
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/3741E882335B11F09856AA2CC4F9AE02.roa
File: 3741E882335B11F09856AA2CC4F9AE02.roa (raw, json)
Hash identifier: 7h4RargpDGRKXAdpOJvGbjenAH0DHbOFZMHXQm21dcY=
Subject key identifier: 06:67:2D:43:A3:A6:EF:E1:64:5D:CB:13:6C:87:58:02:08:48:D9:2C
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 6147
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/3741E882335B11F09856AA2CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:39:24 +0000
ROA not before: Sat 17 May 2025 20:12:11 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 38802
IP address blocks: 118.143.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 19:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24903 (0x6147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Validity
Not Before: May 17 20:12:11 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a487dc-b11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:bf:72:13:ba:76:24:8c:55:f1:a8:0f:5e:
ec:fa:55:14:05:04:29:8b:a7:cd:c6:ab:00:68:2c:
97:ef:51:ea:7c:c6:99:25:5f:bb:40:0f:9c:7b:40:
19:2e:cf:ca:e3:30:a0:0c:ca:c0:25:1c:e2:df:89:
de:f5:de:23:cf:44:59:10:17:34:b1:3e:ad:b1:ed:
7a:5f:43:c9:e2:11:1e:ac:33:e4:6b:e7:8f:58:92:
e0:11:08:1b:a0:c5:8b:14:7d:03:4a:b4:b7:3a:cd:
c4:ef:9c:13:8d:fc:37:ee:bc:e6:1e:0f:77:ed:cc:
37:c1:bc:ad:15:ae:99:1e:41:a9:ed:96:41:d4:41:
65:6c:23:f3:bc:58:9f:b7:eb:a3:18:4e:4f:3f:07:
ea:24:a5:f7:8c:d7:58:dd:c9:c0:19:c0:71:91:05:
64:83:04:ae:f4:70:4f:2f:f1:96:af:fd:2c:74:24:
03:d8:8e:bf:45:65:e8:b7:0d:5b:14:3f:b0:a2:56:
2a:50:ec:99:b1:1d:0b:ca:f9:53:52:fa:b3:92:6e:
b3:ed:6e:45:14:cb:fa:1c:d4:a4:00:12:2e:11:59:
19:6d:b2:83:cd:b5:fc:cc:cd:6b:a7:24:03:85:0b:
8a:b1:8b:85:c4:18:22:48:d7:4b:55:59:6c:7e:9b:
12:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:67:2D:43:A3:A6:EF:E1:64:5D:CB:13:6C:87:58:02:08:48:D9:2C
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/3741E882335B11F09856AA2CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
118.143.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:88:bf:b8:0d:af:22:7f:73:76:c8:c0:9a:23:df:1d:93:96:
4c:5f:2b:f5:3a:84:4a:ec:53:a7:68:73:f6:3b:23:3b:e3:22:
0a:cf:8a:54:3e:7b:9b:cc:59:69:10:80:af:19:84:05:ad:34:
a5:74:ab:29:9c:2c:0c:34:16:f5:eb:6b:97:16:f3:2b:11:8d:
26:34:d6:a2:ac:0b:2a:0f:1e:d2:ec:a3:50:be:6f:d2:ad:17:
70:4c:b2:38:24:7f:6f:6b:d4:06:e5:e4:4f:73:b4:6c:41:d4:
33:9f:15:3c:21:47:b1:1d:c0:95:6c:55:b5:ad:25:32:ae:ec:
1f:c3:53:30:a9:d7:e8:c8:e0:b7:17:00:3c:fc:fa:39:fb:5a:
9d:70:51:3e:43:bc:c4:1d:42:8e:9c:26:c5:eb:20:5d:9f:23:
25:d0:d2:6d:f1:ea:52:25:3c:cf:bc:83:f0:62:d5:5a:80:01:
39:0b:ed:20:c4:82:56:d1:40:13:8e:c4:3e:2f:c1:c1:12:fd:
23:99:6d:37:fe:c0:60:80:9f:8a:65:af:d2:9a:cf:49:53:52:
fc:3c:74:bc:b8:01:a1:f3:15:99:3f:b7:56:49:d8:b2:82:3c:
14:11:77:3a:d3:35:88:cc:80:6f:9d:ef:8a:05:1d:1c:a8:8e:
b6:0b:0c:6e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICYUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzEzMjMxMTAvBgNVBAUTKDQxMkE2NTExQ0ZFRENGRUNCNTU5MEM5NkM4QzM2MUUy
RkVENDQ4NTcwHhcNMjUwNTE3MjAxMjExWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODdkYy1iMTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvjC/chO6diSMVfGoD17s+lUUBQQpi6fNxqsAaCyX71HqfMaZJV+7QA+ce0AZ
Ls/K4zCgDMrAJRzi34ne9d4jz0RZEBc0sT6tse16X0PJ4hEerDPka+ePWJLgEQgb
oMWLFH0DSrS3Os3E75wTjfw37rzmHg937cw3wbytFa6ZHkGp7ZZB1EFlbCPzvFif
t+ujGE5PPwfqJKX3jNdY3cnAGcBxkQVkgwSu9HBPL/GWr/0sdCQD2I6/RWXotw1b
FD+wolYqUOyZsR0LyvlTUvqzkm6z7W5FFMv6HNSkABIuEVkZbbKDzbX8zM1rpyQD
hQuKsYuFxBgiSNdLVVlsfpsS1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAZnLUOj
pu/hZF3LE2yHWAIISNksMB8GA1UdIwQYMBaAFEEqZRHP7c/stVkMlsjDYeL+1EhX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTMyMy8wODREODhENDk1
QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHoteTFXUXlXeU1OaDR2N1VT
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FTcGxFY190ei15MVdReVd5TU5oNHY3VVNGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzEzMjMvMDg0RDg4RDQ5NUI3MTFFQUJCODI0RjFCQzRGOUFFMDIvMzc0MUU4ODIz
MzVCMTFGMDk4NTZBQTJDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAdo8BMA0GCSqGSIb3DQEBCwUAA4IBAQA/iL+4Da8if3N2yMCaI98d
k5ZMXyv1OoRK7FOnaHP2OyM74yIKz4pUPnubzFlpEICvGYQFrTSldKspnCwMNBb1
62uXFvMrEY0mNNairAsqDx7S7KNQvm/SrRdwTLI4JH9va9QG5eRPc7RsQdQznxU8
IUexHcCVbFW1rSUyruwfw1MwqdfoyOC3FwA8/Po5+1qdcFE+Q7zEHUKOnCbF6yBd
nyMl0NJt8epSJTzPvIPwYtVagAE5C+0gxIJW0UATjsQ+L8HBEv0jmW03/sBggJ+K
Za/Sms9JU1L8PHS8uAGh8xWZP7dWSdiygjwUEXc60zWIzIBvne+KBR0cqI62Cwxu
-----END CERTIFICATE-----
Generated at Thu Mar 12 16:51:26 2026 by rpki-client