
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/3A8D72EC50E511F1B3C6CC42C3833773.roa
File: 3A8D72EC50E511F1B3C6CC42C3833773.roa (raw, json)
Hash identifier: G9gjTmASAxWaSGyTQLyM5wPNBpCQflf0owj+nNRdQME=
Subject key identifier: A8:BC:21:6F:05:7D:67:CC:12:D4:85:9D:C1:5F:F4:A9:E7:24:32:AA
Certificate issuer: /CN=A91A3660/serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Certificate serial: 7E
Authority key identifier: 37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/3A8D72EC50E511F1B3C6CC42C3833773.roa
Signing time: Sat 05 Sep 2026 07:58:17 +0000
ROA not before: Sat 05 Sep 2026 07:58:17 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154156
IP address blocks: 121.46.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3660, serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Validity
Not Before: Sep 5 07:58:17 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9bcb99-6422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0c:45:93:13:84:6c:24:0f:98:b2:ef:2e:cb:
5a:9e:3e:2d:7e:a8:23:ed:e6:60:1e:96:45:dd:59:
2e:6a:b6:1d:26:2a:c1:41:05:48:35:47:c5:8c:b8:
20:16:e6:c1:1c:a2:63:9b:63:5f:38:05:6c:11:37:
bb:58:a5:8f:a4:c3:ca:9e:8a:2e:c4:fa:b9:b9:fa:
a9:fb:b5:85:76:7e:34:93:da:47:90:70:98:dc:db:
9f:8a:4b:3d:c3:dd:f0:98:c5:7e:f9:ed:44:d4:17:
bf:9a:c3:e9:5b:88:e7:46:93:ea:d7:20:85:ec:e2:
7a:d8:a6:0d:1e:06:54:d7:2f:96:8a:05:49:9d:8a:
97:99:d5:04:21:a7:23:a4:7f:79:23:82:12:6b:84:
8e:ee:69:f5:b9:24:b7:01:43:d9:b3:e7:b6:d0:22:
35:aa:c6:96:70:08:15:5f:3e:b9:30:31:ef:88:97:
db:49:60:29:17:e4:46:e0:62:54:82:18:d4:e7:c9:
d5:6e:67:e8:62:2e:f8:6f:08:c8:8c:d7:ab:e8:db:
1c:74:68:8c:11:38:6c:dc:96:25:c5:53:98:d4:96:
22:50:37:64:87:86:f9:5e:f9:e9:36:ae:4d:b2:fb:
40:58:bb:bb:00:4f:44:87:c1:4f:1e:71:0e:48:3b:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BC:21:6F:05:7D:67:CC:12:D4:85:9D:C1:5F:F4:A9:E7:24:32:AA
X509v3 Authority Key Identifier:
keyid:37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/3A8D72EC50E511F1B3C6CC42C3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
121.46.72.0/23
Signature Algorithm: sha256WithRSAEncryption
28:71:1b:f7:15:c4:cd:c0:61:19:ac:76:9d:73:38:e0:4c:01:
e3:11:50:25:15:84:d1:99:0c:c7:02:64:0f:7f:48:01:44:ec:
2a:61:d4:56:95:e2:58:8f:67:c8:72:9c:de:9d:e3:1d:4f:1a:
57:d3:58:39:c3:d5:31:28:54:73:20:ab:a7:d1:87:13:13:bd:
d8:77:70:7c:91:05:c4:e2:dd:63:9d:4f:cc:ff:23:6e:1f:4c:
14:3a:1d:9f:58:ca:4e:e5:f9:51:05:a1:d8:cb:58:7e:7c:27:
93:f4:b5:52:43:e9:e8:ec:7b:17:3b:35:30:fa:4d:69:46:fe:
cb:69:98:6d:a7:3d:5c:5a:57:90:f5:55:f9:4e:74:8c:fe:df:
e2:4b:96:a8:53:4b:fb:76:d1:20:e2:d4:fd:a1:4b:74:be:43:
9b:6e:e7:19:5e:ca:a5:bf:5f:ce:78:55:31:a7:a8:e2:6d:a6:
34:ee:24:a9:07:34:2f:fb:f9:00:72:53:60:32:c8:24:7f:76:
52:24:36:54:eb:c8:8d:70:a1:e0:d3:86:a8:66:d8:b3:c4:8b:
f7:07:70:73:40:e6:be:36:83:7f:bf:ed:20:1f:0b:f3:aa:e6:
2a:74:de:d8:aa:a7:34:db:af:1b:24:58:35:dc:cc:26:f9:a7:
dc:49:65:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:17:07 2026 by rpki-client