
$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/5D1FFF4EB31211F0AE01876AC4F9AE02.roa
File: 5D1FFF4EB31211F0AE01876AC4F9AE02.roa (raw, json)
Hash identifier: jioXviDk5f0RvO72gULkCLu5NcW9ioae071XHGNI38s=
Subject key identifier: 32:34:EA:36:55:64:0D:D6:9F:35:B6:94:45:A7:21:B6:58:B0:F1:41
Certificate issuer: /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9
Certificate serial: 01DF
Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/5D1FFF4EB31211F0AE01876AC4F9AE02.roa
Signing time: Mon 27 Oct 2025 08:53:10 +0000
ROA not before: Mon 27 Oct 2025 08:53:10 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 132031
IP address blocks: 103.82.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl
rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91128AE, serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9
Validity
Not Before: Oct 27 08:53:10 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=68ff32f6-b95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:e4:72:29:47:ce:0c:0c:96:3d:b9:0b:0e:
a9:7e:cd:93:f7:e9:3f:5c:31:68:66:e6:ec:ac:cc:
03:bf:a3:45:ed:fb:2b:b3:ae:e8:fa:01:14:9a:6b:
36:61:8b:e1:ce:50:23:e5:b3:30:f4:0b:fe:11:ba:
e7:83:19:30:87:ed:c3:0a:d2:1b:60:de:c1:36:cf:
df:8a:b5:1e:da:0b:5b:9d:c0:1c:67:82:af:6f:af:
c1:ba:24:9b:68:f5:fa:5b:0a:64:7d:d2:aa:4c:c2:
36:6b:eb:6e:5d:54:72:94:8e:f0:a7:a2:74:96:7d:
ed:ed:85:7a:57:af:ee:a5:48:f6:83:14:2c:c4:a1:
79:21:b9:6f:77:b6:da:0d:f1:4a:25:0d:60:35:50:
be:29:e1:33:b2:24:df:ac:32:42:1a:be:c7:a8:52:
55:32:d0:46:1c:ed:1f:33:ed:4b:8a:cc:08:45:ec:
63:7c:04:ef:93:31:8c:14:c2:42:17:6e:0b:63:1e:
98:65:40:78:f7:86:ef:f6:bb:df:f7:29:b1:9d:0a:
ee:95:ca:bc:2b:40:bd:09:f9:36:26:ee:82:86:09:
7f:45:89:58:3d:14:0f:93:fa:62:d7:ad:a9:98:33:
22:3f:35:70:aa:b3:f3:5e:67:2d:d2:60:fb:a8:41:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:34:EA:36:55:64:0D:D6:9F:35:B6:94:45:A7:21:B6:58:B0:F1:41
X509v3 Authority Key Identifier:
keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/5D1FFF4EB31211F0AE01876AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.201.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:37:d9:c5:71:fd:52:ee:d2:72:65:a7:ea:17:4c:b2:cf:9a:
78:04:6b:a5:d7:67:5c:04:db:aa:56:08:e2:16:99:e7:55:d7:
7a:70:e6:7e:2f:2b:f4:7b:4f:a6:ef:5b:c2:0d:0c:fc:92:e0:
bb:64:8e:81:d8:c8:dd:0f:b9:2d:29:cf:1f:6d:c9:dc:e1:7f:
cc:56:fe:ab:0f:e6:6a:c3:60:1c:13:48:43:34:b9:ef:e6:a0:
f7:0e:7d:9a:1d:2c:db:4a:ef:8b:f8:99:cc:4f:1d:78:d7:05:
4b:9c:d9:7f:2a:87:0e:4d:11:2d:1f:62:1b:0e:8c:1b:c4:ad:
ab:2d:8d:c9:ea:94:89:ef:11:a4:ef:79:9a:bc:1e:cf:6c:82:
76:d7:2d:03:43:25:42:ff:e0:5a:d4:45:12:31:92:bc:46:1e:
19:7f:93:de:d0:91:8f:b1:6a:ad:76:2b:37:7d:e4:16:2d:06:
e8:ce:df:f5:df:61:1e:63:38:0c:0b:1e:d4:31:76:e8:ad:8d:
1d:f0:3e:ce:8b:61:75:c6:74:a6:70:1b:b5:ff:a4:8a:4c:1f:
33:14:29:74:b9:f5:f8:f4:6b:0e:21:d4:e1:53:e0:ec:e2:47:
52:22:dd:88:d4:74:9f:c6:ed:76:38:ac:6d:dc:70:1b:7d:aa:
a2:39:b6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:45:52 2025 by rpki-client