
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/036D9582D09611F0AF11A347C4F9AE02.roa
File: 036D9582D09611F0AF11A347C4F9AE02.roa (raw, json)
Hash identifier: EU63Rpu1A2RahZbyGq4yx5lKbh4lqDGQlOsxErEVF1U=
Subject key identifier: 72:89:D1:58:AB:00:D0:B5:A6:31:1E:10:EC:9F:2D:E7:F1:83:74:EF
Certificate issuer: /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
Certificate serial: 0946
Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/036D9582D09611F0AF11A347C4F9AE02.roa
Signing time: Sun 16 Aug 2026 20:41:13 +0000
ROA not before: Sun 16 Aug 2026 20:41:13 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 14593
IP address blocks: 14.1.64.0/19 maxlen: 24
103.152.126.0/23 maxlen: 24
103.235.92.0/22 maxlen: 24
116.91.208.0/20 maxlen: 24
150.228.128.0/17 maxlen: 24
2406:2d40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl
rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2374 (0x946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
Validity
Not Before: Aug 16 20:41:13 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a822069-25c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:d7:dd:9d:dd:63:1d:59:00:a2:18:e6:06:
15:15:fb:64:d2:ab:9c:55:48:47:79:24:1d:c6:b5:
8a:f1:a6:2a:dc:92:a9:38:3a:d4:3c:36:e8:0e:45:
4e:af:69:c4:fb:72:b4:ce:bc:bf:5f:b9:99:2f:ce:
b7:ef:9c:24:8a:36:c2:63:ca:df:de:34:03:ab:31:
4e:69:98:7a:17:82:4f:97:e2:15:e4:15:4f:a4:58:
70:70:56:4e:65:d2:b3:03:d3:39:71:a4:a9:92:c3:
78:ba:33:74:44:dd:3e:cb:0f:56:6f:e3:cc:7f:37:
fc:cf:83:18:7a:b8:7d:71:d9:5a:85:21:27:88:a0:
30:dc:f7:62:7a:79:ba:38:44:ab:cf:2f:88:f2:a4:
2b:ea:de:08:fb:d0:bf:f7:44:af:db:3a:b5:44:b3:
ea:ce:32:e9:95:7b:b8:93:cb:89:b2:b0:d0:7b:bc:
62:1b:cd:3c:e3:14:90:39:35:16:95:2c:3b:4e:c7:
68:46:ed:25:b1:d4:39:d1:c9:91:c6:66:27:cd:21:
e3:a7:67:00:ab:8e:17:33:e3:d4:01:0f:48:9c:9b:
02:4c:6b:df:6b:41:ee:ca:e2:25:9f:7d:48:c8:94:
e8:e6:7f:a4:d6:31:c5:9d:d7:cf:6f:2d:81:51:a0:
26:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:89:D1:58:AB:00:D0:B5:A6:31:1E:10:EC:9F:2D:E7:F1:83:74:EF
X509v3 Authority Key Identifier:
keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/036D9582D09611F0AF11A347C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.1.64.0/19
103.152.126.0/23
103.235.92.0/22
116.91.208.0/20
150.228.128.0/17
IPv6:
2406:2d40::/32
Signature Algorithm: sha256WithRSAEncryption
d7:ce:d5:13:17:ea:23:5b:6e:d5:8f:e5:a6:fe:41:23:81:37:
df:46:08:9f:8c:fd:f3:2c:2c:3f:9c:5c:5a:67:05:71:d2:cf:
bc:d9:a7:86:84:be:2d:16:c6:9e:47:38:0e:cd:8a:58:ae:21:
49:9c:57:2d:1b:f7:40:73:fe:08:e4:b4:3b:1b:bf:09:1b:52:
0e:b4:8b:0b:f7:0c:8b:a9:ea:81:38:1a:8f:c6:50:ff:ee:ea:
55:80:83:f3:63:d9:a6:69:25:d0:59:98:57:f3:77:be:a2:0f:
05:d8:24:e9:38:a3:52:1d:54:64:ad:64:d3:9d:ec:9b:f8:8a:
3d:08:af:72:e3:64:64:88:16:bf:0b:f2:b6:19:e0:49:e2:22:
98:e9:ac:91:67:c0:81:d3:87:23:53:d4:52:12:22:26:0d:d0:
0f:a5:94:6e:54:64:64:c3:c4:e6:4c:06:5d:dd:9a:eb:6e:54:
da:b8:5e:24:02:31:92:fd:b0:0a:b7:96:48:ed:63:fc:ee:b0:
fc:0a:e7:75:91:1a:ff:89:2f:14:eb:31:51:60:3f:8a:fe:f3:
a5:ec:e6:cc:ad:45:d4:cb:a7:a8:31:82:57:e6:0f:86:2d:2f:
7c:dd:89:30:9e:ea:5f:e8:28:a3:eb:91:e6:80:f2:aa:96:22:
97:d4:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:10:40 2026 by rpki-client