
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E45D3/C01DDFF8CC1111F1A3EC0A11F565CEF9/3B93610CCC3611F18CCDB4410066CEF9.roa
File: 3B93610CCC3611F18CCDB4410066CEF9.roa (raw, json)
Hash identifier: 9tXmQEbfghLFeLO1snMIr7cIgGzBSr8f8qYWnwlWnP8=
Subject key identifier: D3:B6:CB:6D:AB:89:37:BC:E6:99:80:82:77:FE:B8:CA:0B:56:C5:9F
Certificate issuer: /CN=A91E45D3/serialNumber=43160310BB9603E4EA7630173412B8B91F2BFAA6
Certificate serial: 03
Authority key identifier: 43:16:03:10:BB:96:03:E4:EA:76:30:17:34:12:B8:B9:1F:2B:FA:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxYDELuWA-TqdjAXNBK4uR8r-qY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E45D3/C01DDFF8CC1111F1A3EC0A11F565CEF9/3B93610CCC3611F18CCDB4410066CEF9.roa
Signing time: Tue 20 Oct 2026 03:27:53 +0000
ROA not before: Tue 20 Oct 2026 03:27:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1221
IP address blocks: 203.55.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E45D3/C01DDFF8CC1111F1A3EC0A11F565CEF9/QxYDELuWA-TqdjAXNBK4uR8r-qY.crl
rsync://rpki.apnic.net/member_repository/A91E45D3/C01DDFF8CC1111F1A3EC0A11F565CEF9/QxYDELuWA-TqdjAXNBK4uR8r-qY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxYDELuWA-TqdjAXNBK4uR8r-qY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 09:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E45D3, serialNumber=43160310BB9603E4EA7630173412B8B91F2BFAA6
Validity
Not Before: Oct 20 03:27:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ad6dfb8-4fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:74:7c:c9:1b:0f:d0:66:25:de:31:7a:65:
a9:e3:be:f7:63:5a:58:c9:30:6e:13:ce:bb:36:1c:
67:1b:13:e0:e4:dd:ce:47:3c:af:73:cb:c6:3e:b2:
b6:34:fd:05:bf:ba:89:04:64:ec:3c:70:70:de:36:
49:c2:1d:04:1d:07:80:03:c7:3c:55:09:82:bc:c9:
c6:44:ea:9a:71:9d:eb:96:f8:ea:12:21:59:8e:cc:
7b:eb:06:66:00:7a:ac:d2:fb:40:39:3d:dd:b9:40:
d6:2e:79:c8:0f:a9:e7:5f:84:0f:78:5c:78:ff:8e:
1b:0b:00:aa:23:57:29:7c:7e:16:ba:b7:f2:96:6d:
e7:ab:51:7a:f7:4e:cc:8e:d6:c2:54:4f:63:c9:50:
69:7f:f6:90:5e:3f:32:1d:74:f1:6b:3c:16:59:7d:
e4:14:67:0f:4b:b4:ce:56:43:54:84:8b:01:4d:4f:
74:58:51:b7:a0:bf:7b:84:80:84:07:7d:68:e5:49:
50:52:5c:1e:48:0b:42:4b:7d:c6:7b:bb:f5:d0:92:
0d:27:b0:07:e0:f4:bc:73:13:07:80:31:d0:58:c8:
74:92:90:8c:2b:98:d8:cf:9e:26:ab:88:df:3a:24:
1b:0f:9b:b3:eb:86:4e:d4:53:49:84:5a:b1:12:bf:
06:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B6:CB:6D:AB:89:37:BC:E6:99:80:82:77:FE:B8:CA:0B:56:C5:9F
X509v3 Authority Key Identifier:
keyid:43:16:03:10:BB:96:03:E4:EA:76:30:17:34:12:B8:B9:1F:2B:FA:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E45D3/C01DDFF8CC1111F1A3EC0A11F565CEF9/QxYDELuWA-TqdjAXNBK4uR8r-qY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxYDELuWA-TqdjAXNBK4uR8r-qY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E45D3/C01DDFF8CC1111F1A3EC0A11F565CEF9/3B93610CCC3611F18CCDB4410066CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
203.55.180.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:9e:d3:74:53:39:79:1b:9b:0b:3b:d3:e0:d7:6e:aa:3d:68:
de:6a:bb:4b:4c:68:c2:fc:70:67:eb:ee:b9:3e:14:b1:35:fd:
27:5e:a2:2c:fe:1b:d4:1b:47:e4:af:f2:9c:f1:79:2d:fa:d8:
bb:12:9a:04:18:df:13:c7:e6:ef:72:ad:00:12:a5:32:d0:db:
a1:40:54:ed:56:95:0d:ff:d8:bd:d1:e8:af:d6:e4:a7:60:43:
70:ee:4e:ff:80:e4:c6:6e:ae:e5:1c:46:bf:63:30:8c:27:95:
d5:56:80:af:46:3b:ef:9c:de:7e:36:35:25:30:6f:22:9a:cb:
a8:5d:62:f0:c0:1d:94:32:d5:99:16:82:c7:57:6a:fe:16:17:
c3:47:8e:26:ac:56:b8:49:cb:d1:22:4e:3b:85:d2:ba:dc:90:
14:bd:fb:8f:02:75:ee:cc:2f:af:d1:27:c3:01:e1:21:20:1f:
87:6f:24:e0:d7:4f:ee:c2:07:e2:ec:64:f2:e3:4d:37:53:87:
e2:bf:eb:71:eb:62:93:1a:bf:51:4b:5a:72:c1:80:f4:52:4a:
53:89:55:cf:33:b4:17:36:50:39:51:3a:0a:33:2c:66:01:17:
b1:5c:95:73:d0:df:93:7f:7e:21:0a:3d:52:ab:a9:ce:d1:c0:
db:32:27:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:54 2026 by rpki-client