
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/026537E8861E11F0BC465F85C4F9AE02.roa
File: 026537E8861E11F0BC465F85C4F9AE02.roa (raw, json)
Hash identifier: aEq+il87TT9dISn7kA0eGoG6m3s7NBG3uJ9SPGrkSVQ=
Subject key identifier: 0F:17:9F:66:24:E2:A2:10:2F:5B:E2:49:18:6C:77:14:C5:23:A5:B4
Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Certificate serial: 0237
Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/026537E8861E11F0BC465F85C4F9AE02.roa
Signing time: Mon 03 Nov 2025 02:17:21 +0000
ROA not before: Mon 03 Nov 2025 02:17:21 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 149296
IP address blocks: 103.96.1.0/24 maxlen: 24
113.212.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Validity
Not Before: Nov 3 02:17:21 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690810b0-d413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:b5:d5:a5:2e:f6:70:bc:fa:c3:f0:d5:4e:
57:6a:12:4a:80:b7:86:00:41:75:c1:dc:5b:f5:5c:
e4:41:0a:fc:c0:84:1d:31:a8:fb:23:8f:06:4a:8c:
c8:47:fb:48:7d:c9:8f:15:10:d5:8b:65:ed:84:7d:
09:4f:33:38:d3:1d:33:f5:80:e6:2f:c9:1a:cb:11:
cf:2b:41:e6:81:73:b0:20:83:bd:43:d7:28:c7:a5:
a8:79:ce:ec:67:3e:a3:25:77:49:73:6a:b9:4c:72:
47:f1:ef:d8:af:c7:a9:3f:55:e8:f7:0b:58:27:13:
d1:05:03:d7:3c:e6:4d:ff:09:30:91:3f:0d:dd:eb:
ee:b4:f9:5a:a8:e5:ae:77:c4:cc:6e:0f:ec:82:03:
7c:a0:a2:3e:cc:13:bd:fd:e7:e8:09:21:fb:e7:9e:
dc:d5:78:1f:99:13:d9:cc:8a:f0:9f:5e:8d:6d:90:
2d:12:2e:7b:45:2a:7a:4e:0a:ce:a6:db:29:24:7f:
ec:fc:c1:4a:da:50:ad:28:af:1a:39:83:d8:bd:38:
e7:6f:b8:fb:55:10:40:c7:12:3f:80:c4:cd:17:02:
89:2c:20:99:e5:52:1e:86:8d:fa:fa:46:3f:28:ca:
4e:67:cd:de:12:20:e2:f2:23:90:78:de:48:c7:4a:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:17:9F:66:24:E2:A2:10:2F:5B:E2:49:18:6C:77:14:C5:23:A5:B4
X509v3 Authority Key Identifier:
keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/026537E8861E11F0BC465F85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.1.0/24
113.212.88.0/24
Signature Algorithm: sha256WithRSAEncryption
74:97:24:d2:61:af:a7:f7:35:e0:b7:dd:98:15:be:b5:df:5d:
1d:b1:ab:49:8d:f4:57:1c:48:cf:8c:98:cb:7f:bd:6c:17:a9:
16:c2:3a:fd:55:f4:bd:3d:86:11:f6:3c:b8:28:4c:ee:00:f5:
ef:ba:ac:57:2b:fd:a3:1b:0c:00:17:fa:82:00:03:1f:c5:53:
d5:29:62:06:57:eb:a5:cb:f9:f0:d9:3c:2b:f3:8e:9f:c0:1b:
1e:96:8d:99:ce:5f:b5:e0:56:01:98:74:e5:21:38:93:72:79:
df:39:0c:8a:bb:be:3e:d8:bd:98:45:89:26:d1:78:6e:a1:4e:
87:38:90:83:31:f9:32:23:81:5d:24:99:3e:a7:00:89:54:08:
e8:cf:a7:32:79:89:c4:11:36:00:24:a4:a3:3d:20:3d:49:23:
f5:7c:de:0f:a7:8d:6f:68:bb:d5:7b:61:66:10:9e:3d:25:4b:
05:11:a7:5f:51:af:2f:66:2d:6e:fd:43:99:c1:7d:53:95:c1:
39:cd:0e:3d:81:7c:64:c5:aa:37:9b:00:24:8d:39:03:72:12:
5b:ab:f4:84:59:e1:ac:09:e9:b2:a4:e2:99:2b:94:2c:a8:86:
21:b4:c6:0f:e4:34:c2:df:59:0f:16:ca:ee:f7:dd:51:8d:52:
b1:6e:0c:35
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3
NEE5MkQ0NEQwHhcNMjUxMTAzMDIxNzIxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA4MTBiMC1kNDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApni11aUu9nC8+sPw1U5XahJKgLeGAEF1wdxb9VzkQQr8wIQdMaj7I48GSozI
R/tIfcmPFRDVi2XthH0JTzM40x0z9YDmL8kayxHPK0HmgXOwIIO9Q9cox6Woec7s
Zz6jJXdJc2q5THJH8e/Yr8epP1Xo9wtYJxPRBQPXPOZN/wkwkT8N3evutPlaqOWu
d8TMbg/sggN8oKI+zBO9/efoCSH7557c1XgfmRPZzIrwn16NbZAtEi57RSp6TgrO
ptspJH/s/MFK2lCtKK8aOYPYvTjnb7j7VRBAxxI/gMTNFwKJLCCZ5VIeho36+kY/
KMpOZ83eEiDi8iOQeN5Ix0qNzwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFA8Xn2Yk
4qIQL1viSRhsdxTFI6W0MB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5
MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx
RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTkxRDMvNUZBMzZFMzQ4OTIzMTFFREJDQTI5NjEzQzRGOUFFMDIvMDI2NTM3RTg4
NjFFMTFGMEJDNDY1Rjg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnYAEDBABx1FgwDQYJKoZIhvcNAQELBQADggEBAHSXJNJh
r6f3NeC33ZgVvrXfXR2xq0mN9FccSM+MmMt/vWwXqRbCOv1V9L09hhH2PLgoTO4A
9e+6rFcr/aMbDAAX+oIAAx/FU9UpYgZX66XL+fDZPCvzjp/AGx6WjZnOX7XgVgGY
dOUhOJNyed85DIq7vj7YvZhFiSbReG6hToc4kIMx+TIjgV0kmT6nAIlUCOjPpzJ5
icQRNgAkpKM9ID1JI/V83g+njW9ou9V7YWYQnj0lSwURp19Rry9mLW79Q5nBfVOV
wTnNDj2BfGTFqjebACSNOQNyElur9IRZ4awJ6bKk4pkrlCyohiG0xg/kNMLfWQ8W
yu733VGNUrFuDDU=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:22:29 2025 by rpki-client