
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/61A03234B57C11F0B3EF6D44C4F9AE02.roa
File: 61A03234B57C11F0B3EF6D44C4F9AE02.roa (raw, json)
Hash identifier: 9e8VBn0H1wXLyPpw6Kc9DOuqhueaOglr89Wu4VeUJnM=
Subject key identifier: 80:A9:1B:4A:A8:CA:15:CF:F2:3C:A7:3D:BA:5F:99:EE:5D:A4:BD:EF
Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial: 02E2
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/61A03234B57C11F0B3EF6D44C4F9AE02.roa
Signing time: Thu 30 Oct 2025 10:37:07 +0000
ROA not before: Thu 30 Oct 2025 10:37:07 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 401783
IP address blocks: 103.102.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738 (0x2e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Validity
Not Before: Oct 30 10:37:07 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=69033fd2-4c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:6d:ca:b6:48:ae:b3:30:72:5f:97:e5:27:
fb:db:19:1a:8d:ce:46:a7:87:5e:04:7a:77:58:d7:
6a:14:e2:a7:b8:ab:e8:04:3f:37:ee:16:42:d6:51:
23:34:4b:0c:a2:02:09:f1:f2:08:c2:9a:ac:55:b7:
1e:b8:f4:08:d2:c0:18:43:11:67:71:d9:26:94:c2:
42:03:83:cd:d4:28:e4:6f:70:83:52:dc:52:c2:52:
7f:dd:2b:a3:25:49:c1:e7:d6:07:5f:26:e7:aa:7b:
b3:f2:d8:ad:7e:64:9c:a2:a4:4e:73:bb:28:d2:3a:
e2:32:f4:56:01:45:be:30:69:89:65:83:b9:73:5f:
3f:70:e5:0c:1c:0d:c5:c2:bb:34:2b:bc:ab:85:5e:
2f:13:f2:73:82:78:39:bc:28:b8:96:08:81:5a:63:
c7:51:87:9b:d9:65:9a:20:56:ba:1d:e2:5c:b4:a3:
f9:fd:7d:6f:59:9b:86:6d:9c:d0:c8:0b:2a:47:75:
c4:1d:ab:97:45:6c:94:77:91:e4:94:9b:6f:53:6c:
84:df:87:11:2e:b3:07:a1:8d:65:01:4b:7f:57:5e:
50:7f:0c:15:b8:b8:83:de:e9:f3:31:31:8f:5c:22:
00:89:f9:f9:83:ff:e1:22:dc:f4:78:29:5f:da:ee:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A9:1B:4A:A8:CA:15:CF:F2:3C:A7:3D:BA:5F:99:EE:5D:A4:BD:EF
X509v3 Authority Key Identifier:
keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/61A03234B57C11F0B3EF6D44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.125.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:e1:88:d0:63:05:be:9d:f9:5b:7e:29:20:2e:b4:f1:76:f0:
0a:7d:7d:ad:96:30:e0:d1:42:94:3d:2e:86:c6:2d:cd:5f:cc:
45:43:03:27:32:a3:74:ff:1c:a9:c0:5d:b1:c1:4a:ec:fc:c2:
66:38:94:fb:8c:66:8e:0e:7c:92:22:af:1f:72:be:10:cf:54:
5a:52:b3:dc:d1:b2:56:7c:75:00:5c:79:41:4a:05:a4:b5:97:
cf:d8:3f:d9:bd:0c:9c:0c:ce:ff:1e:9d:b8:b6:95:a3:ef:ff:
6f:a8:06:bd:77:95:75:f7:97:f9:aa:e1:94:57:3c:f0:21:26:
a2:45:ce:ad:da:0d:34:8c:7d:67:c3:a8:2f:d9:da:cf:8c:a6:
b6:37:9e:e7:85:2a:24:c1:05:09:6f:4d:e3:b9:8e:84:d1:cf:
9b:8d:ec:83:78:23:53:ab:3c:e9:9c:f0:05:4e:11:11:fc:6f:
b2:6d:d6:7d:20:b1:f2:04:5a:ed:6f:d2:90:57:6b:53:e2:1d:
c9:fd:ab:35:4c:79:be:83:5c:ce:0e:fc:2f:44:e7:fe:f6:4c:
1e:6c:ef:cc:a2:f5:ee:ce:bc:20:21:48:37:6e:c7:5f:8d:5e:
e2:fc:74:76:28:28:b1:b1:5b:e1:b0:85:34:9c:4a:a8:76:37:
fd:f0:cc:46
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG
MkU0MDkyQjQwHhcNMjUxMDMwMTAzNzA3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAzM2ZkMi00YzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsHJtyrZIrrMwcl+X5Sf72xkajc5Gp4deBHp3WNdqFOKnuKvoBD837hZC1lEj
NEsMogIJ8fIIwpqsVbceuPQI0sAYQxFncdkmlMJCA4PN1Cjkb3CDUtxSwlJ/3Suj
JUnB59YHXybnqnuz8titfmScoqROc7so0jriMvRWAUW+MGmJZYO5c18/cOUMHA3F
wrs0K7yrhV4vE/Jzgng5vCi4lgiBWmPHUYeb2WWaIFa6HeJctKP5/X1vWZuGbZzQ
yAsqR3XEHauXRWyUd5HklJtvU2yE34cRLrMHoY1lAUt/V15QfwwVuLiD3unzMTGP
XCIAifn5g//hItz0eClf2u5IfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFICpG0qo
yhXP8jynPbpfme5dpL3vMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4
NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr
clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTgwRDIvRUJDMUFDMkMxODRGMTFFREFEQkMzQzY1QzRGOUFFMDIvNjFBMDMyMzRC
NTdDMTFGMEIzRUY2RDQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnZn0wDQYJKoZIhvcNAQELBQADggEBAM3hiNBjBb6d+Vt+
KSAutPF28Ap9fa2WMODRQpQ9LobGLc1fzEVDAycyo3T/HKnAXbHBSuz8wmY4lPuM
Zo4OfJIirx9yvhDPVFpSs9zRslZ8dQBceUFKBaS1l8/YP9m9DJwMzv8enbi2laPv
/2+oBr13lXX3l/mq4ZRXPPAhJqJFzq3aDTSMfWfDqC/Z2s+MprY3nueFKiTBBQlv
TeO5joTRz5uN7IN4I1OrPOmc8AVOERH8b7Jt1n0gsfIEWu1v0pBXa1PiHcn9qzVM
eb6DXM4O/C9E5/72TB5s78yi9e7OvCAhSDdux1+NXuL8dHYoKLGxW+GwhTScSqh2
N/3wzEY=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:46:38 2025 by rpki-client