
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/3F3532743C8311ECA86D031EC4F9AE02.roa
File: 3F3532743C8311ECA86D031EC4F9AE02.roa (raw, json)
Hash identifier: baibuYWIpr+G/3yWYzUEd75gq0D9onuWC061QPJtxB0=
Subject key identifier: 29:C9:5B:55:12:BC:FA:3B:8D:7C:F0:31:6B:9A:4C:42:37:E7:00:E7
Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Certificate serial: 056C
Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/3F3532743C8311ECA86D031EC4F9AE02.roa
Signing time: Mon 04 May 2026 23:29:45 +0000
ROA not before: Mon 04 May 2026 23:29:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45753
IP address blocks: 103.212.96.0/22 maxlen: 24
139.5.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1388 (0x56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Validity
Not Before: May 4 23:29:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f92be9-0d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:72:ca:ac:ea:12:9a:8b:aa:94:bd:5a:39:af:
1f:2a:c9:ca:e2:36:9d:96:0e:68:fd:c1:6c:f5:e3:
c6:d2:13:bc:e8:67:b3:b1:8b:76:54:f8:20:2b:cd:
62:09:24:a3:ce:86:6d:3c:48:11:a4:99:50:f4:98:
ac:9f:2b:51:b5:51:8d:b6:be:2f:2e:6f:b0:6f:ba:
4b:6f:22:5c:8c:96:bd:77:f6:a2:4a:c5:d8:8a:fb:
48:51:5a:d6:f9:08:dc:6f:ef:04:99:c0:69:4a:5e:
d8:53:6a:63:c8:a6:3c:6c:62:bf:3e:8b:8a:ef:f6:
f9:c2:7c:30:7e:d8:10:92:19:a7:29:63:52:e5:89:
a8:3e:69:9f:4d:6a:18:b1:6a:0b:30:96:4a:a0:16:
55:95:86:f2:31:a4:0e:8f:00:df:fc:7f:2b:c1:b8:
b0:3e:45:82:8f:a4:16:21:38:7d:31:c4:b8:5c:37:
37:7d:34:6c:a6:0a:e6:22:62:81:1e:16:8d:0e:d4:
d6:de:42:1f:3f:2c:59:91:b9:33:8d:92:9e:6b:9a:
4b:cb:27:40:66:32:47:61:e0:63:15:ef:c1:38:dc:
17:d0:ea:01:10:5a:06:5e:16:05:f3:22:ee:c1:3f:
84:5f:29:50:8a:98:c3:a8:3a:e3:34:75:42:2a:84:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C9:5B:55:12:BC:FA:3B:8D:7C:F0:31:6B:9A:4C:42:37:E7:00:E7
X509v3 Authority Key Identifier:
keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/3F3532743C8311ECA86D031EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.212.96.0/22
139.5.200.0/22
Signature Algorithm: sha256WithRSAEncryption
83:dd:21:cf:e5:4f:9c:88:ea:c8:69:6b:3e:e6:88:88:f4:fd:
08:04:28:3c:a3:84:bf:3d:48:22:86:62:11:1f:ec:10:a6:79:
4b:51:7e:e7:54:16:84:12:e7:20:58:24:3b:94:9a:0c:cb:29:
ba:1e:20:9e:18:00:30:0d:47:25:9a:bb:22:a1:25:d3:a3:0e:
c8:6a:ed:9e:71:df:0c:fc:2a:44:50:f8:3a:e5:d2:29:a1:2b:
90:c4:b3:75:fe:8b:0d:8c:4e:05:dc:49:cd:93:55:64:65:66:
07:45:f9:11:14:18:f6:fe:86:12:3b:3e:e5:e0:5d:e4:4e:b0:
ef:f8:48:6b:9e:33:56:de:61:c5:51:2b:2a:5c:a5:f0:6d:68:
7c:f3:fb:ee:37:6e:32:49:61:8b:ec:74:d3:e1:37:2c:d2:1f:
cc:3d:57:30:a2:95:5c:0b:7b:28:56:97:f8:44:fb:ba:aa:1a:
fa:63:5b:84:45:de:31:d5:b5:17:d9:e0:74:b7:c2:b0:fc:27:
4c:b8:e0:27:0f:12:81:3b:b2:81:dc:01:7a:36:34:90:4f:94:
a0:ea:73:4f:26:70:43:d9:b0:9d:68:f9:b0:a5:a1:5c:8a:21:
77:7e:5e:51:6b:74:c0:df:7c:76:0b:05:08:35:47:e8:b3:66:
f1:3a:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:44 2026 by rpki-client