
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/62C1F5587ACD11E9AC0A867BC4F9AE02.roa
File: 62C1F5587ACD11E9AC0A867BC4F9AE02.roa (raw, json)
Hash identifier: zJtFuv9ERKF2VcP0kXnp4PcKZFEJbjxQnX3bWZEEZas=
Subject key identifier: D5:54:BC:EB:E3:C1:44:70:9A:89:E4:63:D8:B6:97:5D:AA:96:93:FF
Certificate issuer: /CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Certificate serial: 0F2C
Authority key identifier: 6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/62C1F5587ACD11E9AC0A867BC4F9AE02.roa
Signing time: Wed 14 May 2025 18:30:23 +0000
ROA not before: Wed 14 May 2025 18:30:23 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 139024
IP address blocks: 103.138.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3884 (0xf2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB027, serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Validity
Not Before: May 14 18:30:23 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6824e13f-9239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:3b:fd:03:dd:a2:8a:2f:fd:3f:74:76:2e:
53:c0:a2:fb:15:14:af:07:b4:3b:e4:39:f6:cb:3c:
34:b7:ca:b5:1f:ed:13:ff:7d:bb:3d:ed:72:f8:45:
54:78:56:2e:52:aa:f7:20:2b:ab:80:0c:08:19:68:
02:88:1c:ad:d9:83:fe:07:9f:3e:10:70:cd:3c:6d:
db:ab:58:cf:eb:d7:e9:25:9e:ec:c8:22:ae:11:4a:
b7:30:c4:a2:2e:12:f1:d2:ce:53:db:95:ea:d2:5b:
3f:88:f0:50:89:ea:d2:8b:7e:cd:45:d7:a4:1f:94:
3e:90:39:51:80:b2:d6:9a:55:7c:7b:f3:4c:3d:be:
b0:d9:71:e6:cb:a4:b4:2d:bb:ee:4b:35:91:62:09:
62:47:1a:36:d2:c3:2e:b4:e4:51:25:4d:99:62:b4:
f0:5d:3c:e2:e0:a4:8e:e7:85:fa:1b:8e:1c:73:88:
ef:86:79:8c:69:97:1f:75:e9:dd:3e:b5:2f:81:3c:
cb:37:27:33:8c:24:63:c3:4e:2f:41:36:eb:5c:ca:
a6:ed:fb:d1:5f:b3:1d:7f:1f:7b:a7:e8:80:09:cd:
0c:65:81:f5:8e:5b:77:7a:e6:a4:06:0e:3c:c1:70:
c6:8a:bb:39:db:c9:49:b7:87:94:6c:9e:b8:5c:dc:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:54:BC:EB:E3:C1:44:70:9A:89:E4:63:D8:B6:97:5D:AA:96:93:FF
X509v3 Authority Key Identifier:
keyid:6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/62C1F5587ACD11E9AC0A867BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.162.0/23
Signature Algorithm: sha256WithRSAEncryption
87:95:25:44:87:a5:fd:a9:f9:31:20:07:28:9c:56:1e:1e:ac:
de:27:81:5e:a8:c9:dd:67:55:85:58:f2:1c:3c:c2:80:87:18:
e5:24:20:7a:f1:e1:b2:42:c6:64:a9:74:87:cf:70:69:b0:c2:
fa:eb:40:3d:e2:70:cc:af:80:c1:e5:9a:e8:1e:1c:b7:74:da:
a8:05:30:32:a8:c4:df:45:e3:eb:8d:ad:e3:a5:04:e0:b2:90:
75:dd:a2:29:a0:e2:20:5f:71:e9:84:30:39:c2:32:f4:97:33:
c4:1e:62:7e:40:26:8e:d7:f7:10:7c:fb:3f:76:55:33:c0:6c:
6c:1f:2b:72:4f:12:1b:0f:7b:38:c3:a0:4b:aa:3f:de:a4:fb:
9c:6b:f3:56:c3:6d:5f:f3:96:d4:8f:d5:7c:84:ef:29:69:23:
15:e6:49:12:b1:08:30:d6:63:d3:5a:a4:3d:71:88:e8:cb:4b:
29:0a:28:0d:f3:24:f4:dc:b8:8f:b8:fa:23:7c:45:e6:b3:68:
04:cf:1d:81:a9:d3:95:7a:25:2b:8e:3b:3e:9b:3d:1e:ed:4d:
b3:e9:b4:eb:61:15:d7:78:6c:cd:da:2b:1c:77:17:b6:43:4d:
f3:6c:ee:fb:e2:ab:b5:29:8e:2c:d3:72:bc:eb:44:e3:8a:7e:
a1:26:f8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:53 2025 by rpki-client