
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa
File: 507C31C21D7211EFA095B25AC4F9AE02.roa (raw, json)
Hash identifier: c1LdcyfxBkh65MfHEWuLe4Y+neliIailfDFE8qX4bKs=
Subject key identifier: 7E:9D:BF:9C:58:DC:05:70:10:62:2C:A9:B2:F9:8B:CB:C8:96:A8:8A
Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Certificate serial: BE
Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa
Signing time: Fri 09 May 2025 05:17:06 +0000
ROA not before: Fri 09 May 2025 05:17:06 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 17559
IP address blocks: 203.14.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Validity
Not Before: May 9 05:17:06 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=681d8fd1-e4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:48:08:94:ac:8f:18:f3:94:5e:5a:80:91:
9b:e8:c9:7b:2f:96:b2:9d:e1:ab:e3:82:e2:cb:db:
b3:dd:51:07:48:a0:a0:51:5a:29:3b:f6:84:99:43:
06:07:a4:1b:2a:a7:d1:e4:a3:64:62:b1:6a:0f:6f:
d5:c6:07:ef:7d:d5:d7:ee:7c:d6:fa:ca:ef:61:e7:
eb:54:c9:8a:6b:37:cb:e1:a3:34:f0:11:b7:92:f3:
1a:0e:b6:81:22:4f:22:3f:d4:a9:f5:6f:14:05:22:
2b:63:f8:43:93:55:c6:ce:24:26:c6:fd:5d:d8:3f:
c1:89:6d:b4:a5:ae:c1:4c:fb:e9:91:63:3f:83:a6:
bd:1e:30:12:03:37:cc:ad:7d:1c:91:eb:43:0a:e0:
cd:15:40:ed:77:9c:88:c4:05:1d:88:ea:f4:b9:47:
b2:5e:f2:d6:10:d4:08:83:35:7b:ce:90:ac:46:48:
ed:0d:5e:2a:43:ff:ac:08:17:ae:00:9c:49:b7:41:
b2:35:92:80:62:97:27:21:f9:46:40:75:23:ed:39:
e8:73:66:02:ce:a7:82:e9:43:4b:76:c6:53:0c:75:
5d:c0:74:78:62:90:a0:37:a6:d1:27:2c:ba:7c:37:
5b:87:0a:dd:e3:cc:8b:8c:25:21:21:fd:35:95:3a:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9D:BF:9C:58:DC:05:70:10:62:2C:A9:B2:F9:8B:CB:C8:96:A8:8A
X509v3 Authority Key Identifier:
keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.14.108.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:f3:77:30:43:f4:4e:45:fd:5c:60:03:4a:43:81:0f:ba:81:
fd:6e:78:59:c8:4c:ee:d3:12:f0:ff:c2:06:a9:12:2b:b2:e3:
ae:36:29:a4:1e:2b:96:ff:c9:e4:b3:71:66:5c:42:91:82:cf:
d9:82:50:82:69:c5:72:91:b3:84:46:b8:05:a0:2d:44:f6:fb:
f7:a8:82:06:5b:a1:f5:6e:31:9e:c2:60:4d:bc:09:e4:ed:34:
e6:14:a3:fa:7d:b8:1a:7f:a0:ee:1b:db:c8:23:76:49:91:a4:
05:07:a3:5a:07:25:f6:b1:a8:33:2c:29:1b:3a:51:87:61:63:
4f:32:35:8e:fa:92:22:5b:0e:74:9b:bf:84:1b:7a:af:af:a2:
41:4c:8f:d8:93:f7:6e:30:e2:25:82:7a:5e:a4:92:e8:7a:6c:
ff:3a:bf:f8:a2:cc:c0:dd:7f:8c:d5:c0:61:cd:4b:36:c8:d6:
91:e9:a1:92:10:56:10:c9:e7:b5:64:af:78:6e:56:f4:0c:a7:
21:b5:3b:c5:8e:45:22:4e:e1:d4:68:50:12:7d:52:90:e1:8e:
40:b0:44:41:fe:c4:41:12:7b:2a:c1:43:b9:ff:e8:58:39:49:
12:ed:90:06:11:e6:5d:00:e5:67:0f:a7:37:c9:10:99:44:ef:
69:59:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:17 2025 by rpki-client