
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/4D54B546616411F0B65D5F70C4F9AE02.roa
File: 4D54B546616411F0B65D5F70C4F9AE02.roa (raw, json)
Hash identifier: rFjIKF8O7uGzzC+ooErS3CkVvSPrki+X7Yn45I82Flw=
Subject key identifier: 88:5A:70:C1:62:D4:90:05:25:08:CC:E4:1A:54:AF:66:2B:11:D8:01
Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Certificate serial: 0292
Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/4D54B546616411F0B65D5F70C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:15:23 +0000
ROA not before: Wed 03 Dec 2025 00:30:58 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9664
IP address blocks: 103.37.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 01:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Validity
Not Before: Dec 3 00:30:58 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4661b-4a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:d2:e7:f4:89:18:38:5d:12:ab:fe:b8:9a:
f7:d9:1b:da:a5:63:96:95:f9:6f:01:da:79:97:67:
12:2e:17:b2:54:cc:71:1d:fb:88:64:35:c6:16:f5:
70:f3:a5:42:19:c7:c8:bd:a6:a5:c8:13:d1:05:08:
b3:bb:2f:ca:62:3d:7b:54:7b:ca:c5:a3:f5:6a:f1:
e8:c0:27:2a:28:83:1f:53:ae:44:26:08:b5:7c:6c:
b6:46:81:0f:78:b0:ae:ae:f9:fa:e0:88:b7:f1:a1:
94:1c:68:15:e0:5f:1e:68:c1:9f:80:f5:9b:46:1c:
38:0c:41:4c:c2:3c:bd:a2:7c:b8:3e:54:fc:2f:55:
95:20:7b:a1:f7:94:c5:51:98:63:72:42:af:7a:09:
61:bf:54:ac:2a:32:e2:34:95:5c:7f:b2:a5:ec:3f:
a7:19:55:8a:5f:5e:e0:bf:5a:ec:d0:e8:c5:d2:c6:
c2:e9:d4:fb:0b:5a:b5:d2:d1:64:bc:6f:61:be:5a:
d7:66:d4:95:70:0a:96:b4:a6:9a:af:17:49:bd:a7:
1d:62:46:83:8a:d0:4f:7f:a6:6a:14:98:48:90:e4:
f5:95:1d:e2:a1:58:b1:a5:48:2f:ad:19:99:d7:cd:
57:56:9b:12:43:29:3b:20:36:dd:04:a7:5a:22:be:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5A:70:C1:62:D4:90:05:25:08:CC:E4:1A:54:AF:66:2B:11:D8:01
X509v3 Authority Key Identifier:
keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/4D54B546616411F0B65D5F70C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.37.6.0/23
Signature Algorithm: sha256WithRSAEncryption
26:70:e5:44:8b:a4:c1:af:d8:3e:b1:11:cd:df:03:74:07:5c:
82:62:3a:38:6d:46:64:98:d9:b9:2d:cf:ff:ea:2d:7f:56:73:
9d:70:59:9a:e0:8d:6c:f0:f6:10:19:bd:71:98:da:b1:0f:f9:
5d:a4:c3:57:ed:fa:09:1d:7e:b1:1f:9c:96:35:74:88:93:86:
fe:53:20:63:d0:1e:2c:ff:5b:ce:e7:09:0e:1d:3e:35:a7:2a:
0b:66:5b:3a:aa:c8:db:f8:6f:46:34:63:48:b9:7f:8c:59:07:
d4:df:d9:e4:b1:d5:b3:ff:81:45:54:eb:28:83:b4:18:73:dc:
34:53:f4:f1:bd:15:5f:fd:65:ab:e2:d1:c4:7f:1f:37:af:b4:
c9:78:f5:96:c7:b0:e3:05:86:ed:ca:0d:2e:56:76:fe:ff:b0:
7c:b6:f4:1c:e6:59:4e:90:c2:91:5b:32:7a:b0:83:a3:69:69:
04:36:38:28:11:e0:ce:31:4a:df:ee:b1:dc:34:1f:03:cd:ef:
44:6d:bb:53:57:a1:c8:c8:40:92:8f:db:c8:1a:dd:c7:87:28:
db:61:22:c5:0e:b4:8e:67:74:41:59:93:5b:4a:5d:34:95:d8:
b2:1c:ff:f2:b1:0e:78:74:74:3f:a5:73:e0:85:c2:97:47:5a:
fb:11:57:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:12:42 2026 by rpki-client