
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/37B8851C654F11EFACFE1271C4F9AE02.roa
File: 37B8851C654F11EFACFE1271C4F9AE02.roa (raw, json)
Hash identifier: wayRHVfCcnsQMomCXPU3AkefTR+2f7Pp3tiL/nQuFjw=
Subject key identifier: E8:67:4F:DD:DE:D8:4A:B5:43:48:54:F7:41:D5:62:1C:B5:0F:24:8A
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29F7
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/37B8851C654F11EFACFE1271C4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:24:50 +0000
ROA not before: Sun 30 Aug 2026 16:24:50 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 14315
IP address blocks: 103.196.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10743 (0x29f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:24:50 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a945952-fc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:0e:b6:2f:09:ec:38:24:3b:fd:98:a6:10:
ac:7c:ef:c0:c2:24:b9:81:32:d7:9b:cc:a9:52:d5:
17:a1:05:27:b5:a1:11:03:4b:e1:54:11:bd:8f:91:
e3:f0:2d:4e:01:8a:2f:c3:d5:e9:dd:24:cd:fe:28:
40:3e:4e:b5:66:97:ff:fa:0e:52:ca:e9:52:9c:fc:
06:98:a4:5d:1b:2d:b7:b7:a7:43:fa:34:77:9f:af:
71:fd:ce:34:08:89:43:df:2a:b5:fe:7d:21:b6:fb:
b5:47:e3:94:43:04:07:07:a6:14:7b:84:0d:b6:ba:
c3:20:79:ad:15:b8:11:54:2c:94:f6:05:b9:b9:99:
f9:c3:9d:51:be:1f:fb:8f:5d:e9:58:a0:76:44:2e:
9e:16:4e:51:0c:5f:ed:81:c9:f4:c8:de:28:5a:f2:
00:69:68:26:23:2e:cb:31:01:52:be:a1:2b:34:1b:
c1:bb:f2:b0:18:fc:a0:dd:d7:ea:e9:03:15:68:cb:
63:05:24:65:da:23:e2:34:0d:12:ba:b6:f0:b0:18:
98:92:c4:63:4f:0e:d9:13:85:ee:bb:05:d5:85:c9:
d4:cf:e7:f7:7f:e1:9d:33:ad:96:38:69:ec:a7:18:
95:c5:5b:09:20:a6:94:5c:d0:04:37:27:80:04:51:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:67:4F:DD:DE:D8:4A:B5:43:48:54:F7:41:D5:62:1C:B5:0F:24:8A
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/37B8851C654F11EFACFE1271C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.196.20.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f3:2e:43:1e:ba:01:73:af:f9:e1:16:d1:ea:a0:7d:7a:46:
ee:27:73:84:6a:03:4e:1c:bf:da:a0:cf:a3:da:21:de:49:26:
c6:88:78:b7:c0:b3:37:c1:30:6a:85:47:a2:87:43:2f:ac:80:
56:d0:19:d8:ca:91:c7:1b:b4:26:1b:b2:d4:23:2b:2b:19:6b:
a0:6e:b7:c3:df:62:68:a0:87:86:c4:82:18:6f:f8:72:49:b7:
89:67:1a:04:47:75:2d:79:49:a3:1a:78:bd:50:c4:4c:99:ba:
4e:68:b7:31:43:28:db:d6:29:f9:1b:6e:52:99:55:b1:ad:ff:
e8:74:da:10:d9:0a:13:8f:51:1c:6c:d6:82:3e:60:41:37:e8:
f5:7a:c5:2c:a2:45:23:bd:b8:38:52:27:42:f6:12:5a:24:a0:
dd:2d:66:8b:21:e5:b4:02:b3:b4:c4:4b:e2:57:03:92:09:62:
0c:75:1f:1f:e3:9e:8d:98:40:a0:ca:c6:2f:cc:10:be:0b:17:
81:7e:37:e9:97:c3:4d:76:22:09:fe:8e:48:89:b3:e4:f3:9b:
78:3b:fb:d9:67:75:bd:ac:95:0c:b3:4a:d3:1d:60:65:31:29:
a3:0c:cd:86:46:c5:e6:d7:88:36:7d:47:1f:fc:ef:b3:ea:0f:
f5:0d:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:18:20 2026 by rpki-client