
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/36765016252911EDBEF5C985C4F9AE02.roa
File: 36765016252911EDBEF5C985C4F9AE02.roa (raw, json)
Hash identifier: JoW4tYmLI7ajRGBqQhmGtCkhUB7xQki7mCMRwUQ/WJs=
Subject key identifier: C5:63:33:CE:BD:74:93:5C:52:D9:18:DC:F0:C1:55:16:69:11:C1:EC
Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Certificate serial: 0353
Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/36765016252911EDBEF5C985C4F9AE02.roa
Signing time: Thu 01 Oct 2026 01:49:20 +0000
ROA not before: Thu 01 Oct 2026 01:49:20 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 150175
IP address blocks: 103.205.36.0/23 maxlen: 23
103.205.36.0/24 maxlen: 24
103.205.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851 (0x353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Validity
Not Before: Oct 1 01:49:20 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abdbc20-10dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:21:02:5a:6e:e4:4f:3d:44:ae:d1:66:e0:f7:
5f:64:f8:d7:92:81:09:f4:8d:2a:e1:1d:de:1e:aa:
88:87:2e:8b:10:e3:83:9e:96:9e:34:35:6b:58:99:
2b:e1:9c:57:9d:10:13:13:8e:a6:af:2b:ae:ba:eb:
f1:c5:80:1f:d5:e3:cc:3a:22:bc:5f:a1:db:e2:ac:
00:03:d6:9b:6c:1b:51:ef:22:a0:da:e3:44:68:ac:
d8:e1:68:f5:51:54:d6:bf:64:30:12:4c:97:e2:99:
8d:ab:a0:8f:5c:a1:55:27:85:b8:21:1f:e9:71:44:
b4:52:b2:bf:c9:02:4a:80:41:05:10:7c:ac:a3:d8:
3a:67:d6:37:0e:0a:96:55:d0:1a:4f:c3:5f:2c:3b:
68:67:40:5f:59:cb:47:49:48:f8:17:93:1c:68:57:
26:1d:78:09:ef:df:56:69:e5:02:73:51:3e:76:cf:
aa:a1:35:97:15:55:d0:ab:fe:20:c8:1f:9f:b9:5d:
00:d8:4e:c5:fc:7d:d7:bd:32:22:9a:33:6f:88:22:
b7:e8:a1:ca:2c:f4:b4:2f:3a:cb:4e:f9:38:53:19:
37:2f:b3:3a:0e:7f:0e:83:29:27:6f:54:2f:a0:9a:
48:48:71:d4:c3:98:81:90:5e:a1:1f:d4:5c:0f:e9:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:63:33:CE:BD:74:93:5C:52:D9:18:DC:F0:C1:55:16:69:11:C1:EC
X509v3 Authority Key Identifier:
keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/36765016252911EDBEF5C985C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.205.36.0/23
Signature Algorithm: sha256WithRSAEncryption
52:84:60:74:d6:ec:cf:fa:bf:97:8b:59:11:72:e2:51:b8:42:
b7:d1:9e:19:70:30:24:89:55:d9:14:94:b4:90:c7:9e:a1:e4:
af:21:62:d7:92:c3:1f:0d:fa:d8:15:5b:e3:0c:d6:08:0b:7d:
66:fe:00:7a:3b:77:93:6d:8b:7a:bd:f8:54:db:b6:63:8b:6d:
3b:ad:ef:a3:0d:92:16:8b:6d:ea:b8:4c:75:73:17:f6:92:8b:
e4:ba:50:48:5d:9a:d3:41:07:43:6b:ee:82:14:13:04:3a:0d:
eb:6d:c8:4d:d9:d6:a4:21:2a:63:25:ea:d2:f5:06:a0:07:10:
ac:64:2b:8a:ac:65:2b:c6:f8:8f:0a:92:bb:d7:16:92:81:b8:
0b:01:9e:40:5d:a8:75:56:8d:42:0c:9f:3f:62:e3:a9:46:16:
46:d4:55:a7:c1:8f:b6:d5:bf:74:fc:74:25:88:53:7f:80:60:
d2:aa:91:ec:b4:af:44:34:ae:15:c4:d8:36:d6:95:e2:09:b9:
bc:49:19:3a:2a:cd:eb:5a:73:48:07:d3:0b:4d:ed:d1:d3:81:
51:ea:24:69:b1:d6:60:c1:be:9e:a0:a8:2d:ca:9a:ca:63:3e:
b7:2b:ff:a5:9e:d1:71:0b:58:0f:da:59:9a:52:cb:6b:23:55:
6c:c8:12:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:47:48 2026 by rpki-client