
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/3F22D06CA92411F1BA1076124011F970.roa
File: 3F22D06CA92411F1BA1076124011F970.roa (raw, json)
Hash identifier: GQfjzIvcAUK1+4IHBPkRoXiotlvv+cZ/gXcObRmGjU4=
Subject key identifier: C8:AA:32:DE:1C:03:35:00:FE:CA:18:73:B8:BA:83:01:1D:B6:E6:28
Certificate issuer: /CN=A91CCEF4/serialNumber=3DB2D423F63D0E80AB684FB25F95B32B61B2D033
Certificate serial: 1D
Authority key identifier: 3D:B2:D4:23:F6:3D:0E:80:AB:68:4F:B2:5F:95:B3:2B:61:B2:D0:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/3F22D06CA92411F1BA1076124011F970.roa
Signing time: Fri 23 Oct 2026 09:57:35 +0000
ROA not before: Fri 23 Oct 2026 09:57:35 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 18229
IP address blocks: 43.227.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl
rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 09:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCEF4, serialNumber=3DB2D423F63D0E80AB684FB25F95B32B61B2D033
Validity
Not Before: Oct 23 09:57:35 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6adb2f8f-b0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:29:00:fd:63:24:1d:84:30:36:57:bf:8b:
1e:7c:92:7f:7f:d4:57:ae:c9:c6:57:12:69:e1:24:
43:d0:c6:8a:fd:2b:62:d6:3b:9d:bc:b8:56:ec:2d:
3b:e9:d9:00:1f:67:03:e4:90:f0:f2:ac:28:49:43:
eb:25:02:0c:ef:73:1e:58:45:a9:fa:8a:32:ac:ac:
6d:96:5c:df:91:e1:3f:1c:3b:5d:06:5f:b4:3a:ca:
9d:00:30:5e:5b:8e:fc:76:cb:12:73:69:5a:0f:33:
1f:58:f6:5b:34:8f:d8:d6:ed:f7:b4:31:6e:b7:28:
4e:e0:6f:e1:d8:8b:31:ae:36:97:fa:c1:dc:82:1b:
91:d0:12:56:c7:a9:3b:85:33:8e:1e:10:fd:6d:95:
1f:2d:e9:dc:b5:92:a3:52:8a:a8:5a:9a:f9:25:2f:
4b:aa:4b:5a:8c:d1:f9:29:cb:7c:ff:c0:36:95:51:
86:e6:04:03:0b:55:5f:72:74:51:83:76:ad:68:a0:
2d:79:01:36:7e:98:b4:c9:7a:45:3a:6e:eb:d3:74:
4d:ca:24:66:e5:75:38:fa:98:7b:01:64:aa:4e:50:
65:89:59:21:f3:a9:5d:ec:27:c6:26:c7:c3:bf:50:
ed:98:46:d2:19:9a:e8:76:1d:5c:7e:2a:6e:7f:41:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AA:32:DE:1C:03:35:00:FE:CA:18:73:B8:BA:83:01:1D:B6:E6:28
X509v3 Authority Key Identifier:
keyid:3D:B2:D4:23:F6:3D:0E:80:AB:68:4F:B2:5F:95:B3:2B:61:B2:D0:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/3F22D06CA92411F1BA1076124011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.227.187.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:62:89:8c:85:69:87:f7:be:2e:e9:d4:97:5c:44:dd:31:e6:
73:56:fd:63:95:ce:ae:79:06:27:3a:3c:81:ab:4c:09:0f:06:
99:5e:93:82:b2:40:34:64:32:96:d6:cc:de:89:3b:90:d4:8d:
2e:13:86:53:39:65:b3:a5:ab:5d:b2:2d:e6:bd:46:16:cf:94:
c9:d6:74:08:f3:1f:f6:74:f4:1b:2d:67:01:de:43:ba:5d:a0:
a5:40:ea:3a:f9:65:70:d3:01:43:14:5d:04:51:69:6c:34:cd:
48:c5:09:89:95:f9:f1:e5:3a:2c:23:e7:3b:3d:86:d9:6f:c1:
fe:e4:d2:b5:8a:c8:f8:78:6f:5d:27:50:85:70:22:fa:33:ae:
22:93:6c:07:89:0d:80:62:1e:61:96:7e:df:8c:7a:f6:fd:10:
21:6a:b9:3d:06:e2:97:37:91:dd:fb:25:8d:5f:ce:3f:78:4c:
2e:d2:46:eb:80:54:be:d6:11:f2:02:82:d3:14:b0:84:95:00:
17:2b:9e:a3:51:6c:b0:d6:fb:9e:39:0e:eb:4c:11:1d:bf:34:
ad:1a:99:e3:28:72:e2:22:94:b8:a9:62:10:eb:1b:4a:7e:e6:
ca:56:f4:24:30:5e:8b:b2:bf:86:06:eb:5d:4f:67:05:18:79:
bd:36:08:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:35:32 2026 by rpki-client