
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3E8D43BA770611EEB95C4412C4F9AE02.roa
File: 3E8D43BA770611EEB95C4412C4F9AE02.roa (raw, json)
Hash identifier: +UvQyL7Yi3rgMIlvqkvaOP5/na1Dj/H7OYrTDxzW19M=
Subject key identifier: 03:36:A9:40:8D:A2:BB:F3:14:CD:F7:57:D3:9E:F3:A6:95:D7:CC:F5
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E83
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3E8D43BA770611EEB95C4412C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:18:33 +0000
ROA not before: Thu 28 Aug 2025 14:55:38 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150896
IP address blocks: 103.77.182.0/23 maxlen: 23
2401:35a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24195 (0x5e83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:55:38 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60cb9-6ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7b:5b:4d:7f:8a:d6:7e:bf:1d:41:4d:02:70:
ac:68:bd:01:ac:e2:c8:93:cb:29:07:17:c9:fd:a5:
de:e4:eb:03:4f:38:57:fb:81:f6:18:1d:65:08:4a:
25:22:ae:bc:d7:89:46:fe:ed:aa:30:2f:a4:57:70:
a4:47:8d:b6:eb:eb:66:ff:73:3d:79:a4:21:e5:0b:
08:ce:ab:6b:8f:4e:bd:c6:59:86:97:26:a3:07:6c:
4e:c1:96:32:a3:ac:13:4a:12:64:64:58:c2:ee:d7:
5d:6d:8f:4c:61:a8:3b:55:16:70:04:a7:cc:b7:4b:
c6:53:a0:01:03:58:d4:5e:d8:5c:78:58:2c:76:6f:
bb:61:83:0f:6b:0a:35:26:2c:b9:69:fd:e4:2f:39:
46:f1:a7:0c:d3:8f:a4:e2:84:21:3d:cd:b4:4a:5e:
50:22:a8:59:e9:0d:20:e3:49:90:ae:20:cc:6f:3a:
56:e9:79:b6:36:c5:40:21:9a:3b:72:93:4d:66:76:
e3:17:2f:ac:39:59:01:9e:77:71:a4:53:92:70:47:
1b:fc:55:5a:db:7a:20:9a:85:7d:a9:b6:a7:f7:bf:
bf:3b:04:04:da:25:e0:07:0d:f0:ef:8d:1d:2f:93:
a3:65:60:48:ef:e5:71:79:0f:8d:ff:7d:a1:86:f1:
35:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:36:A9:40:8D:A2:BB:F3:14:CD:F7:57:D3:9E:F3:A6:95:D7:CC:F5
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3E8D43BA770611EEB95C4412C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.77.182.0/23
IPv6:
2401:35a0::/48
Signature Algorithm: sha256WithRSAEncryption
8c:54:78:75:0e:25:7c:80:7e:2a:64:c5:df:39:4d:2a:ad:06:
14:b8:ea:ed:56:25:af:cc:0e:d2:2c:bc:26:e8:82:04:a7:59:
35:02:89:48:bd:f6:ce:3d:99:3e:43:22:79:6b:34:0e:6a:3e:
9f:38:07:b8:94:d7:1b:2c:6e:d4:91:9b:79:f4:9f:3e:17:db:
1b:f2:a8:90:41:3c:fe:ad:a4:3d:a2:5d:a5:fc:4f:6a:e8:60:
bd:24:90:fc:13:51:86:cf:b0:98:45:46:35:c7:2b:c7:33:7e:
dc:f1:bb:0f:7e:7a:16:f1:f4:d8:0e:17:11:9b:0e:e8:e1:92:
9d:d4:78:0c:e6:f1:d6:9d:b0:86:15:c0:fa:e0:34:ae:38:81:
b9:8f:71:89:31:a6:c1:cb:d0:41:be:48:01:fd:1c:ff:1d:b4:
7c:d8:b6:29:41:d1:3b:b1:72:af:fa:53:99:0f:4e:c0:1c:e8:
ed:7c:2f:9f:91:bf:48:fa:3d:d9:4f:3f:93:37:2d:79:71:30:
89:70:9d:3e:df:c0:a1:82:05:33:65:b2:ee:8c:d9:3a:23:4a:
01:bf:b1:4a:c3:ab:24:31:41:a4:72:af:87:93:0c:21:2e:b2:
b4:2c:39:60:c3:b1:90:3c:15:bf:45:22:76:1d:41:0b:a4:07:
41:b5:0b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:09 2026 by rpki-client