
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/361BDEB6315011F0A08FB267C4F9AE02.roa
File: 361BDEB6315011F0A08FB267C4F9AE02.roa (raw, json)
Hash identifier: BQetgOKP2pwjUT6eChrwhwSjxzfMAqwXit73S7tCp/E=
Subject key identifier: FB:2F:02:18:A9:08:FA:CF:D9:DB:6A:EF:9D:F6:87:5C:4C:27:F0:4E
Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial: 1A41
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/361BDEB6315011F0A08FB267C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:55:26 +0000
ROA not before: Sat 02 Aug 2025 16:55:07 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 141109
IP address blocks: 43.255.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6721 (0x1a41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Validity
Not Before: Aug 2 16:55:07 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4616d-1fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:80:c5:0a:0c:5e:26:23:06:f9:96:5b:c6:
a7:03:df:6f:15:ed:2c:a4:2a:46:c6:39:a5:e6:b2:
86:00:ee:fe:bf:1e:e0:53:14:92:82:f9:e0:b7:5f:
d3:8f:fb:98:da:6f:e9:fb:50:01:f7:53:b5:f9:8c:
22:88:50:e6:45:5a:f1:7e:87:df:a8:06:fb:9f:92:
71:93:fc:ad:c9:66:3e:cd:72:35:c2:73:fd:e1:ba:
f4:7c:f3:31:5b:2b:03:4a:35:36:de:da:74:fc:2d:
82:a3:51:c6:3a:bb:28:89:99:57:1f:43:f4:29:b9:
30:bf:33:65:67:69:c9:0f:d0:09:6d:cb:36:46:ba:
29:5e:53:3a:17:7e:4f:bc:24:fd:8c:96:6f:7b:fb:
af:24:09:30:48:f9:bf:56:64:41:91:fd:c2:61:92:
53:4e:00:c5:d7:25:50:1b:8e:cf:78:a1:d1:75:f2:
1b:36:c8:de:b5:6f:93:7a:57:9e:9a:94:ce:30:8d:
d8:b8:02:69:91:05:31:c1:1b:93:ab:1d:0d:e3:3d:
e8:53:e4:a7:2b:58:e4:34:4b:e6:c3:16:27:0d:67:
cf:e1:09:6f:81:ff:26:7e:9f:8b:6a:0a:39:22:ca:
68:6c:f1:dd:c2:e7:10:63:1d:95:44:da:24:3d:87:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2F:02:18:A9:08:FA:CF:D9:DB:6A:EF:9D:F6:87:5C:4C:27:F0:4E
X509v3 Authority Key Identifier:
keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/361BDEB6315011F0A08FB267C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.255.58.0/23
Signature Algorithm: sha256WithRSAEncryption
29:f6:3d:f2:70:80:57:7d:45:7e:1d:92:6e:82:0f:4d:9f:63:
59:6b:61:73:3c:2c:19:54:99:b3:1d:01:67:c1:26:52:ad:2d:
a8:7e:68:b5:21:c6:69:b2:f3:e4:44:e8:5b:94:a7:09:90:6a:
5b:32:21:a6:ef:7a:ba:10:f1:1d:51:71:32:fa:5b:c6:39:bf:
d7:56:22:68:4a:1a:8a:c7:fe:de:6e:08:1f:b3:f4:5a:6b:d0:
ed:c9:c4:94:71:eb:17:5a:e2:08:ea:79:c8:b3:2b:57:c1:7c:
c7:4f:e7:ce:b7:f0:38:fd:6e:2a:4c:10:ff:1e:30:9e:b9:98:
0c:48:09:ac:e9:14:ba:bb:ae:da:a0:0d:cd:f9:41:bb:9b:b7:
fb:07:c6:a5:59:c3:6c:e5:cc:ce:49:3b:36:00:43:a0:36:d6:
6a:e6:b4:6d:33:b6:b2:dc:15:e3:de:ad:d2:07:ae:76:ef:be:
b9:f7:45:4e:9d:c5:86:a0:f2:f0:4b:12:4b:7a:6e:15:7f:29:
85:4b:14:2a:ad:4e:98:5b:fc:13:8a:47:a7:f4:2f:68:fc:af:
50:bf:0b:07:86:0a:1c:56:36:6a:ce:b5:77:f5:ae:9d:00:0d:
6e:d0:f4:e7:45:0b:52:19:76:1e:ff:8f:af:92:b9:ff:46:e1:
7f:14:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:28 2026 by rpki-client