
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/7321413EC22511E99FB7F225C4F9AE02.roa
File: 7321413EC22511E99FB7F225C4F9AE02.roa (raw, json)
Hash identifier: VGnQoHLbOR6gGAIMZ8u2WkXS8JnY0rPW7LfuTtXGg8Q=
Subject key identifier: 38:DC:D6:4D:3B:8B:B3:2F:F9:B1:D2:EA:44:FF:62:A6:53:FD:E6:5E
Certificate issuer: /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Certificate serial: 0E6A
Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/7321413EC22511E99FB7F225C4F9AE02.roa
Signing time: Wed 24 Jun 2026 18:21:30 +0000
ROA not before: Wed 24 Jun 2026 18:21:30 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 58625
IP address blocks: 103.14.36.0/22 maxlen: 22
103.14.36.0/24 maxlen: 24
103.14.37.0/24 maxlen: 24
103.14.38.0/24 maxlen: 24
103.14.39.0/24 maxlen: 24
2404:2700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 17:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3690 (0xe6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0367, serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Validity
Not Before: Jun 24 18:21:30 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3c202a-d9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c2:19:55:d2:1e:fb:7b:d9:42:ab:45:0e:ba:
69:d9:9a:4b:12:c5:37:6f:84:02:1c:80:67:f9:1e:
cb:0a:82:99:47:ae:eb:c9:91:46:9e:29:aa:db:31:
a8:e1:c3:e1:86:57:9f:38:6e:d9:f0:cb:61:dd:70:
1f:ea:8a:c2:f7:87:95:1c:af:2e:1c:24:4a:80:73:
a6:a8:84:80:72:b5:5b:17:8f:eb:d4:a9:81:41:54:
4b:45:d0:6a:f0:a0:a3:aa:de:96:fc:ac:46:ae:21:
9e:fc:b5:c1:43:ab:96:f4:f1:52:7c:3e:f4:01:ba:
3c:fb:47:70:6c:dc:93:74:b5:6d:56:a2:63:23:0e:
1e:5d:e1:6d:bb:6e:3b:f3:85:e0:93:3b:0d:ec:46:
2f:2f:63:1c:59:fe:bf:72:a8:21:35:b8:bf:26:07:
dc:e7:83:a2:eb:75:28:69:4a:d6:a1:2c:35:d1:e7:
0e:5e:ee:e5:39:43:b8:17:15:e1:af:76:4c:a6:a8:
ee:2d:c8:99:f4:3b:9d:b0:de:a4:99:90:03:6e:54:
de:64:61:d9:a6:d6:be:23:ff:03:98:1c:17:44:8d:
c7:ab:ca:c2:75:f0:8a:ed:ff:b9:fc:5e:cf:d3:b5:
11:e9:bf:71:f0:e9:94:a7:22:18:d3:1f:83:9c:78:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DC:D6:4D:3B:8B:B3:2F:F9:B1:D2:EA:44:FF:62:A6:53:FD:E6:5E
X509v3 Authority Key Identifier:
keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/7321413EC22511E99FB7F225C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.36.0/22
IPv6:
2404:2700::/32
Signature Algorithm: sha256WithRSAEncryption
56:50:1b:0e:e2:c8:1a:44:c5:1b:5e:15:5d:25:4d:fe:4d:36:
b3:71:cb:86:54:e6:47:22:5f:3e:62:07:67:b6:dc:32:9e:ee:
d1:1e:58:5c:53:f2:91:7b:8b:38:27:8b:36:49:f9:7d:f9:89:
b0:7e:fd:98:f7:bf:72:09:db:4a:d6:88:12:c1:02:96:75:21:
c1:5f:94:21:5e:ad:c9:6b:86:fd:ff:23:df:a6:31:09:3c:a6:
da:b4:b8:5f:1b:e0:7b:91:9a:ee:19:9c:35:d2:f1:97:06:9a:
99:9d:f0:b0:68:bd:0b:c2:49:6f:27:5f:79:b8:7a:29:cc:c5:
78:61:8c:59:2b:11:5a:37:51:a7:39:af:1f:50:01:27:40:2c:
10:e6:e3:b5:15:2b:ad:35:e1:b5:72:8a:27:16:03:4d:8f:66:
f3:ed:f3:a8:0e:d1:69:68:c1:49:98:f3:dc:47:90:fb:95:7d:
13:d2:04:c1:0c:3e:e5:c5:b1:88:d5:a2:e5:15:04:f4:28:53:
4e:f1:a9:6b:69:a4:11:1d:b0:85:97:ed:95:88:da:a9:3e:11:
2f:ab:c1:9d:f9:02:07:bb:97:a0:c7:24:63:e0:93:77:4a:d9:
e0:17:14:cd:ce:45:9d:84:f8:ed:9f:cf:cd:0f:38:ba:1f:53:
c5:ce:d9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 10:31:00 2026 by rpki-client