
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/37B448241F7811F0AC4FFF82C4F9AE02.roa
File: 37B448241F7811F0AC4FFF82C4F9AE02.roa (raw, json)
Hash identifier: mFeODnTqqCYAbyyDP1f7ewIXqtu+6WN+eZxifMY5OQQ=
Subject key identifier: 8F:53:9E:15:B8:56:15:DC:71:C2:87:BC:6D:D3:FB:76:DB:B9:68:72
Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial: 0104
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/37B448241F7811F0AC4FFF82C4F9AE02.roa
Signing time: Sun 03 May 2026 07:39:23 +0000
ROA not before: Sun 03 May 2026 07:39:23 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 142032
IP address blocks: 103.117.136.0/22 maxlen: 24
103.121.92.0/22 maxlen: 24
103.186.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Validity
Not Before: May 3 07:39:23 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f6fbaa-e5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:bf:0e:94:a3:bf:ac:c6:30:85:52:f8:55:
6b:b5:6f:4b:fe:49:2a:48:2f:4b:b1:97:00:99:a9:
fd:7c:5e:9a:a8:f5:0b:c2:42:b9:86:95:1f:a7:0c:
e8:77:30:1a:e7:f7:bb:63:c5:f7:55:ad:66:0b:e5:
6c:74:91:13:82:2a:25:23:1f:82:f2:20:d2:e4:ac:
5a:92:ef:ef:c2:35:e3:7b:fb:59:57:38:49:8d:e0:
cd:b6:88:19:70:56:e6:4c:ab:17:71:31:59:d4:29:
1b:03:da:38:f7:94:df:43:55:c1:75:c7:09:58:7a:
b1:d3:f0:1d:ac:02:b7:d6:15:4f:c6:43:8f:35:d7:
10:76:ba:b9:2b:bc:69:79:7b:45:b7:9b:c9:ce:75:
06:d6:16:94:13:7d:c0:3b:ad:62:43:2c:4a:dd:38:
1b:89:16:b4:e5:3c:61:e8:46:c6:e3:6c:85:50:de:
47:8b:de:fd:10:d1:1a:2f:60:48:af:e3:55:ac:2e:
c8:91:9c:73:82:ea:73:c2:7a:3a:16:03:ad:72:03:
f5:b9:d3:21:86:c8:0d:36:69:ad:2e:75:43:f0:d3:
e5:e8:4c:5f:8e:11:f7:de:19:f1:17:74:9d:b6:07:
d0:ee:b1:9a:b2:04:b7:8e:e4:c8:2e:45:d4:ae:f6:
93:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:53:9E:15:B8:56:15:DC:71:C2:87:BC:6D:D3:FB:76:DB:B9:68:72
X509v3 Authority Key Identifier:
keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/37B448241F7811F0AC4FFF82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.136.0/22
103.121.92.0/22
103.186.214.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:1c:71:a3:cb:15:d8:c6:33:6e:09:c1:25:76:d6:5c:fb:28:
c3:42:50:7b:ed:dc:81:ec:ea:55:b7:ee:28:73:2b:78:75:b5:
a1:dd:16:2d:92:da:27:49:9c:53:25:ac:28:cb:c4:18:df:f3:
a7:16:de:fc:34:f0:41:91:e9:fb:21:85:22:d6:3a:38:b0:6c:
75:ea:93:ae:27:2f:aa:91:fe:bb:8e:70:95:78:7c:9d:d9:1c:
81:a2:77:80:de:1b:cd:71:98:1b:32:74:db:a5:35:7b:6b:31:
ba:aa:60:d0:79:d1:75:22:22:32:94:5e:1e:7c:ac:ec:f5:d5:
cd:b2:c2:c7:e3:7e:c2:4a:7c:fe:a0:3c:4d:29:e6:ec:6d:3d:
7f:d8:4a:d5:0e:b5:4a:05:fa:f9:9f:d0:94:4b:3d:22:f3:b0:
61:8b:2d:5e:d6:d8:83:88:7b:ab:07:a2:01:2b:c3:08:8f:dc:
77:96:3d:c1:7c:a1:21:fb:0f:e9:79:68:0e:70:31:6f:74:10:
f0:61:e3:d5:0a:f9:4f:a3:e4:e1:79:f3:17:59:0f:a0:04:78:
a2:3a:80:5b:23:a3:37:4f:a9:69:9d:ba:41:44:6b:d7:c3:60:
91:27:0b:bd:22:35:18:15:0e:55:e3:e5:55:ca:cb:87:3c:6c:
bc:b9:9c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:41:27 2026 by rpki-client