
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/AA175058274911F1878D13C8B4833773.roa
File: AA175058274911F1878D13C8B4833773.roa (raw, json)
Hash identifier: kTIz7rz7OZ8EQKnSrQuhCggmlAoEm989ju8R+p6peKU=
Subject key identifier: C5:97:07:50:06:CF:75:F6:E8:23:06:A9:1C:81:79:A5:CF:E3:B8:FC
Certificate issuer: /CN=A91A3660/serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Certificate serial: 20
Authority key identifier: 37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/AA175058274911F1878D13C8B4833773.roa
Signing time: Tue 24 Mar 2026 06:21:16 +0000
ROA not before: Tue 24 Mar 2026 06:21:16 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 18019
IP address blocks: 43.228.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3660, serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Validity
Not Before: Mar 24 06:21:16 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69c22d5c-2537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:ca:e7:a2:46:5f:3d:78:1f:81:56:f9:b1:
8b:54:fb:7b:88:7f:88:a7:66:09:5a:d4:07:ca:4a:
ae:7b:c7:88:d9:23:b0:d8:c8:7a:59:b3:f7:5f:ea:
7f:d0:35:0c:8c:02:55:fb:36:ce:b4:8c:43:14:26:
e4:b4:2e:db:72:bf:57:58:3e:06:5a:7a:9e:ae:ff:
21:26:bb:78:16:23:91:4e:f6:e8:62:91:65:08:03:
ca:32:5e:76:53:e6:c4:e6:7f:30:b2:8f:03:0e:af:
0a:ad:c3:02:c7:86:5a:14:bd:ca:e6:3e:13:54:36:
33:0e:5f:cc:f3:e8:9c:b1:17:78:40:81:d2:c4:3c:
1f:0f:f8:e2:8d:f0:51:b3:c7:49:b6:c1:86:a8:c1:
3b:19:1b:9b:53:62:6a:04:43:c6:39:2d:28:23:b2:
96:de:fa:2f:d2:37:1a:15:8a:23:95:18:ad:a6:13:
e2:7f:16:f9:42:a5:f6:1e:4f:79:21:f3:a9:0d:e6:
fe:fa:67:4a:5e:84:50:49:fc:94:8e:a4:65:e2:26:
3c:f2:54:ec:2e:d8:4b:46:cd:2a:e9:c1:be:72:da:
bf:1b:55:73:17:22:ab:40:b1:8f:7e:e7:73:3c:c1:
85:fa:08:7e:68:01:a5:d9:15:4f:cc:46:71:4e:cf:
73:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:97:07:50:06:CF:75:F6:E8:23:06:A9:1C:81:79:A5:CF:E3:B8:FC
X509v3 Authority Key Identifier:
keyid:37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/AA175058274911F1878D13C8B4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.228.144.0/22
Signature Algorithm: sha256WithRSAEncryption
57:d8:08:6e:33:60:a0:db:6c:b6:15:71:66:f2:80:31:9a:1c:
eb:2c:55:16:48:2e:56:65:6f:5d:7b:6e:f6:a1:3d:02:f9:a2:
e7:73:8b:3a:82:10:36:85:05:4a:65:53:87:7e:43:f8:24:8b:
65:12:ad:a9:d6:11:fa:e7:a5:e1:40:de:3f:34:90:fd:b9:64:
a0:5e:71:ef:5b:76:5a:40:8c:5f:f1:92:67:d4:d3:b2:7d:00:
d9:4a:35:6f:ee:8c:00:ee:f9:d9:fd:4b:81:31:be:44:b7:d3:
0b:82:f3:76:60:11:76:7a:09:63:9b:c6:0c:eb:df:a8:08:16:
c9:3f:9a:d5:cd:26:e0:b3:cc:d2:cb:b7:00:51:04:2d:ff:2a:
1e:af:d5:1f:01:a7:ec:d0:35:75:65:bb:45:e0:5c:d9:17:66:
39:77:77:58:49:18:82:58:8c:9a:bc:3d:0a:42:8a:bc:d4:34:
13:fb:cc:29:52:6f:30:79:dd:48:f9:ad:a8:8b:fb:94:3c:b6:
a6:24:29:53:f0:43:d6:7f:42:1d:98:b1:43:56:c1:69:33:0f:
56:a1:22:64:35:ed:2e:7f:85:f4:7d:32:5d:b2:9c:fa:69:50:
46:82:f0:9a:f2:e0:03:c9:fa:81:d8:49:14:3a:2d:86:69:a3:
b8:94:8d:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:37:11 2026 by rpki-client