
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/3D51EF7C8F0111F087307F35C4F9AE02.roa
File: 3D51EF7C8F0111F087307F35C4F9AE02.roa (raw, json)
Hash identifier: ZTYnYrXftu4EMVac2jtmasDDa1311QW4YkSq9Et/mjo=
Subject key identifier: 66:F8:0B:9F:49:6D:A6:9D:4F:5F:0F:D7:19:32:F3:72:52:3C:BC:B1
Certificate issuer: /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
Certificate serial: 6F
Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/3D51EF7C8F0111F087307F35C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:44:21 +0000
ROA not before: Thu 11 Sep 2025 11:19:53 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138998
IP address blocks: 202.136.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl
rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
Validity
Not Before: Sep 11 11:19:53 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a59435-4534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:3a:53:d8:98:04:e0:e6:ed:97:9b:f7:8d:
0c:2e:d5:0d:32:5e:4a:5c:7a:49:5c:cf:07:17:71:
e6:ec:4b:c1:9e:b4:7d:59:ce:56:00:7a:f2:d3:5d:
a6:08:f7:33:aa:12:e0:a5:4f:38:64:cf:de:c2:d3:
22:cb:c3:f3:f4:38:9c:1c:26:37:4e:da:41:d8:a8:
df:65:be:4d:27:3e:02:9c:f6:ef:a1:b1:21:39:47:
11:55:e9:ac:87:8f:30:aa:2b:db:97:cf:40:da:95:
3e:83:66:47:e5:85:ea:22:82:c5:20:c8:cb:3a:53:
a7:d1:59:3d:bc:3c:61:2c:35:06:02:72:24:30:31:
f3:d7:f5:36:74:ae:90:e3:a3:0f:31:f9:4a:df:00:
01:36:cb:67:20:62:5c:31:4c:83:19:66:17:a3:18:
87:a1:0b:4f:85:7b:0a:b2:6d:62:d9:0f:e1:8c:56:
07:ed:73:36:7c:e7:1c:19:42:46:9d:7e:29:f7:96:
92:cb:26:b1:b1:a2:2a:56:a6:0d:24:ca:d2:f4:de:
26:9a:5a:d7:60:8c:2c:10:0d:7b:0f:cc:5b:5a:cb:
95:b0:99:81:38:23:e8:3f:8c:18:b2:7b:37:93:3c:
9f:aa:20:57:bd:c0:9b:aa:e4:59:52:86:63:ac:25:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F8:0B:9F:49:6D:A6:9D:4F:5F:0F:D7:19:32:F3:72:52:3C:BC:B1
X509v3 Authority Key Identifier:
keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/3D51EF7C8F0111F087307F35C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.136.75.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:05:d8:ec:a8:32:64:a8:30:f3:34:84:30:c3:7a:97:27:10:
4c:42:b1:75:4b:99:e6:50:77:31:d6:64:ff:f3:5c:f1:14:95:
e0:53:bf:8b:f6:3f:3b:90:68:83:58:94:a6:3a:ae:11:77:bf:
c4:5b:99:f6:37:85:10:0f:b9:c0:43:59:9f:5f:4a:44:e2:e6:
b7:67:ba:2e:32:12:8e:35:db:bb:8e:7f:38:23:8c:bc:e7:31:
86:7f:77:cf:88:19:b4:24:56:e1:8b:59:40:5b:52:a2:ff:ee:
32:70:0d:0f:c6:eb:15:78:64:59:65:ca:96:c1:bf:af:de:bc:
6b:63:ee:ed:6c:31:e7:15:77:33:69:38:e5:5f:b5:e7:6a:3e:
ba:be:f2:1c:7c:3f:93:f5:87:e8:b8:ae:4e:b2:f3:c8:d4:52:
c3:6f:fe:f3:88:ca:1c:21:e6:54:2d:2b:43:15:5f:94:c6:93:
6b:63:56:bb:0b:95:47:2a:87:e7:43:b0:b5:c6:02:ef:9f:6a:
83:4a:72:67:62:48:a1:8c:16:c6:6c:61:ed:86:79:be:04:87:
ce:4d:ed:2c:1e:33:93:8c:05:4a:d2:4d:5d:a7:2e:67:1c:24:
de:84:0c:fb:98:42:7f:80:cd:63:b3:16:45:46:5f:43:db:41:
e6:65:b1:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:51 2026 by rpki-client