
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/0361CF86560211EB97A98D46C4F9AE02.roa
File: 0361CF86560211EB97A98D46C4F9AE02.roa (raw, json)
Hash identifier: GMJZeEpsDtNeV9crV1/EbJHhDeurBSSuwnnelfqM6TA=
Subject key identifier: 88:48:FF:9A:D3:E7:57:4D:C6:7A:8B:5E:89:4D:5C:75:B0:E5:48:AD
Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
Certificate serial: 07BA
Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/0361CF86560211EB97A98D46C4F9AE02.roa
Signing time: Sun 02 Aug 2026 22:42:22 +0000
ROA not before: Sun 02 Aug 2026 22:42:22 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 131230
IP address blocks: 103.68.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl
rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 21:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1978 (0x7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
Validity
Not Before: Aug 2 22:42:22 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6fc7ce-7c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:4c:d6:f7:30:1d:5d:ff:88:c3:f7:f9:d3:
c8:5e:48:99:25:62:74:3e:80:8c:f6:e1:af:be:5f:
26:12:14:14:6a:08:e4:b9:e2:51:3f:38:61:97:2d:
cc:14:1a:37:10:9b:d7:ed:51:55:f4:1c:b1:27:09:
b4:a6:1b:d6:fd:58:5d:e2:fa:be:5a:84:48:a8:20:
73:02:3c:c0:bb:17:a4:c5:a5:f5:83:0d:74:65:8b:
3a:cc:9b:82:1c:e7:18:05:05:2c:a5:66:7d:52:f6:
f5:ff:92:bf:26:6b:34:40:f6:41:f8:07:8f:bf:f3:
31:ea:eb:be:24:71:38:76:fe:5c:68:54:ae:06:4d:
ae:31:fe:72:c0:a7:c6:0f:1b:1b:10:b5:ca:46:93:
82:67:05:bb:4d:cc:43:e5:f9:ed:fb:19:4b:5e:0d:
c7:51:1d:08:bb:39:54:5f:bb:84:98:e3:c1:64:78:
ff:63:a6:ef:80:d1:9c:1a:2f:59:04:79:31:1c:0a:
05:e6:97:34:96:67:c1:14:4c:a5:3b:cf:68:42:84:
84:9a:52:34:91:f5:06:f0:1a:75:f1:c7:af:c4:ce:
f0:5c:10:8f:50:23:ed:36:3d:eb:3c:94:18:96:fd:
8a:a1:f1:76:ad:2d:aa:f5:84:43:43:32:ac:d7:5e:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:48:FF:9A:D3:E7:57:4D:C6:7A:8B:5E:89:4D:5C:75:B0:E5:48:AD
X509v3 Authority Key Identifier:
keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/0361CF86560211EB97A98D46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.124.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ca:73:b1:bb:c8:1c:05:8b:82:03:e3:2f:9b:f7:35:6d:87:
88:21:ac:ae:a4:0d:b7:26:78:23:5b:2f:32:47:2b:64:be:31:
17:63:77:d3:ca:f9:2a:2f:19:a9:42:91:bf:77:ab:13:94:19:
0c:aa:e3:8b:5a:f2:7b:a2:61:5c:e4:30:ee:b8:d1:bf:cf:dc:
8f:1b:7c:a1:f4:71:b8:81:fe:93:c4:4f:e0:05:c3:64:fb:4d:
ab:0c:6e:53:46:e7:29:8a:4f:6c:9d:2f:75:e0:a4:f1:d8:6d:
af:03:a0:11:b6:3d:c8:2b:51:44:ba:4a:2e:b1:59:98:e4:3a:
fb:8c:d6:09:78:ee:d9:d6:76:7d:a6:d0:5b:60:c8:23:f6:1c:
70:93:2d:49:f6:fa:bd:cf:77:2f:49:b9:2e:6e:06:77:05:5b:
93:11:02:f1:eb:cc:73:29:cc:f2:46:6b:bb:3f:e2:89:8e:1b:
48:8c:47:83:7e:d4:b9:31:39:0f:0d:33:84:07:33:00:75:ab:
41:90:4f:37:63:ce:db:cb:90:72:d5:84:6a:dd:d7:3b:19:e1:
3f:a4:ba:65:b9:be:44:a9:0c:ba:d4:cb:8e:35:6c:0c:c1:55:
f8:3f:ed:c1:db:f4:61:60:24:3a:fb:77:7b:e8:c5:d1:50:d7:
39:d6:cc:c3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0
QTUyOUQwOUEwHhcNMjYwODAyMjI0MjIyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZmYzdjZS03YzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1IRM1vcwHV3/iMP3+dPIXkiZJWJ0PoCM9uGvvl8mEhQUagjkueJRPzhhly3M
FBo3EJvX7VFV9ByxJwm0phvW/Vhd4vq+WoRIqCBzAjzAuxekxaX1gw10ZYs6zJuC
HOcYBQUspWZ9Uvb1/5K/Jms0QPZB+AePv/Mx6uu+JHE4dv5caFSuBk2uMf5ywKfG
DxsbELXKRpOCZwW7TcxD5fnt+xlLXg3HUR0IuzlUX7uEmOPBZHj/Y6bvgNGcGi9Z
BHkxHAoF5pc0lmfBFEylO89oQoSEmlI0kfUG8Bp18cevxM7wXBCPUCPtNj3rPJQY
lv2KofF2rS2q9YRDQzKs117w5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIhI/5rT
51dNxnqLXolNXHWw5UitMB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1
RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDExQzAvQjk2MDM3NTg1NUZGMTFFQkJDMzZDODQzQzRGOUFFMDIvMDM2MUNGODY1
NjAyMTFFQjk3QTk4RDQ2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0R8MA0GCSqGSIb3DQEBCwUAA4IBAQAYynOxu8gcBYuCA+Mvm/c1
bYeIIayupA23JngjWy8yRytkvjEXY3fTyvkqLxmpQpG/d6sTlBkMquOLWvJ7omFc
5DDuuNG/z9yPG3yh9HG4gf6TxE/gBcNk+02rDG5TRucpik9snS914KTx2G2vA6AR
tj3IK1FEukousVmY5Dr7jNYJeO7Z1nZ9ptBbYMgj9hxwky1J9vq9z3cvSbkubgZ3
BVuTEQLx68xzKczyRmu7P+KJjhtIjEeDftS5MTkPDTOEBzMAdatBkE83Y87by5By
1YRq3dc7GeE/pLplub5EqQy61MuONWwMwVX4P+3B2/RhYCQ6+3d76MXRUNc51szD
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:37:50 2026 by rpki-client