
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/37F88500B23311EF8B03B736C4F9AE02.roa
File: 37F88500B23311EF8B03B736C4F9AE02.roa (raw, json)
Hash identifier: ewdv47O8zJSYDB+ceom4/CUgpc8BnHrdNb4gE2X4xlE=
Subject key identifier: DD:2E:57:74:E9:F6:36:61:CE:39:7D:81:A5:0A:F9:91:54:A8:E7:14
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E65
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/37F88500B23311EF8B03B736C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:29:45 +0000
ROA not before: Fri 02 Oct 2026 15:29:45 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 150859
IP address blocks: 103.236.174.0/23 maxlen: 23
2001:df3:e8c0::/48 maxlen: 48
2001:df4:1cc0::/48 maxlen: 48
2401:9320::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28261 (0x6e65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:29:45 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcde8-cfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:66:c0:b5:55:d9:b1:6a:c4:a3:4d:b5:51:e0:
1e:cf:35:7d:11:a1:e3:51:53:f4:74:5a:98:12:f1:
36:7c:39:3b:0e:02:f5:10:40:fc:99:96:8b:56:e3:
4f:20:9e:c5:cf:6b:fd:e5:c2:27:44:db:98:49:c3:
13:e3:8c:22:fd:35:57:48:e3:c4:08:e1:97:8f:42:
a4:3e:dc:3f:4b:52:3d:86:8c:85:35:ca:ad:ae:89:
4f:c1:a2:07:c6:66:29:8f:23:9f:05:0a:d1:36:98:
a9:2a:5d:b6:cc:d7:91:18:c5:f4:9e:31:fd:3b:aa:
c6:e9:84:c4:cb:24:c7:99:35:37:fa:1b:f3:0f:c9:
dc:cf:16:f1:ea:62:24:dc:6b:8d:4f:4b:08:03:11:
b6:60:f3:9d:4e:74:fa:68:c2:5a:64:26:e9:71:42:
32:54:32:b3:1a:9f:cf:66:90:f0:5c:21:04:b8:78:
a7:a7:8e:be:16:49:c5:a3:24:67:af:52:d1:9c:29:
01:61:51:b2:0b:62:f0:e7:01:e3:71:7b:87:e7:14:
54:d6:0c:9b:0e:84:15:44:33:c7:9f:0e:25:77:96:
11:a7:f4:e3:6f:ee:3c:04:4e:16:96:ed:42:68:af:
4a:6a:84:39:88:cb:64:cf:ea:f8:1d:22:56:2d:b7:
32:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2E:57:74:E9:F6:36:61:CE:39:7D:81:A5:0A:F9:91:54:A8:E7:14
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/37F88500B23311EF8B03B736C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.236.174.0/23
IPv6:
2001:df3:e8c0::/48
2001:df4:1cc0::/48
2401:9320::/48
Signature Algorithm: sha256WithRSAEncryption
b8:5c:00:c3:e4:ab:ec:7f:e3:16:03:61:25:2f:2c:4e:13:76:
25:62:ad:12:a5:e1:11:ff:23:d1:13:bc:68:45:1d:ea:1f:7c:
3e:a4:30:d5:df:3d:3d:e0:d9:1c:a7:e4:72:db:63:87:c3:a2:
b6:34:e9:8c:44:45:0e:7f:f6:84:15:75:c3:47:a3:25:c4:c7:
60:f5:23:c2:b2:6f:00:cb:20:1f:9e:6b:6f:4b:5b:12:82:e1:
c2:26:08:d8:c5:cf:f5:bc:4c:84:3e:3d:ca:00:65:7d:f9:e6:
4e:d7:43:96:15:fc:42:a7:e9:4a:b3:14:ea:c7:5d:de:5b:da:
09:4c:3e:e7:be:43:7a:b1:95:4e:7d:49:a3:e6:99:70:9a:4e:
85:39:c3:4a:3f:9d:9d:76:64:d1:68:f7:31:11:40:72:7e:e4:
f6:18:11:18:7e:43:3f:4e:49:be:0b:99:5d:4f:eb:d1:fa:19:
ae:7d:ce:eb:c5:1c:27:d4:fa:58:94:c5:74:d2:ee:0a:07:9f:
f2:47:93:c6:10:d8:fe:63:b9:e6:d1:d8:7f:fe:b5:65:56:f5:
ee:11:e2:ac:19:53:65:71:86:2f:6d:c0:62:14:78:a6:d3:b9:
7a:a8:2d:3e:c2:29:fd:b8:e6:8f:a4:62:72:5f:ff:4b:37:fc:
82:b7:c1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:46:19 2026 by rpki-client