
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa
File: 1042D952157F11F0BA309342C4F9AE02.roa (raw, json)
Hash identifier: 9D2leAHQTTe0D0yRNnuNqQquZYtL0KUcupehuXV27S8=
Subject key identifier: C1:5E:22:1B:F1:B3:8F:FD:1B:5E:B9:2A:0A:E6:51:EA:D5:86:30:50
Certificate issuer: /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial: 01A2
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa
Signing time: Mon 03 Nov 2025 03:47:41 +0000
ROA not before: Mon 03 Nov 2025 03:47:41 +0000
ROA not after: Sun 01 Mar 2026 00:00:00 +0000
asID: 134222
IP address blocks: 103.255.66.0/24 maxlen: 24
103.255.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Validity
Not Before: Nov 3 03:47:41 2025 GMT
Not After : Mar 1 00:00:00 2026 GMT
Subject: CN=690825dc-1b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:3e:84:d8:bd:24:43:d2:8a:3d:99:88:90:
58:8f:93:04:7e:49:55:b1:8e:35:93:1e:cf:ed:2f:
12:32:46:17:d1:ea:cd:80:07:e3:2f:53:69:13:c7:
63:82:7f:8b:d0:11:0b:cc:96:ac:e1:8f:cf:38:d0:
6a:8b:89:18:b1:69:62:aa:f4:61:37:70:80:c2:b8:
06:df:4d:18:20:42:45:e8:e6:0d:a0:4d:e5:f9:b0:
dc:24:d1:be:af:50:6c:80:16:00:52:0d:7b:25:82:
97:0a:d4:3d:09:31:08:75:50:c2:95:d0:1b:15:2f:
95:0c:22:23:96:58:44:24:1b:c8:5a:98:57:ad:96:
c0:fa:e2:fd:32:4b:65:c3:a9:3f:05:f2:ee:c6:09:
eb:90:2f:3f:a9:87:4b:cf:2d:86:ff:5d:c7:97:bd:
56:27:97:fd:55:48:9e:77:f2:e0:0e:03:8c:a5:c3:
ab:a8:e5:0d:dc:62:09:46:d8:9d:c6:17:83:0f:df:
45:d8:b5:44:f0:8b:55:28:bc:d3:98:28:1a:ad:0d:
dd:6b:b0:87:8c:19:1f:f3:8a:b0:0a:d5:c6:ee:e5:
bf:73:2d:eb:da:ad:e1:26:99:21:0f:2e:2e:45:97:
9f:5a:b6:37:1f:df:e6:d1:46:a4:54:9d:ca:a0:4a:
31:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5E:22:1B:F1:B3:8F:FD:1B:5E:B9:2A:0A:E6:51:EA:D5:86:30:50
X509v3 Authority Key Identifier:
keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.66.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:e5:0b:5b:01:8a:60:d3:75:c1:5e:64:b8:31:e7:88:59:85:
a9:da:ab:99:19:6d:4d:9d:cf:2c:92:1f:16:d4:e0:8c:4b:05:
f4:7c:55:22:59:f8:69:83:f3:2c:33:31:1d:c3:15:35:c4:ba:
89:1b:37:6a:ac:a6:04:c2:cf:0f:28:96:42:46:a8:cb:50:92:
e7:74:f8:24:2e:bd:4a:b7:d3:2c:2c:05:4d:cf:69:9b:d9:91:
e9:57:f5:9c:fb:e6:5c:3b:09:1c:8a:55:ff:f8:4b:e5:d2:d4:
1c:d7:ce:10:07:78:c3:13:e4:93:a1:24:fb:9e:14:2e:07:15:
c8:86:f1:db:2b:16:1b:5a:e0:1e:79:5c:0b:d7:ba:da:cf:27:
5a:e3:2d:b5:a4:29:5d:6d:1e:53:c9:9d:ce:50:d8:1b:3a:c7:
63:98:53:79:20:dc:e2:45:0d:3b:b1:ec:5e:60:1e:a7:2c:98:
50:0d:da:9c:2e:ba:7d:8f:45:8a:0d:fe:c1:0b:49:3c:be:2f:
a1:46:f5:5c:9d:bf:16:f3:09:31:97:52:c1:f4:dd:52:55:79:
93:ca:8d:89:76:af:f6:93:28:44:29:d1:de:c7:e1:ff:a3:64:
f6:f9:82:b6:11:07:17:82:a5:96:7a:62:e9:a7:57:6a:5d:08:
43:d3:b5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:02 2025 by rpki-client