
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/3B91F0E650E511F1B3C6CC42C3833773.roa
File: 3B91F0E650E511F1B3C6CC42C3833773.roa (raw, json)
Hash identifier: 7jYYobsyHdNXXFnvJ1KLqoM7GEoKGSkj05i8VMgrHM8=
Subject key identifier: D2:E0:B9:25:42:6A:9E:04:2E:FE:51:52:CC:A8:6F:75:6E:20:CE:54
Certificate issuer: /CN=A91A3660/serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Certificate serial: 40
Authority key identifier: 37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/3B91F0E650E511F1B3C6CC42C3833773.roa
Signing time: Sat 16 May 2026 05:08:10 +0000
ROA not before: Sat 16 May 2026 05:08:10 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 18019
IP address blocks: 43.228.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 08:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3660, serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Validity
Not Before: May 16 05:08:10 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a07fbba-604b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:df:00:75:ca:45:4a:a3:c1:27:31:70:95:
db:1f:a4:76:a3:11:62:0b:3a:52:c9:a3:1c:fa:6e:
0b:bd:72:2f:1f:19:83:75:a0:75:58:99:1d:65:ce:
5c:b8:3c:54:f9:c4:83:13:e6:a5:66:d6:d8:88:7f:
b8:22:86:dd:bc:ba:49:8a:75:59:fe:d8:78:d9:0d:
20:40:3f:80:e2:62:2a:81:7d:04:30:0a:9e:2b:b3:
8e:b7:db:80:90:56:d5:83:77:cf:ac:b5:e5:93:59:
b3:3b:ea:72:8a:93:6f:6d:bd:0a:07:c1:4d:dd:cd:
9c:46:bc:0d:bb:8f:0a:e9:d5:28:47:9b:c0:b9:11:
5f:93:9d:39:49:50:97:ed:55:96:16:cc:6c:aa:f8:
bd:a6:33:22:a2:6c:f2:ff:da:bd:b6:3f:6b:b9:ef:
82:25:25:49:70:c1:9a:9d:b8:bd:60:0f:ae:2a:e7:
76:0c:1a:41:b1:e1:91:d7:0f:4c:79:81:50:ad:50:
75:ef:06:c1:0a:dc:43:c8:07:74:76:51:68:d1:40:
b2:db:0b:6d:b4:61:b9:32:eb:db:88:21:01:99:23:
ba:df:4e:02:c3:c1:aa:fc:40:49:89:49:16:4b:c2:
2b:81:a8:a9:92:59:95:5e:39:43:d1:9d:10:8d:ab:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E0:B9:25:42:6A:9E:04:2E:FE:51:52:CC:A8:6F:75:6E:20:CE:54
X509v3 Authority Key Identifier:
keyid:37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/3B91F0E650E511F1B3C6CC42C3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.228.144.0/22
Signature Algorithm: sha256WithRSAEncryption
58:3b:61:23:e3:19:4c:70:23:9b:25:4a:34:bb:63:26:85:c6:
41:8a:ab:92:5a:73:c4:fe:39:dc:67:a7:27:9c:93:f4:5b:ec:
b9:6d:cc:9a:4c:0e:ed:9a:f4:bd:d3:4a:70:a8:aa:86:16:9d:
f5:70:0b:4b:86:61:e0:2a:11:24:9c:bf:e6:b4:a3:ec:60:bf:
f7:19:90:11:e7:92:ee:1b:e0:47:6d:9a:98:62:4e:71:3d:29:
55:0b:ef:82:d3:1a:89:8f:1d:ae:97:09:23:4d:1e:4a:5d:13:
50:17:f4:1b:6a:73:66:43:3c:5c:ad:ab:a1:b9:33:49:12:c2:
63:a9:3c:88:33:b4:07:cb:63:16:1d:55:c7:de:35:7c:f7:90:
3f:4c:13:29:5c:6e:28:3f:43:43:4b:19:16:e6:70:10:ac:f7:
cd:3c:53:91:b7:14:3f:04:ae:a1:65:c7:10:88:e1:cd:d5:ea:
42:26:6a:f2:a8:92:d4:3e:6a:ee:19:60:f3:5b:94:48:b1:97:
ed:59:a4:ba:97:26:fe:92:c8:52:14:33:bb:9e:cf:7c:63:7b:
52:78:d7:47:fa:46:c9:b8:7d:b8:4c:1b:8a:af:a2:59:1a:e5:
23:53:a3:5a:ab:3b:b7:99:ff:08:87:26:d0:65:ca:71:cf:47:
5b:8d:94:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 11:12:06 2026 by rpki-client