
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/E7312F4C5DE211ED9D5E6613C4F9AE02.roa
File: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (raw, json)
Hash identifier: NTptfb48xVPb+ZQ3RoM0cTc/A9gJOocPHUwiHXeS2mY=
Subject key identifier: 1D:DD:DF:FF:CD:FB:C5:4D:DC:1C:22:6A:FA:1B:F1:06:85:0C:58:95
Certificate issuer: /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
Certificate serial: 0258
Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/E7312F4C5DE211ED9D5E6613C4F9AE02.roa
Signing time: Mon 03 Nov 2025 01:46:58 +0000
ROA not before: Mon 03 Nov 2025 01:46:58 +0000
ROA not after: Sun 01 Mar 2026 00:00:00 +0000
asID: 137453
IP address blocks: 103.151.74.0/23 maxlen: 23
103.151.74.0/24 maxlen: 24
103.151.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl
rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
Validity
Not Before: Nov 3 01:46:58 2025 GMT
Not After : Mar 1 00:00:00 2026 GMT
Subject: CN=69080992-2f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:c3:4b:43:11:22:11:60:fa:4b:f4:80:bd:
a2:4c:8c:25:5d:d2:8c:9b:e8:bd:6e:3d:02:91:f4:
24:e9:c0:f6:27:c5:a6:25:df:7e:de:91:73:65:d1:
17:14:32:e2:37:45:99:4d:04:b0:02:ac:4b:b5:86:
d5:a9:20:ff:84:04:46:09:63:5b:8d:0c:f0:9f:e5:
e5:81:95:9c:ce:24:f1:31:91:fb:1b:1d:1e:82:b8:
2b:98:8f:ec:1a:bc:69:64:05:07:b2:72:29:4d:fe:
3a:a2:09:16:cf:d2:96:ee:f8:91:c3:45:c2:39:02:
71:3e:1b:23:6d:24:22:63:42:0a:50:30:c1:e0:29:
eb:e7:f6:0d:78:49:d5:43:79:c4:7f:e5:6c:b7:92:
22:a3:09:d8:f2:26:27:ed:35:12:1f:31:9c:f3:d8:
74:26:3a:ed:72:5d:f7:bf:1a:d6:93:5b:05:54:ee:
3f:93:a7:a1:6f:af:8d:25:7b:74:c2:27:74:27:12:
46:30:a6:15:95:21:ef:45:b4:6e:64:b7:31:5d:48:
52:03:01:1d:52:8d:be:53:81:c1:68:b4:d5:f6:85:
60:ea:d0:81:7c:aa:77:88:76:49:34:3e:70:7f:40:
82:df:8b:44:80:63:97:4e:08:97:13:c5:82:9f:ac:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DD:DF:FF:CD:FB:C5:4D:DC:1C:22:6A:FA:1B:F1:06:85:0C:58:95
X509v3 Authority Key Identifier:
keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/E7312F4C5DE211ED9D5E6613C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.74.0/23
Signature Algorithm: sha256WithRSAEncryption
88:38:df:f4:3d:93:20:96:ab:43:c6:e3:d9:48:06:eb:11:62:
22:18:57:7c:16:bf:62:6e:b1:e9:8c:60:55:f7:aa:f0:86:04:
0e:c2:f3:fd:e2:a1:9b:7f:89:1e:f1:2d:6d:2c:df:5d:6c:27:
31:79:ee:91:e2:da:23:13:16:36:3b:17:ad:b7:99:96:fb:1e:
e1:2e:ba:17:9d:d5:4e:6f:c6:dd:bd:8e:05:82:04:14:4a:e9:
47:8c:9f:1b:dc:39:e6:21:2b:d8:ee:7e:00:db:f3:e0:41:8a:
70:ae:f3:2d:f3:36:95:eb:a6:f8:1e:90:de:a0:30:58:4e:f0:
c3:89:da:f0:a1:1f:b0:44:3c:51:48:b8:59:8d:0d:15:f9:81:
dc:83:05:74:3c:66:47:d0:bc:fa:f5:c1:a1:99:2c:f2:ec:21:
28:f0:a6:ba:fa:a3:12:ab:ef:bc:c7:2a:56:72:80:1b:2d:94:
d6:a7:24:e3:d1:a1:5f:ab:62:ed:e4:60:44:ac:b6:73:8b:50:
8b:00:8d:18:dc:3c:3e:72:7a:b1:f4:83:af:70:47:11:4c:4b:
f0:86:b8:22:9a:b9:03:80:e1:ae:6e:02:a7:16:a4:a8:0e:be:
f1:15:3f:c8:71:49:45:19:56:dd:10:1d:42:5d:92:cb:76:b5:
3c:7b:53:0d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkzQkIxMTAvBgNVBAUTKEYzRTVFMjU2RDJFQzVDQTY3RjhBMTlCRTVBMUIyODI5
QjEzNzU4MUYwHhcNMjUxMTAzMDE0NjU4WhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA4MDk5Mi0yZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuXzDS0MRIhFg+kv0gL2iTIwlXdKMm+i9bj0CkfQk6cD2J8WmJd9+3pFzZdEX
FDLiN0WZTQSwAqxLtYbVqSD/hARGCWNbjQzwn+XlgZWcziTxMZH7Gx0egrgrmI/s
GrxpZAUHsnIpTf46ogkWz9KW7viRw0XCOQJxPhsjbSQiY0IKUDDB4Cnr5/YNeEnV
Q3nEf+Vst5IiownY8iYn7TUSHzGc89h0Jjrtcl33vxrWk1sFVO4/k6ehb6+NJXt0
wid0JxJGMKYVlSHvRbRuZLcxXUhSAwEdUo2+U4HBaLTV9oVg6tCBfKp3iHZJND5w
f0CC34tEgGOXTgiXE8WCn6x2qQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB3d3//N
+8VN3Bwiavob8QaFDFiVMB8GA1UdIwQYMBaAFPPl4lbS7Fymf4oZvlobKCmxN1gf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCQi85NDUxRDM3MjRB
MDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hLWl9paG0tV2hzb0tiRTNX
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgtWGlWdExzWEtaX2lobS1XaHNvS2JFM1dCOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTkzQkIvOTQ1MUQzNzI0QTA0MTFFREI2RUE5NTc2QzRGOUFFMDIvRTczMTJGNEM1
REUyMTFFRDlENUU2NjEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnl0owDQYJKoZIhvcNAQELBQADggEBAIg43/Q9kyCWq0PG
49lIBusRYiIYV3wWv2JusemMYFX3qvCGBA7C8/3ioZt/iR7xLW0s311sJzF57pHi
2iMTFjY7F623mZb7HuEuuhed1U5vxt29jgWCBBRK6UeMnxvcOeYhK9jufgDb8+BB
inCu8y3zNpXrpvgekN6gMFhO8MOJ2vChH7BEPFFIuFmNDRX5gdyDBXQ8ZkfQvPr1
waGZLPLsISjwprr6oxKr77zHKlZygBstlNanJOPRoV+rYu3kYESstnOLUIsAjRjc
PD5yerH0g69wRxFMS/CGuCKauQOA4a5uAqcWpKgOvvEVP8hxSUUZVt0QHUJdkst2
tTx7Uw0=
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:05:43 2025 by rpki-client