
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/3CE2E40A5FC211F1849ECF386D47A888.roa
File: 3CE2E40A5FC211F1849ECF386D47A888.roa (raw, json)
Hash identifier: nbId6gLpJ7OSPNk36xsFAAXSXy7yUVygVp8wxMLNziA=
Subject key identifier: 9D:AC:96:AE:FD:3F:43:F5:95:B6:93:BE:76:E5:86:2F:FB:C2:AA:97
Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Certificate serial: 015C
Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/3CE2E40A5FC211F1849ECF386D47A888.roa
Signing time: Thu 04 Jun 2026 03:05:27 +0000
ROA not before: Thu 04 Jun 2026 03:05:27 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 8796
IP address blocks: 103.135.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 05:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Validity
Not Before: Jun 4 03:05:27 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a20eb77-e54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:4f:9a:af:76:fa:52:c1:92:52:9f:f2:04:
81:07:5d:3f:a6:08:98:92:3f:7b:e3:48:bc:ca:13:
91:07:2c:ed:6b:a9:54:a5:82:ba:bb:22:cb:0d:af:
2b:34:8d:11:b2:61:27:a1:f9:b5:64:1e:57:af:d5:
a8:94:f1:05:28:cc:87:4a:bf:50:c1:ea:f2:2f:42:
9d:61:53:22:4b:9d:5b:75:93:08:48:11:c5:51:ad:
b8:0e:ac:2b:29:fa:1b:72:3c:36:b7:04:78:ee:7b:
be:f5:fd:20:f6:4d:db:20:33:b2:b4:bf:be:51:29:
86:e8:91:cb:6b:be:e9:58:20:af:66:bb:b4:5a:8a:
64:60:bd:f7:bc:0f:5b:56:fa:3c:5b:44:ba:f5:fd:
56:08:62:d3:a9:56:26:0d:6e:86:b2:35:cc:eb:87:
5f:30:48:a4:3e:5e:8e:e8:c0:25:71:3d:87:b2:f3:
0b:8c:e8:6d:d4:4f:32:f2:04:c3:d6:06:bb:ba:e9:
ed:05:36:1f:cf:1a:3f:0b:6a:92:ff:f7:ef:2d:41:
82:1e:9b:f5:d8:49:fa:b1:dd:c1:06:8b:30:a6:27:
1d:2e:fe:0f:48:eb:e3:fb:62:45:d3:27:56:73:3d:
af:ec:60:d3:0e:79:8c:b7:64:b6:d7:09:f8:c1:93:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AC:96:AE:FD:3F:43:F5:95:B6:93:BE:76:E5:86:2F:FB:C2:AA:97
X509v3 Authority Key Identifier:
keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/3CE2E40A5FC211F1849ECF386D47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.112.0/22
Signature Algorithm: sha256WithRSAEncryption
68:73:81:e7:26:02:10:25:3b:e1:27:bb:1e:db:f7:a6:00:1d:
aa:2d:b6:6b:23:76:93:40:6d:8e:f5:d4:23:5e:40:3c:82:ea:
8d:1d:0b:9b:3a:bb:25:01:81:df:11:f9:99:6b:e1:7b:7e:10:
c6:97:d2:84:1a:40:dc:60:51:2b:a3:a5:47:9f:ce:a0:85:3d:
35:78:70:78:f7:ee:38:34:76:09:f7:cf:a4:4c:cf:7a:b9:29:
7f:77:84:31:45:31:48:2b:84:66:1c:92:88:83:b2:ea:cb:43:
c9:82:b1:51:d2:b8:36:40:53:e7:79:f3:f1:1e:42:7f:0d:02:
a8:21:6c:52:b0:94:c4:a8:ba:85:20:96:85:39:54:e0:d8:42:
b0:96:10:8d:56:61:2f:ac:ce:15:54:94:1c:aa:90:1d:48:1a:
a9:5e:12:c4:f0:41:30:5d:59:6b:9c:54:9e:8d:30:76:a4:80:
29:51:88:de:19:2e:ab:ce:f2:cf:f4:5c:4c:24:84:8d:11:af:
41:ed:0b:cc:4a:75:a3:a7:94:df:01:4c:35:9d:b4:b4:9b:16:
5d:60:e2:69:81:f1:1d:98:c8:ac:b4:ce:98:a0:cc:1d:db:02:
5d:94:37:26:67:d7:36:4c:6a:63:9f:84:91:07:57:6d:2b:b9:
2d:e1:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:29 2026 by rpki-client