
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/3A904D64210111F181AE0DC81F3D8C67.roa
File: 3A904D64210111F181AE0DC81F3D8C67.roa (raw, json)
Hash identifier: dX+ruN2dMXVRIFLuH2W9vLFpYo75wMU0NdM15IPQhxI=
Subject key identifier: 73:B9:BD:BF:BD:D5:3A:CD:30:F4:5D:FB:A9:57:6D:48:9A:23:3A:50
Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
Certificate serial: 03CC
Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/3A904D64210111F181AE0DC81F3D8C67.roa
Signing time: Tue 24 Mar 2026 02:24:41 +0000
ROA not before: Tue 24 Mar 2026 02:24:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142002
IP address blocks: 139.5.108.0/24 maxlen: 24
139.5.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl
rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972 (0x3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
Validity
Not Before: Mar 24 02:24:40 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69c1f5e8-43ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:db:90:a8:79:57:51:89:30:b9:8f:96:6c:92:
15:55:28:e8:74:d6:21:e4:a6:43:52:67:57:f0:b0:
37:e6:c5:e7:dc:02:01:3b:f0:6b:19:d5:7c:ba:cb:
f0:1d:92:a7:56:c7:c3:42:cd:ba:b5:0e:5e:df:e8:
52:b0:e9:6c:56:39:22:28:ed:8c:e9:fe:ac:da:d7:
da:b1:40:10:7e:cc:23:01:87:53:e4:26:c4:19:47:
5b:8c:4d:24:17:a5:98:d4:9f:ad:f3:88:7c:79:66:
79:75:76:df:ac:bb:c3:50:bf:a9:30:17:b5:f1:50:
79:17:21:9e:7c:fe:17:97:50:64:a1:0b:14:65:05:
2f:cb:c1:cc:6c:87:e0:9d:79:4d:da:34:3e:fc:ba:
bd:c0:19:a8:4b:d0:f5:42:0a:c7:7d:ef:5a:56:42:
be:c8:72:eb:ab:5a:0f:87:c8:fb:f0:9f:f6:9c:b7:
02:99:db:fd:79:b7:6c:32:c9:f9:24:e1:46:71:ae:
1b:6b:20:16:72:c7:83:bc:de:74:39:26:b9:88:84:
48:df:fa:26:82:9c:f7:5a:99:6a:db:d0:11:c1:4d:
e4:a0:34:01:14:fc:28:8a:32:41:2f:71:4d:e4:2f:
48:2e:15:bb:1f:9f:c1:ef:9a:98:6f:3b:b4:90:02:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B9:BD:BF:BD:D5:3A:CD:30:F4:5D:FB:A9:57:6D:48:9A:23:3A:50
X509v3 Authority Key Identifier:
keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/3A904D64210111F181AE0DC81F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
139.5.108.0/24
139.5.111.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6a:14:4f:0a:45:9d:fe:98:bf:f4:8d:aa:47:ba:de:f9:32:
9e:57:60:8e:cc:ea:79:78:0f:e1:4b:68:64:6b:b7:de:51:38:
f9:ed:6e:3a:df:82:03:ae:eb:3b:ce:f7:5a:cd:b7:b9:dc:7a:
cd:08:97:fa:75:77:22:2d:49:77:c9:31:0b:25:30:50:f7:d5:
13:1c:82:07:79:6a:e1:47:8c:40:09:69:26:83:e5:34:c6:8d:
c7:19:24:e8:b8:94:26:dc:3b:9d:a2:0d:c5:d2:e6:1e:35:26:
e4:2e:ae:33:c0:4c:f2:48:5c:bf:70:65:95:7f:99:9f:70:7f:
fa:28:5d:24:e9:e8:e8:6c:54:59:66:3f:0a:d7:b9:90:d4:8b:
6b:17:f8:00:1a:e6:91:34:bf:ed:6f:d7:cc:9e:bd:dd:fd:ce:
eb:c1:3e:e9:d4:84:71:7d:52:67:7c:ce:72:c0:32:a0:77:e6:
15:14:a2:49:48:fe:8e:a5:8c:7a:f1:e7:e5:94:45:6c:91:9e:
50:fa:0f:61:27:ee:01:0a:d8:8b:e7:86:36:d9:eb:02:c9:bf:
d7:62:5f:06:a7:7a:6b:86:3d:a2:43:84:6b:b7:14:e2:ca:04:
4f:07:06:76:51:8f:f3:8e:91:bf:0e:51:a4:c8:92:0c:16:f4:
f5:71:a9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:22 2026 by rpki-client