
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/37B448241F7811F0AC4FFF82C4F9AE02.roa
File: 37B448241F7811F0AC4FFF82C4F9AE02.roa (raw, json)
Hash identifier: KXmFtf/aIxVULwWU2AV8/gJ5ecdsYrZWDPGXWWMJwLA=
Subject key identifier: CC:06:5E:52:6A:15:C0:10:97:A1:3C:A1:D7:92:B1:53:81:09:E9:73
Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial: D8
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/37B448241F7811F0AC4FFF82C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:20:04 +0000
ROA not before: Thu 15 May 2025 11:59:48 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 142032
IP address blocks: 103.117.136.0/22 maxlen: 24
103.121.92.0/22 maxlen: 24
103.186.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 06:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Validity
Not Before: May 15 11:59:48 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a5aaa4-4174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:c5:38:f8:46:35:2e:17:4d:8e:02:85:ad:
a1:55:7a:e0:97:4d:c7:aa:1f:da:46:50:12:40:60:
c5:d2:8d:e6:ee:f1:3b:0d:78:42:5e:07:25:9d:ce:
66:9c:6a:19:94:64:c2:68:03:19:c5:6f:27:cc:d2:
58:f9:c9:17:4c:b0:fd:a9:17:d0:2c:45:60:29:99:
c3:8d:79:1a:53:2f:c0:10:a6:12:8f:56:6c:ca:0c:
37:63:22:ed:00:04:3f:00:79:26:83:ac:21:8a:10:
e6:e0:bb:45:2f:e3:3a:b5:f8:ec:e4:c8:c2:4d:76:
f9:aa:e2:1f:58:bd:86:38:35:d9:89:a3:ce:a6:7d:
b1:c7:0c:f3:fb:26:36:07:36:9a:e0:ba:43:c0:a0:
38:85:99:50:74:fb:db:aa:ef:fe:ce:91:65:bb:73:
fa:f5:8f:9a:24:90:4b:79:46:70:9c:6f:33:5c:52:
44:a2:23:02:a2:0c:4b:db:46:77:b8:09:41:9a:65:
55:ab:0b:ce:fa:29:a2:a9:d1:85:2c:2d:73:76:f6:
21:ae:ed:b6:df:62:b8:c4:61:16:8b:ef:df:97:e3:
0d:3b:4e:db:f2:f5:9b:61:7d:b6:87:d7:ec:09:60:
16:3b:be:c8:c3:4b:3f:99:3f:71:96:c5:4f:99:66:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:06:5E:52:6A:15:C0:10:97:A1:3C:A1:D7:92:B1:53:81:09:E9:73
X509v3 Authority Key Identifier:
keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/37B448241F7811F0AC4FFF82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.136.0/22
103.121.92.0/22
103.186.214.0/23
Signature Algorithm: sha256WithRSAEncryption
40:08:fa:2b:af:f8:eb:9b:75:8b:ed:9e:0f:bf:f3:a9:5e:f2:
26:ee:57:86:17:f0:32:0c:2b:a1:94:5c:5c:7f:a5:97:b0:5b:
54:42:fb:b6:13:60:2c:13:b3:fe:12:6b:5e:f6:5d:48:a1:d8:
11:14:14:41:57:23:07:82:0b:96:b0:16:50:ab:ac:01:12:19:
c4:d9:6a:2d:75:47:63:88:96:35:f6:6b:f8:ad:74:85:c6:cf:
00:27:15:48:5c:f1:15:6c:23:d6:a5:4b:af:ff:ac:67:31:34:
3a:c9:b3:be:bb:37:e7:8a:d8:b6:98:23:6c:e4:bc:b9:db:dd:
ab:c1:9e:27:fe:5a:2b:16:a4:84:95:82:5f:9b:3a:a4:11:b8:
86:f7:17:7f:1c:d8:02:78:47:7d:24:d8:7f:1c:3c:57:f0:ff:
5e:ee:20:13:23:66:52:79:86:0e:de:18:16:e4:fd:36:35:92:
7b:13:20:80:ad:0e:cc:d0:49:5b:d5:58:83:41:ef:47:54:61:
3a:82:ba:a9:7d:17:6e:73:36:13:fc:3a:81:b9:bf:27:7a:10:
15:d0:78:12:ab:1d:14:34:dd:28:53:85:73:1c:63:24:34:e1:
e9:6d:74:81:ca:bc:3b:14:62:6f:61:72:e9:ae:1a:e4:0d:35:
92:b4:0c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:03:37 2026 by rpki-client