
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/372E72941F7811F0AC4FFF82C4F9AE02.roa
File: 372E72941F7811F0AC4FFF82C4F9AE02.roa (raw, json)
Hash identifier: lc4x/4krlU7IrBNm9yndeIsd6X4Oi1wYGPdwnSnT+2s=
Subject key identifier: 7E:A0:EF:53:6D:96:03:43:BB:F9:D9:23:8A:87:1D:2C:7F:2F:B9:76
Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial: 0102
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/372E72941F7811F0AC4FFF82C4F9AE02.roa
Signing time: Sun 03 May 2026 07:39:19 +0000
ROA not before: Sun 03 May 2026 07:39:19 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137899
IP address blocks: 103.117.136.0/22 maxlen: 24
103.121.92.0/22 maxlen: 24
103.186.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Validity
Not Before: May 3 07:39:19 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f6fba7-c9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bc:3c:99:c2:3f:b8:4e:88:a2:87:25:16:3e:
f0:f6:bf:c3:1a:fd:3c:5a:50:52:3c:c8:93:23:8c:
d0:cd:e1:4a:e3:c8:b1:b5:6a:48:05:dc:f9:a3:8e:
6a:24:28:55:e1:87:75:db:d6:09:fa:b4:15:b5:32:
89:ce:40:e8:be:5b:f6:5d:cd:43:d2:a1:a7:24:44:
c3:d2:3f:03:e0:c4:19:dd:57:72:04:76:86:f8:2b:
cf:38:2d:5e:f3:da:4e:df:3e:23:3d:bf:a6:86:58:
bd:42:d6:b0:9f:31:3f:f8:64:44:a3:75:50:61:7c:
e3:51:52:b4:c5:e4:85:05:54:73:96:b6:d9:cb:dd:
d7:84:3b:00:78:c5:52:09:f2:4a:94:d1:d1:20:d9:
fc:49:ce:c5:cf:11:0c:f1:11:5a:27:e6:57:f7:10:
ba:e8:24:74:ca:13:3c:80:a0:d1:1b:d3:06:e7:09:
0b:c7:44:f6:d0:c4:9e:7c:ae:47:60:26:aa:ba:41:
0d:ca:31:3c:23:db:b3:ae:0e:fe:ad:93:b4:4b:29:
cb:f5:50:f7:91:e3:a6:46:39:e8:1c:b6:f6:64:8d:
3d:05:19:b4:26:63:33:1d:06:cf:ac:32:06:2c:72:
a5:f6:43:53:e5:b0:cf:60:37:42:13:31:bc:9f:78:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A0:EF:53:6D:96:03:43:BB:F9:D9:23:8A:87:1D:2C:7F:2F:B9:76
X509v3 Authority Key Identifier:
keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/372E72941F7811F0AC4FFF82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.136.0/22
103.121.92.0/22
103.186.214.0/23
Signature Algorithm: sha256WithRSAEncryption
47:b3:ce:97:7b:43:9a:c5:ba:c8:17:7c:08:a9:52:56:19:5e:
9c:21:ab:e5:79:a1:d8:79:bc:6b:e7:e1:9a:58:d2:96:2e:b5:
0d:97:cb:b1:8d:f0:a4:0d:cf:1d:30:73:d1:72:7e:c9:46:64:
c6:01:36:10:17:99:8c:7e:71:ea:4d:f1:8d:ef:9e:79:30:4b:
72:a2:00:34:a2:fe:af:46:8a:70:f4:96:6e:26:51:cf:87:c6:
68:f6:7b:23:aa:2f:12:9a:c9:01:18:7d:62:50:b2:c2:92:d9:
fd:59:19:f9:f5:80:3c:a6:4d:04:eb:25:c2:40:47:d2:31:7b:
4a:8a:9a:92:23:7f:11:98:9a:50:d7:28:6f:9d:b7:52:1c:be:
88:ba:06:52:7c:98:5b:e6:70:b6:65:e5:c0:89:ad:9c:bc:3e:
9d:f5:3a:fb:c7:a6:8d:c1:76:82:98:ed:02:47:ea:0c:bf:ed:
ef:63:87:a1:2f:6b:c7:26:a3:25:08:a8:4f:d0:0e:29:4a:aa:
c4:32:ac:c9:f0:26:08:1a:82:b7:d4:8e:dd:5a:10:c5:cb:15:
d7:80:fc:bc:05:a0:3c:dd:6c:93:42:10:5c:8f:b1:f4:4e:1c:
ca:c6:ea:d8:0a:0b:91:31:9d:62:10:72:ed:32:21:50:eb:00:
5a:a5:38:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 04:06:25 2026 by rpki-client