
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/52047C189EA111EC8EA0096AC4F9AE02.roa
File: 52047C189EA111EC8EA0096AC4F9AE02.roa (raw, json)
Hash identifier: pzFsMxICRta3jJZNRRm+xGcV3VPmmyQWY3sDErTiCgo=
Subject key identifier: BA:E4:BD:BE:2E:0D:55:7E:A0:2C:90:CA:EE:4A:D2:90:F3:80:51:12
Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Certificate serial: 03E2
Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/52047C189EA111EC8EA0096AC4F9AE02.roa
Signing time: Sun 03 Aug 2025 01:08:07 +0000
ROA not before: Sun 03 Aug 2025 01:08:07 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 31898
IP address blocks: 103.63.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Validity
Not Before: Aug 3 01:08:07 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=688eb677-da79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:4d:3b:32:2b:c7:bf:9a:52:0e:87:cf:f8:
39:e4:40:61:76:bb:96:4f:cf:92:b8:4d:d5:5f:ec:
c5:61:be:99:5d:fe:6f:e3:30:76:a8:5e:83:af:47:
a6:70:44:27:80:0a:5d:7a:7a:82:11:0f:7a:bf:68:
04:2f:bc:df:38:70:21:b0:67:60:8b:07:f3:ce:d0:
c4:7c:2c:59:61:84:40:69:fb:b0:aa:7a:6d:bf:bc:
c0:f5:f1:c4:42:c3:d3:27:ac:1b:17:bc:04:9d:7c:
a1:81:19:c1:0f:ba:de:14:dd:67:26:f6:a4:27:d7:
b3:4d:9e:2a:18:be:ab:08:b3:fc:0d:81:9e:d4:40:
4a:58:d9:51:ec:20:98:fb:8f:cf:9c:08:97:f1:7d:
7c:4c:56:ed:a6:02:18:b9:c1:03:fc:e2:b8:fb:83:
9a:10:b9:83:cd:b2:95:80:2e:a6:31:20:d2:a8:ce:
ad:56:29:22:06:f1:a3:b3:80:52:4f:a9:2c:53:64:
72:a1:e7:a5:e0:82:7f:20:48:c3:73:93:66:4e:a6:
9a:2a:87:36:f2:03:fb:ef:06:6d:34:b9:7a:00:ed:
c6:23:a1:c5:c5:82:72:ce:19:31:34:22:40:4a:d1:
06:16:18:c0:b9:a0:57:22:36:00:bc:f4:83:39:3a:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E4:BD:BE:2E:0D:55:7E:A0:2C:90:CA:EE:4A:D2:90:F3:80:51:12
X509v3 Authority Key Identifier:
keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/52047C189EA111EC8EA0096AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.63.102.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c0:d0:9f:98:f9:aa:2f:8f:9e:ea:f1:aa:d1:87:79:62:40:
bc:42:d9:59:40:3f:73:42:50:75:27:f3:6a:6c:e8:ed:7b:e1:
94:f6:fa:0a:99:1d:d3:dc:54:16:97:30:2c:67:ed:81:9b:b4:
75:c6:72:c8:ae:95:29:bc:60:f6:07:28:4e:7c:be:16:c6:61:
2b:18:be:a2:bb:7c:b0:02:1b:e2:f9:6f:80:71:22:1b:cb:95:
82:ce:59:03:15:41:5a:72:31:5d:be:92:43:17:a9:e5:f0:77:
cd:5b:97:b9:17:a4:c6:a7:b7:04:37:7c:9d:06:7c:b5:6f:da:
4e:7d:cd:e8:bb:3e:74:79:97:62:d0:7b:18:65:0d:ed:b7:57:
3a:ec:6b:a2:f1:78:a3:8f:0e:c4:58:75:32:09:c5:77:d1:10:
3b:5f:7c:1b:39:96:eb:e4:b6:7f:7b:6f:90:e6:79:e6:3d:51:
3e:de:b7:3a:8f:ab:a0:3b:09:f6:d9:50:c4:38:e6:cd:66:6d:
0d:77:45:39:7f:30:88:0d:52:b6:a1:93:99:a4:de:80:9b:25:
f4:1e:e0:e0:f8:3e:91:4c:3d:ed:dc:b6:65:78:2c:27:40:3d:
2d:c2:b4:93:d1:93:93:5e:e6:10:a7:b9:7d:61:34:64:4b:09:
66:9a:c7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:21:06 2025 by rpki-client