
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3C74428C7EAF11F1AD3956B567A30FBC.roa
File: 3C74428C7EAF11F1AD3956B567A30FBC.roa (raw, json)
Hash identifier: 6LZ4bPT9bZsQt1NMk36EUX/7nrjtc4AN+ODrl8tZWGg=
Subject key identifier: 36:3C:29:6A:8B:96:19:5B:AC:B2:25:81:1E:6B:3B:AC:70:31:4A:64
Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial: 072E
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3C74428C7EAF11F1AD3956B567A30FBC.roa
Signing time: Mon 13 Jul 2026 11:38:31 +0000
ROA not before: Mon 13 Jul 2026 11:38:31 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 5650
IP address blocks: 103.97.228.0/24 maxlen: 24
103.106.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 22:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Validity
Not Before: Jul 13 11:38:31 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a54ce37-1103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:ba:af:4e:1d:36:51:26:29:2f:21:5c:7f:
8a:2c:7f:24:8e:c8:9e:0a:85:85:14:36:67:91:1f:
e1:fa:80:57:48:c7:2b:16:f9:79:91:c6:04:b6:13:
a5:9a:67:90:a2:c5:40:c5:0e:96:28:7a:99:c8:c6:
1d:20:80:bd:20:85:45:94:43:28:1e:3f:06:72:59:
0b:a1:7c:22:5b:a3:b7:33:f0:66:45:b5:a5:d6:1a:
f0:e7:76:71:f3:ff:ca:f5:a8:a1:a0:7b:40:03:79:
3a:24:b5:f9:23:50:e3:9f:88:d1:4b:87:9d:6a:1a:
45:4c:37:87:19:e9:2d:f6:c9:ce:20:5f:a1:2c:cf:
17:8b:61:71:02:25:01:4c:1c:b3:1a:45:bd:a0:31:
75:14:0f:4c:03:96:f4:7e:43:b2:b5:d6:81:80:e1:
3f:96:e6:19:20:6a:08:9f:f8:7f:a6:80:2b:6b:78:
c1:56:df:51:cf:53:0d:20:9f:42:3b:83:00:3b:1c:
3b:b2:c0:0d:b3:f7:3f:e7:e7:73:04:5f:32:b4:28:
0e:61:a1:1a:d3:d8:37:f2:e7:7f:15:c5:e0:14:01:
31:0e:51:e3:6d:c5:92:72:64:f5:a2:68:14:81:ac:
fa:59:0e:1c:17:47:ce:0c:ea:a9:db:aa:3d:47:77:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3C:29:6A:8B:96:19:5B:AC:B2:25:81:1E:6B:3B:AC:70:31:4A:64
X509v3 Authority Key Identifier:
keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3C74428C7EAF11F1AD3956B567A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.97.228.0/24
103.106.203.0/24
Signature Algorithm: sha256WithRSAEncryption
54:09:7b:42:58:8e:c6:2d:26:29:33:e5:8a:9a:95:0c:12:b7:
5b:fa:4d:eb:48:23:f2:6e:41:5a:48:d4:d4:59:39:54:e6:21:
3f:da:73:66:fb:a3:89:dd:95:b8:94:de:78:fe:f3:f4:69:89:
e1:ac:89:b3:df:4b:1d:1d:fd:63:77:08:14:f2:09:b1:f1:ee:
c9:b1:33:c1:91:f4:dc:b1:7c:4f:40:ee:64:86:1d:94:84:da:
0c:6e:0f:2b:e7:08:7e:19:95:1d:fe:61:20:f9:d8:5a:4d:98:
63:ee:a5:2b:8f:b1:51:53:bf:b9:d5:e5:61:65:37:9d:c6:11:
e3:96:8d:f2:1e:a1:61:05:7d:4f:49:35:18:70:a6:41:05:c6:
76:3b:bf:10:3d:cd:fb:00:8c:30:b7:5e:f3:98:09:ce:a4:9e:
9d:9e:0f:5a:97:5c:63:8e:d1:a8:2c:68:0e:8a:1a:f8:52:d0:
f1:a3:09:41:ef:3e:28:c2:c4:4f:8f:0c:27:c4:a7:c8:9f:a9:
d8:18:03:23:0b:5f:ca:91:af:09:6e:a3:64:bd:42:b6:56:ac:
aa:8f:26:99:34:4c:e9:9e:25:31:e5:66:db:2a:06:cb:bd:a5:
0f:57:d7:85:5a:74:a4:e1:b4:08:e5:18:52:79:37:44:e3:a5:
ad:52:9e:78
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5
NEU5RjUwOTUwHhcNMjYwNzEzMTEzODMxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU0Y2UzNy0xMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvMe6r04dNlEmKS8hXH+KLH8kjsieCoWFFDZnkR/h+oBXSMcrFvl5kcYEthOl
mmeQosVAxQ6WKHqZyMYdIIC9IIVFlEMoHj8GclkLoXwiW6O3M/BmRbWl1hrw53Zx
8//K9aihoHtAA3k6JLX5I1Djn4jRS4edahpFTDeHGekt9snOIF+hLM8Xi2FxAiUB
TByzGkW9oDF1FA9MA5b0fkOytdaBgOE/luYZIGoIn/h/poAra3jBVt9Rz1MNIJ9C
O4MAOxw7ssANs/c/5+dzBF8ytCgOYaEa09g38ud/FcXgFAExDlHjbcWScmT1omgU
gaz6WQ4cF0fODOqp26o9R3c7NQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDY8KWqL
lhlbrLIlgR5rO6xwMUpkMB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1
QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUE4OTcvRTFEMTE3NzA5NUJBMTFFQkIyODEyMzcxQzRGOUFFMDIvM0M3NDQyOEM3
RUFGMTFGMUFEMzk1NkI1NjdBMzBGQkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ2HkAwQAZ2rLMA0GCSqGSIb3DQEBCwUAA4IBAQBUCXtCWI7GLSYp
M+WKmpUMErdb+k3rSCPybkFaSNTUWTlU5iE/2nNm+6OJ3ZW4lN54/vP0aYnhrImz
30sdHf1jdwgU8gmx8e7JsTPBkfTcsXxPQO5khh2UhNoMbg8r5wh+GZUd/mEg+dha
TZhj7qUrj7FRU7+51eVhZTedxhHjlo3yHqFhBX1PSTUYcKZBBcZ2O78QPc37AIww
t17zmAnOpJ6dng9al1xjjtGoLGgOihr4UtDxowlB7z4owsRPjwwnxKfIn6nYGAMj
C1/Kka8JbqNkvUK2VqyqjyaZNEzpniUx5WbbKgbLvaUPV9eFWnSk4bQI5RhSeTdE
46WtUp54
-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:55 2026 by rpki-client