fL+h2DHSVF
pWd6qmzewk78l47zOrHI2FrZFodC6FSwdC29wSVzr2CqxiPBp86g45NfDf0VRBom
DXZnQBoFDYU4ZQJi8Fkk9DoQ3AHeS/a4gSyMcQ+mx01VBH/zngJhS6vKRz7aGeIy
dj67n5KMMWWGk21Xl1UG3fAG1Pj6o+fO8+jpOEGo0gSqN1mDnipVLdvmXmCMkqn7
/XGiPo3vn6V0hb2CdboHFcADAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUO6csmWjl
oOEbkRywLiLLT34GQXEwHwYDVR0jBBgwFoAUVf7J4gez203tZS5JWDNvQ9nic5ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwOUQ3LzNCRDlEMDg0QTdF
NzExRjA4RDREQjAxMEM0RjlBRTAyL1ZmN0o0Z2V6MjAzdFpTNUpXRE52UTluaWM1
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVmY3SjRnZXoyMDN0WlM1SldETnZROW5pYzV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDlENy8zQkQ5RDA4NEE3RTcxMUYwOEQ0REIwMTBDNEY5QUUwMi8xODE5MzY5MEI4
MzUxMUYwODU3MUFEM0JDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMtkPjANBgkqhkiG9w0BAQsFAAOCAQEAlcaUaubcWVfQkjTa
vaaRmcD0rhvUhdWkWdc/EbP3om7CA4qZVQOrIxomX186WUOcOaLDDQxeU7dJQ9jb
YKlqGFLUDh4aLMdGpjwA/xrvV0nSZ3m37OwBrqNVlrqjacrJQVv5/1al05i6BY5i
Ev4YvQfpUutIyEzWPzObh5uTTwDfxg+Yd+CHHOP/7tmYgCEbouZrceJ6H+/XXyGo
bdNQnRsB3K536Bmmwm4GQYANOiiyi3EfqDfXLyVeJL5lazpdgBxEQP2ZXNaqXn9b
yyCuAFr9SNvNhKxgoPraGC6ROj+YQuwwygxjf//5un5JRgL4TmkKrQuyrTCVBXEO
VIaNvg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:19 2025 by rpki-client