
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/E7A90E38824011F0B9DA0749C4F9AE02.roa
File: E7A90E38824011F0B9DA0749C4F9AE02.roa (raw, json)
Hash identifier: QOE6RaPByip2qWXTpgbOiN0duUqz1Bsz81bUndnwZ7Y=
Subject key identifier: EC:F5:1D:8A:1F:53:87:27:43:0D:87:33:3F:83:15:95:2F:0D:67:A3
Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1
Certificate serial: 64
Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/E7A90E38824011F0B9DA0749C4F9AE02.roa
Signing time: Tue 26 Aug 2025 05:52:52 +0000
ROA not before: Tue 26 Aug 2025 05:52:52 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 8075
IP address blocks: 103.254.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl
rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1
Validity
Not Before: Aug 26 05:52:52 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=68ad4bb4-df0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cb:af:0a:1a:d4:66:ba:5a:89:07:a5:5c:23:
65:3d:7b:b7:40:11:06:f4:47:40:e6:69:81:64:23:
eb:fe:4e:0f:0e:b5:d6:66:cf:5e:72:d5:20:4f:96:
ef:89:b8:82:dc:3e:e1:15:14:ea:ba:97:2e:e2:e7:
30:cc:0d:72:ce:54:27:21:47:ed:bf:d0:52:97:d8:
94:2c:d0:fb:02:e3:01:86:d6:50:f8:26:d8:25:14:
ae:5e:9e:f8:56:cb:87:47:c9:ef:7f:24:5d:b5:39:
03:5e:4a:8f:26:ae:e9:ba:eb:08:eb:40:58:d9:5f:
23:fc:99:7a:7b:44:22:b1:ad:bc:86:82:f5:d7:3b:
eb:50:e3:c6:bb:bd:4b:7e:38:08:6e:99:25:23:45:
a5:da:68:a7:25:85:ba:db:d3:1f:40:9b:95:25:53:
a0:17:32:9b:53:fd:16:0a:ac:12:01:ad:e5:a1:17:
74:fb:aa:32:0d:84:7e:c7:65:44:d0:b7:75:15:31:
a6:98:16:6f:9e:ca:55:ed:7e:67:c6:49:6e:96:a0:
ce:7e:6b:71:f2:b2:83:e7:00:80:22:1a:37:97:59:
87:71:ac:89:39:0e:c6:7b:a4:f7:62:37:27:78:c5:
da:22:a7:b3:83:41:c4:68:7f:ab:d7:17:90:6c:56:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F5:1D:8A:1F:53:87:27:43:0D:87:33:3F:83:15:95:2F:0D:67:A3
X509v3 Authority Key Identifier:
keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/E7A90E38824011F0B9DA0749C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.7.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9a:12:d4:f6:61:ec:ae:d1:47:c0:6e:4c:a6:cc:5a:e9:0b:
3a:05:ed:6b:72:4b:a0:b1:4b:34:9e:b2:21:fd:90:21:68:b4:
f9:6d:31:d8:6b:72:08:ea:84:04:e7:21:a2:7e:72:79:b4:d9:
5b:ec:5c:c8:2c:fa:72:32:de:05:aa:9d:a5:9c:b8:01:42:3c:
d5:29:d4:fb:85:d7:8c:bc:d7:0a:ab:af:8c:7a:9b:ef:1f:72:
20:9e:f3:e1:b3:87:15:05:f3:ab:51:53:21:c4:75:c8:5c:33:
1c:5e:0d:e4:b4:d1:87:c2:c8:a8:79:10:8c:54:eb:0e:fa:ae:
f0:5c:30:c1:e4:34:7c:2e:a8:f2:15:bd:29:b4:0e:88:5c:45:
17:4b:52:48:81:ab:89:0f:38:ca:1e:e3:2f:8e:64:00:8a:4b:
f4:e0:9d:74:bb:e0:f1:06:72:34:37:79:2c:2b:b5:9c:0a:38:
5e:11:be:bc:7e:d4:0e:1a:35:fa:30:37:24:78:52:1e:14:cb:
5d:a5:b5:c3:05:63:fb:4d:9b:ba:0b:cc:d7:ba:36:e2:6c:a2:
74:ab:2a:05:2f:df:26:a0:93:5d:ac:ab:0d:5b:66:3d:06:10:
7a:04:5e:01:81:07:a8:15:4c:9e:38:d7:ef:43:30:a6:df:47:
c5:86:13:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:30 2025 by rpki-client