
$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/CC4D97CAE8A811F0B40EB576576F56BC.roa
File: CC4D97CAE8A811F0B40EB576576F56BC.roa (raw, json)
Hash identifier: D5fKc+44BFNosYF9mliDVf4cmNZpEtwAIPTStvxfd+8=
Subject key identifier: FC:7F:D7:5B:E5:34:E5:D2:2F:E8:8C:18:29:3C:7F:1F:CC:F8:3F:7A
Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072
Certificate serial: 0C88
Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/CC4D97CAE8A811F0B40EB576576F56BC.roa
Signing time: Sun 01 Mar 2026 16:44:25 +0000
ROA not before: Sat 03 Jan 2026 13:33:33 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 151786
IP address blocks: 103.146.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl
rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 18:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3208 (0xc88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072
Validity
Not Before: Jan 3 13:33:33 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46ce9-13a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:0f:e3:4d:19:39:74:22:11:c1:41:4b:91:
20:d8:79:25:8a:c5:49:53:dd:18:d8:a8:14:04:40:
da:f0:02:ca:ce:02:02:8c:fe:2c:95:19:8a:58:d6:
96:1b:70:19:83:a4:af:82:2d:88:bf:67:bb:78:da:
9f:ea:e5:df:af:4c:da:20:46:26:21:c6:09:fe:57:
98:e1:cf:60:7d:86:07:af:67:2f:2b:bd:f1:4b:05:
bc:b1:2b:97:22:ba:d6:65:ff:46:01:9c:1d:de:6f:
c6:02:f0:b8:16:2a:38:e6:72:1f:6a:8b:92:9b:d3:
cc:35:41:bc:7d:ec:b2:dc:af:bb:3f:a4:9c:66:f1:
e6:d4:98:db:c8:7b:5e:ae:52:0c:f9:c1:28:f3:7a:
0e:49:1a:a6:06:79:0b:72:cb:6e:26:10:d9:e3:21:
75:81:70:ed:dd:10:c0:06:ed:7d:01:c3:15:91:20:
d7:2a:61:14:91:67:98:81:bf:67:ca:19:fe:84:5f:
c7:9b:e1:c0:9a:ae:5f:40:c0:1d:58:7c:06:41:71:
65:12:64:95:14:f0:97:7d:85:b4:9c:c4:8c:b8:7e:
ca:f2:cd:f1:3f:a9:d7:aa:bf:a3:6b:2e:07:ef:5f:
93:6c:cb:3a:67:88:2e:07:09:f0:76:9f:bc:78:a3:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7F:D7:5B:E5:34:E5:D2:2F:E8:8C:18:29:3C:7F:1F:CC:F8:3F:7A
X509v3 Authority Key Identifier:
keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/CC4D97CAE8A811F0B40EB576576F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.37.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:c9:6a:9c:04:18:db:1f:90:09:df:1b:3b:70:20:1e:be:1d:
14:00:c6:b3:56:87:c6:29:98:07:ef:78:16:e0:c2:81:7e:ad:
96:28:6e:01:27:61:20:d9:b7:89:97:56:de:92:c3:fe:85:2f:
0c:60:0d:85:bd:f7:9e:06:75:6c:35:0c:0b:4b:2d:a0:74:60:
2d:d7:87:ae:1c:ad:c7:cd:c2:e5:ac:03:f5:25:a1:3e:31:8f:
b7:b0:69:71:ce:c8:9a:70:9f:6b:c4:af:2a:29:4e:26:24:d2:
37:5a:6b:40:fa:ff:87:7b:97:af:6b:e6:f4:39:7f:6f:97:64:
5b:cd:33:a2:e7:fd:9a:27:03:fa:bc:bf:1c:f6:8e:1d:fd:06:
38:53:9b:e9:6c:b5:90:e2:d0:0f:e6:af:e3:ad:12:3a:14:48:
02:14:e1:44:bc:65:5d:68:3c:59:94:e1:c0:d1:96:9f:d5:35:
cd:95:12:88:a5:9d:45:fe:3a:54:eb:30:4f:2d:c3:7e:eb:fd:
3a:63:5e:3a:62:44:d8:fc:c9:83:c1:d0:94:81:0e:bf:20:0e:
d7:ec:11:5a:00:85:bf:3a:6d:db:4c:bc:82:14:bd:f1:b9:ce:
57:1c:da:95:61:a8:14:39:e1:d7:7c:42:2f:12:fb:e1:af:fb:
14:92:15:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:37:55 2026 by rpki-client