
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/01BA52A28CF411EFAE6F7F10C4F9AE02.roa
File: 01BA52A28CF411EFAE6F7F10C4F9AE02.roa (raw, json)
Hash identifier: Z/zZPYkWKXvraJfJSL/aeXz0Ni43Av6pEICr2Ba1ixA=
Subject key identifier: 3B:52:6B:4A:2A:5E:D1:C3:A7:39:82:D1:37:4D:AA:4D:18:F0:94:C4
Certificate issuer: /CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Certificate serial: BB
Authority key identifier: 68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/01BA52A28CF411EFAE6F7F10C4F9AE02.roa
Signing time: Wed 01 Oct 2025 07:05:29 +0000
ROA not before: Wed 01 Oct 2025 07:05:29 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141153
IP address blocks: 103.75.236.0/24 maxlen: 24
2001:df1:c80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AADAF, serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Validity
Not Before: Oct 1 07:05:29 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68dcd2b9-24e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:71:bd:5e:b5:9e:1a:6c:de:23:c1:60:33:
b8:94:df:eb:16:33:dc:68:d2:17:5f:67:3a:d1:a2:
38:3f:b7:e7:02:30:c6:53:de:2e:d8:f6:f1:da:77:
f0:ef:87:25:e2:e9:40:49:b9:1d:4c:87:16:73:e0:
7a:24:25:d6:aa:1c:d5:fc:20:ae:da:3e:8e:df:48:
be:42:1e:8a:1b:d0:56:a5:5d:24:d0:51:e9:2e:1a:
eb:96:0f:57:49:9e:61:32:17:fe:c2:30:8d:db:cb:
ae:bb:7a:05:15:b2:ba:fd:3c:4b:e4:e6:5d:85:b1:
fe:5b:3e:97:6a:5d:cc:5e:83:fe:93:fe:8b:ff:3c:
a0:4f:d0:d4:6a:21:3c:11:c3:5a:5b:dd:77:3c:d5:
12:d8:d4:5b:f9:90:56:45:87:7d:23:e2:42:2a:83:
97:fa:9d:88:83:f0:cd:57:e2:31:ed:e8:28:6b:aa:
29:99:38:2f:fe:dc:49:9c:89:8f:bd:8b:24:bc:3a:
f7:e8:12:f0:23:6b:0c:34:db:4f:1f:a3:1c:93:a7:
41:3c:d1:7f:75:e7:f9:22:48:58:fa:00:cf:cf:48:
e4:81:36:e5:2b:1c:b9:f6:f1:a4:31:6e:4b:ff:53:
ac:a6:c7:5f:a0:db:96:8c:47:21:c7:44:46:f6:46:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:52:6B:4A:2A:5E:D1:C3:A7:39:82:D1:37:4D:AA:4D:18:F0:94:C4
X509v3 Authority Key Identifier:
keyid:68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/01BA52A28CF411EFAE6F7F10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.236.0/24
IPv6:
2001:df1:c80::/48
Signature Algorithm: sha256WithRSAEncryption
8b:f2:c6:69:50:7b:31:64:7e:7e:ce:d5:4d:e1:8a:7c:84:d4:
f7:d0:f8:9b:89:38:35:bc:60:99:2f:8d:32:3c:f5:d2:cd:34:
3e:43:39:59:a1:38:e4:a7:07:a6:9c:44:d4:3b:43:c5:36:c0:
a3:21:7e:4c:c5:9c:f6:ae:ce:24:63:8a:02:41:bc:07:fe:06:
13:c5:8f:b0:7c:c4:74:d5:df:a7:bb:7f:f6:89:3d:54:f4:ad:
45:2c:84:25:87:e7:23:1d:57:67:e7:9d:ac:71:d1:5d:bf:02:
6c:ee:12:ac:d6:30:09:1d:32:17:0b:89:6d:49:e6:04:ab:e1:
e3:85:ac:c7:90:0c:77:17:1e:10:b7:1a:95:25:3d:98:fe:a9:
95:83:02:8f:3c:ef:39:32:0b:9a:89:58:71:57:b1:8a:89:4d:
dc:d0:85:b5:2e:f8:d0:cd:6d:69:cb:eb:47:b4:ce:77:12:ab:
e1:b9:7b:5d:f4:3a:a5:0c:da:f9:c9:e3:61:ff:8a:01:de:d9:
13:6e:a1:af:92:70:5b:76:87:a5:7d:71:6d:08:62:83:3c:4c:
c5:22:88:ab:e7:1a:04:c4:d7:11:76:4c:32:e5:53:7c:c3:ae:
80:e4:ea:3b:de:52:8a:49:38:98:c1:40:9a:6a:08:ce:1a:7e:
09:a8:5f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:38:12 2025 by rpki-client