
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/3C9DB4069A1F11F18861FC0A5611F970.roa
File: 3C9DB4069A1F11F18861FC0A5611F970.roa (raw, json)
Hash identifier: bCbtL75JKHBw5u/1NC+7swWHc/6+S5w6cEHQLOSltb4=
Subject key identifier: 26:12:19:94:D3:9B:33:36:57:6B:A4:F7:44:1F:D9:48:EC:14:BD:53
Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Certificate serial: 357E
Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/3C9DB4069A1F11F18861FC0A5611F970.roa
Signing time: Tue 18 Aug 2026 05:50:52 +0000
ROA not before: Tue 18 Aug 2026 05:50:52 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 24573
IP address blocks: 103.28.124.0/22 maxlen: 24
202.170.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13694 (0x357e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Validity
Not Before: Aug 18 05:50:52 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a83f2bc-0d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:97:ed:98:65:10:2c:24:f7:a2:ac:50:0f:
6e:28:40:4d:9c:db:a6:03:74:af:57:33:49:6e:f5:
b2:a0:a8:5c:0e:a5:15:17:26:7d:6e:02:19:8b:9f:
32:5e:15:da:68:d8:b2:fa:8d:8b:47:c9:13:29:f9:
4b:48:8b:4d:c2:b0:ed:e2:58:21:5f:50:0a:36:f7:
ef:f5:20:37:2e:4e:40:e0:bc:31:2f:b2:f1:13:cc:
b4:c3:ee:c3:11:51:00:77:d4:61:62:8d:a1:85:07:
fd:0b:17:b4:5c:e5:7d:73:60:ed:28:95:f0:30:8e:
0d:63:f2:ba:c6:f3:78:2b:0c:eb:c4:e1:21:69:f9:
5c:7a:e3:19:f4:6e:a7:36:86:c0:4f:a3:c1:40:bf:
c7:cb:1d:aa:ef:41:b1:26:8d:4e:aa:f9:46:8f:48:
ee:d2:1e:67:34:6f:bd:90:6d:34:66:a2:82:d2:fd:
24:bb:f5:e1:6d:84:53:92:96:12:13:70:f7:4e:8f:
6a:f4:ff:0e:0b:46:f9:e4:8d:14:cb:8f:02:24:70:
2d:1e:0d:f4:5b:f1:41:46:6f:74:c5:52:b1:9a:d7:
c1:0d:1a:2c:ab:d1:c8:40:b8:ed:74:5a:72:78:22:
9b:05:76:c0:e2:a2:4a:17:d2:e7:21:73:b4:1e:63:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:12:19:94:D3:9B:33:36:57:6B:A4:F7:44:1F:D9:48:EC:14:BD:53
X509v3 Authority Key Identifier:
keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/3C9DB4069A1F11F18861FC0A5611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.28.124.0/22
202.170.114.0/23
Signature Algorithm: sha256WithRSAEncryption
70:67:34:88:74:d7:23:ad:0a:5b:d9:80:eb:14:a4:05:23:62:
4e:da:63:78:56:78:fd:d4:c7:70:fc:6b:a4:a3:a2:1d:27:03:
6b:45:8b:14:8a:84:6e:c7:70:87:01:60:a5:8c:a4:de:97:96:
38:ab:31:f5:6c:32:d6:df:2c:8b:0d:e2:cf:9e:93:3b:0e:8a:
df:99:64:ed:88:2f:52:11:14:eb:5b:9e:a1:6c:b4:46:59:24:
f3:6b:06:b3:22:26:12:c8:83:6c:53:91:6a:18:5a:14:91:d7:
29:ce:e7:df:83:82:ea:98:86:c0:55:25:bf:0f:4d:52:f2:23:
c6:61:c1:78:66:4e:73:8c:c1:8a:dc:5d:34:87:21:d1:d5:20:
28:84:91:6a:71:7c:21:b3:3c:f1:24:a7:51:a8:63:91:7b:5d:
e4:59:3e:63:b6:8c:1a:a0:1b:dd:05:79:4d:52:17:f7:a5:41:
2f:5f:f5:4d:4b:ed:57:a7:a2:93:62:a3:3c:4f:e7:d7:71:91:
2f:2e:7c:82:0d:1f:b7:f9:18:d1:2f:44:d2:c7:0a:7b:dd:e3:
4f:09:8a:66:cd:68:e4:c8:a5:4e:d4:89:4c:cb:13:72:ae:1f:
56:ca:47:bc:89:6d:e1:df:40:cc:04:79:f5:a7:03:b5:66:10:
9f:09:11:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:02:48 2026 by rpki-client