
$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa
File: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (raw, json)
Hash identifier: veYCT0YVn2lsSh/a1SemHmCMUXzXqFx3N+q0M958UTg=
Subject key identifier: A1:0A:BC:73:C9:E1:16:E9:8A:AB:5E:A3:24:78:93:17:7E:8B:57:CB
Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial: 0CA6
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa
Signing time: Fri 26 Jun 2026 19:22:11 +0000
ROA not before: Fri 26 Jun 2026 19:22:11 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 131270
IP address blocks: 103.68.160.0/22 maxlen: 24
103.232.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3238 (0xca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Validity
Not Before: Jun 26 19:22:11 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3ed163-3b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:af:da:e2:2c:28:49:2a:ee:33:c7:32:8a:df:
ca:12:6a:89:c8:71:6d:83:a1:6a:4a:29:79:88:e9:
84:6f:7d:06:1f:0e:b9:f9:de:dd:7e:d4:6b:93:b1:
c8:c8:94:85:dd:a1:69:8d:f3:3c:ca:19:e8:e5:5a:
2a:27:75:13:6c:aa:a9:ef:b9:ce:d3:48:01:c2:73:
7c:26:df:da:24:e5:a1:e0:41:ba:c8:6e:79:34:6e:
cc:b1:48:06:8b:ea:0f:86:f6:70:76:90:af:b2:8b:
3c:5e:17:52:60:a5:32:f7:5a:5d:51:bd:0b:b8:76:
5d:1a:c6:b2:40:f2:86:5b:37:0e:e1:48:c8:d3:ff:
16:0e:8a:99:e2:5e:13:c3:de:c6:03:35:44:73:ed:
06:8a:8d:b1:83:9d:0d:e6:5f:29:44:e2:bf:90:85:
f8:19:fb:ce:16:8f:a5:4a:78:c1:19:38:64:ca:a5:
f4:43:57:3d:c7:18:d9:ba:34:fb:42:7b:50:0e:ca:
73:db:14:2d:90:4a:cf:75:43:71:9b:92:db:61:7e:
e0:22:84:6a:1c:f1:d3:a8:8a:d4:5c:7d:af:ac:39:
a3:81:eb:b6:70:e2:b5:43:db:5c:00:2d:5f:0f:cd:
2d:b1:31:49:17:76:30:0e:a6:a9:7a:ca:0e:04:03:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0A:BC:73:C9:E1:16:E9:8A:AB:5E:A3:24:78:93:17:7E:8B:57:CB
X509v3 Authority Key Identifier:
keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.160.0/22
103.232.76.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:27:1a:e3:f0:44:37:d5:c2:35:28:bc:12:c6:be:4f:f8:71:
5b:f9:12:74:6b:d1:db:5f:74:c4:65:a1:50:ac:5b:16:25:e8:
fc:db:cf:24:28:ea:1f:21:26:47:61:93:af:65:d7:93:89:0a:
ee:e5:c9:1e:2f:53:08:25:96:0b:dd:22:27:e9:5c:bc:b1:66:
48:b6:d1:39:da:37:9a:43:40:a0:11:9d:8d:6e:0b:07:b8:3f:
cd:8f:3d:d8:1f:5a:7c:ab:47:3c:78:50:ac:bd:23:60:d6:38:
20:9c:59:0b:ac:78:42:c5:4c:9f:71:d8:80:ab:eb:4b:01:88:
c2:e6:d4:58:5e:cb:98:2c:ae:b5:ec:8a:a5:c0:60:e5:0a:72:
8a:0f:66:69:b0:c4:0e:58:b2:f6:b0:95:d1:33:cc:47:0b:b4:
1c:7d:2e:85:69:07:20:18:d9:fa:9a:ff:65:17:3b:0d:35:36:
fd:fc:a0:66:11:c2:8a:3d:5b:83:84:59:fc:cd:23:73:8b:ce:
1c:6d:dc:51:6c:9d:58:b5:1b:de:b2:d5:c8:81:0b:8f:8c:26:
4d:35:ea:07:d7:ce:20:a5:92:1d:4f:29:b9:6b:df:34:ec:67:
db:79:0a:42:08:fc:1e:d2:97:9b:ae:c1:a8:5c:ed:a6:60:9d:
18:ef:60:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:03:11 2026 by rpki-client