
$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/A4C5164E8FD411EE85082822C4F9AE02.roa
File: A4C5164E8FD411EE85082822C4F9AE02.roa (raw, json)
Hash identifier: ewSndXmGK4bIjd/hEYzsemW56YoGlHl9wDoTOirwBNg=
Subject key identifier: B1:EA:6D:F8:99:87:83:2D:6B:46:70:9D:5D:43:C6:22:54:30:B1:15
Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
Certificate serial: 0165
Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/A4C5164E8FD411EE85082822C4F9AE02.roa
Signing time: Sat 25 Oct 2025 07:47:45 +0000
ROA not before: Sat 25 Oct 2025 07:47:45 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 7575
IP address blocks: 203.25.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl
rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
Validity
Not Before: Oct 25 07:47:45 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68fc80a0-d760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:56:b1:6f:90:1f:08:7e:4c:ef:77:ea:28:
fe:2d:2b:cc:d8:d5:60:2a:42:d5:1c:ea:bc:31:70:
a1:43:bc:0a:19:04:ef:f8:9a:2c:60:26:fc:1c:fa:
1b:b6:b2:8b:4a:6b:b7:ba:e6:a4:3a:26:97:4a:78:
e6:89:de:51:01:4a:74:69:23:e5:cf:4d:05:14:4c:
91:0f:bc:98:db:07:1c:f6:d9:46:21:57:6a:29:7c:
d2:3d:1f:58:c7:3b:20:31:71:9c:2f:6a:91:2c:4b:
92:b8:40:af:64:f9:17:c4:0e:7e:87:37:06:69:74:
0b:60:18:f6:93:e1:15:9e:03:fc:4f:3b:96:aa:5c:
b0:1c:0f:77:32:03:e4:82:da:d5:9d:f2:fa:b2:a4:
1e:1b:2f:af:01:93:60:cb:35:1d:14:eb:cf:72:a8:
b8:cb:0e:a7:6a:f3:a3:a5:4a:4c:f9:34:26:d6:82:
3f:37:4f:c1:b3:c5:90:ce:69:aa:bc:26:a4:bd:4e:
25:b8:87:0f:7e:a0:0d:b3:05:18:2a:cc:ca:ab:7f:
d9:6f:d8:87:be:97:52:b8:8e:62:83:6e:df:1c:a9:
0f:78:c4:07:72:b0:7c:54:4a:f0:c2:5e:80:ba:60:
2d:0d:a8:d3:50:a8:e9:ee:52:68:bd:4c:5f:d4:78:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EA:6D:F8:99:87:83:2D:6B:46:70:9D:5D:43:C6:22:54:30:B1:15
X509v3 Authority Key Identifier:
keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/A4C5164E8FD411EE85082822C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.25.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f6:06:c4:62:53:98:6d:6b:13:28:f0:b8:f7:56:0c:24:2a:
82:b9:9a:6e:1f:d2:db:7d:32:b4:38:bf:06:f6:29:eb:c9:27:
06:b9:f3:85:82:49:52:64:fd:fc:38:d6:76:33:a0:b1:fb:ff:
c5:32:06:e7:70:fe:d3:67:3d:bc:83:9c:66:ed:e9:e4:b7:d0:
05:55:20:69:66:29:5f:ac:28:b1:a5:0c:be:cc:b4:0d:82:57:
14:03:ef:aa:12:98:70:5f:5a:a3:9c:bd:67:7b:77:08:85:e8:
7d:9f:f8:a2:a0:83:fa:ed:7f:f1:c8:17:4e:a6:f7:85:26:29:
3a:c9:7a:7c:14:e5:bb:d0:c3:80:f0:a5:b8:7d:60:a8:9b:d4:
2c:c7:6e:b2:80:be:0b:62:41:76:61:f6:1a:0c:60:7a:b2:e2:
9f:4b:6e:2e:5f:64:43:2f:0e:1e:3c:38:b4:5c:79:27:c2:6e:
c1:40:81:4c:ab:73:3f:13:09:2c:a3:94:91:05:0b:44:76:9c:
33:a1:4f:00:6c:31:0e:ea:b3:ca:5d:c3:aa:b0:b5:a3:93:51:
05:25:57:a5:1f:af:04:85:92:b7:c5:35:ad:8c:02:1d:1e:10:
36:8c:9b:dd:a6:ee:ac:7d:3f:a3:63:51:b4:15:6f:0a:18:da:
13:c3:91:29
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU1RDcxMTAvBgNVBAUTKDcyOTM1NUFBMDM3OEY2RDRGNDA1NkU2NjI2QkJDOUJF
MzBDOUQ4RjAwHhcNMjUxMDI1MDc0NzQ1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGZjODBhMC1kNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAriVWsW+QHwh+TO936ij+LSvM2NVgKkLVHOq8MXChQ7wKGQTv+JosYCb8HPob
trKLSmu3uuakOiaXSnjmid5RAUp0aSPlz00FFEyRD7yY2wcc9tlGIVdqKXzSPR9Y
xzsgMXGcL2qRLEuSuECvZPkXxA5+hzcGaXQLYBj2k+EVngP8TzuWqlywHA93MgPk
gtrVnfL6sqQeGy+vAZNgyzUdFOvPcqi4yw6navOjpUpM+TQm1oI/N0/Bs8WQzmmq
vCakvU4luIcPfqANswUYKszKq3/Zb9iHvpdSuI5ig27fHKkPeMQHcrB8VErwwl6A
umAtDajTUKjp7lJovUxf1Hj2yQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLHqbfiZ
h4Mta0ZwnV1DxiJUMLEVMB8GA1UdIwQYMBaAFHKTVaoDePbU9AVuZia7yb4wydjw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVENy80MEY5RUZBNDhG
RDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0VDBCVzVtSnJ2SnZqREoy
UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NwTlZxZ040OXRUMEJXNW1KcnZKdmpESjJQQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzU1RDcvNDBGOUVGQTQ4RkQ0MTFFRUIwODU4NzQ5QzRGOUFFMDIvQTRDNTE2NEU4
RkQ0MTFFRTg1MDgyODIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLGUswDQYJKoZIhvcNAQELBQADggEBAA32BsRiU5htaxMo
8Lj3VgwkKoK5mm4f0tt9MrQ4vwb2KevJJwa584WCSVJk/fw41nYzoLH7/8UyBudw
/tNnPbyDnGbt6eS30AVVIGlmKV+sKLGlDL7MtA2CVxQD76oSmHBfWqOcvWd7dwiF
6H2f+KKgg/rtf/HIF06m94UmKTrJenwU5bvQw4Dwpbh9YKib1CzHbrKAvgtiQXZh
9hoMYHqy4p9Lbi5fZEMvDh48OLRceSfCbsFAgUyrcz8TCSyjlJEFC0R2nDOhTwBs
MQ7qs8pdw6qwtaOTUQUlV6UfrwSFkrfFNa2MAh0eEDaMm92m7qx9P6NjUbQVbwoY
2hPDkSk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:17:32 2025 by rpki-client