
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/97B4F5603B3D11ED822BB46CC4F9AE02.roa
File: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (raw, json)
Hash identifier: qWq9FBfV0TlO+Nnhl0xmqfZ2SJgk0It8nQYA3EDnxXs=
Subject key identifier: E4:6F:62:E3:6D:46:C2:2F:E5:FA:52:3A:75:A6:BC:02:38:5D:82:D9
Certificate issuer: /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Certificate serial: 02A0
Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/97B4F5603B3D11ED822BB46CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:08:37 +0000
ROA not before: Fri 31 Oct 2025 01:45:43 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150312
IP address blocks: 103.52.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Validity
Not Before: Oct 31 01:45:43 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a42c45-1ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:a8:6d:67:4c:70:59:c8:13:05:29:b4:f2:
ef:ab:39:80:36:38:d3:8f:d9:01:5f:ac:29:65:49:
02:7a:50:67:6c:21:68:27:1f:d8:9b:31:e6:ec:5f:
74:71:af:57:09:c4:a5:1f:db:0f:12:71:d0:12:c1:
88:a3:18:fa:d1:7c:8f:81:93:22:7a:b7:e7:34:f2:
e4:2f:fc:02:17:9f:61:c3:41:24:6e:91:e1:09:bc:
14:f2:47:63:56:da:bf:62:72:12:4d:b8:b4:e5:f8:
53:99:37:7f:d9:17:01:10:5e:f0:a1:30:d4:15:20:
fc:9a:34:ec:1b:b1:5f:a8:96:37:c0:38:c8:4f:69:
88:a7:ce:f1:f5:1a:64:45:a7:8b:7f:0f:4d:84:2b:
57:8e:77:5d:d5:73:f4:ce:23:c7:b0:af:e5:17:7d:
ba:37:51:3b:9f:66:32:9f:d6:14:83:1e:ee:d1:a6:
d6:19:0e:d6:72:17:3a:a6:61:12:e9:11:af:02:05:
ba:1c:d6:ac:c8:b5:20:9a:11:9f:47:fa:6a:05:2e:
cf:0b:56:30:15:56:e1:e3:c0:10:a5:2c:ae:8d:e8:
8e:7d:f1:e2:ec:e0:7f:1e:ec:70:40:0d:17:a0:7e:
f0:43:64:0e:36:aa:d6:6b:5a:20:10:ab:7a:ce:1f:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6F:62:E3:6D:46:C2:2F:E5:FA:52:3A:75:A6:BC:02:38:5D:82:D9
X509v3 Authority Key Identifier:
keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/97B4F5603B3D11ED822BB46CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.52.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c4:d4:6d:e0:09:0b:ef:28:26:34:49:7c:f5:4c:06:72:ca:
7c:0d:01:4d:a0:19:66:98:cd:b2:9c:5e:4a:d0:82:32:6e:76:
45:a6:cd:06:d8:b0:41:5e:28:36:39:9c:5d:8c:34:00:01:cb:
51:89:6c:5c:32:d9:d7:9a:e9:48:50:e2:92:1a:47:6a:23:38:
21:a1:69:18:ca:4a:b0:65:a7:8f:65:00:90:25:9f:ff:e2:68:
c8:07:39:44:3a:da:2d:74:f2:0d:86:ae:3d:09:ed:4a:98:ce:
95:9e:9b:8e:89:b4:6e:ee:d3:76:b2:92:d3:94:45:3c:b9:20:
f1:7d:38:08:4c:9b:73:dd:60:1e:0c:3a:0b:7e:c3:81:bf:24:
17:a1:48:85:07:af:22:61:63:c3:85:ce:87:43:a3:44:c9:3b:
f8:30:31:eb:ad:04:30:89:28:28:f6:9a:3f:a9:a9:e9:cc:cf:
7c:a7:a7:5c:27:74:9f:7c:a9:bf:c9:1c:7d:36:a9:87:0b:de:
d9:2d:6b:a0:9f:70:59:af:38:0f:d6:23:43:2f:a8:81:c5:23:
78:f6:7f:18:0c:da:d1:4a:0a:16:1e:9a:fc:0d:77:d2:aa:fb:
48:61:b5:10:b9:05:ea:eb:a9:d3:37:4c:6c:2f:58:7b:5b:5c:
f1:23:c2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:40 2026 by rpki-client