
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/3C3F21BAD6F011EE9B38B67DC4F9AE02.roa
File: 3C3F21BAD6F011EE9B38B67DC4F9AE02.roa (raw, json)
Hash identifier: Vl3ljhabWGTlG6GqBHRNZlqYXeuSFP4BoWLikf0UCmo=
Subject key identifier: 83:B3:6F:38:C4:42:1B:C4:46:46:EC:06:9C:F0:10:70:04:7B:10:46
Certificate issuer: /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Certificate serial: 0919
Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/3C3F21BAD6F011EE9B38B67DC4F9AE02.roa
Signing time: Tue 12 May 2026 20:25:50 +0000
ROA not before: Tue 12 May 2026 20:25:49 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 150774
IP address blocks: 103.138.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl
rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329 (0x919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3CA4, serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Validity
Not Before: May 12 20:25:49 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a038ccd-6f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:06:c8:ed:db:3b:6c:f4:3a:d7:ee:7b:cb:
ef:8a:fc:38:63:a5:41:32:aa:e6:75:e0:61:5b:15:
4f:c6:de:c4:1b:aa:66:09:01:da:45:7f:75:0e:ba:
3d:1d:c6:b4:3e:25:1c:f0:91:12:fe:30:0a:91:df:
6b:f1:4b:85:f6:16:ed:95:80:1d:a4:a2:e5:5b:81:
d0:d4:4e:07:0e:aa:28:28:cd:b5:dc:72:9f:09:ed:
a7:74:87:10:f3:30:3d:d6:00:01:9a:f0:8c:40:b7:
9b:74:00:0b:ed:07:ce:82:e6:f5:2c:f0:91:18:6c:
3c:19:93:e6:25:62:24:4f:eb:4b:af:83:42:01:25:
cc:08:a0:2a:16:4f:69:6e:c2:07:a1:bb:2e:1c:79:
1f:71:f5:ba:cd:50:de:84:05:ec:f7:2f:c9:49:a0:
86:2e:30:2d:b0:b4:6e:e2:1b:8b:b0:54:c3:0c:f8:
0f:7a:57:c9:0e:a7:00:eb:4a:fd:08:b4:62:f2:21:
db:d1:d9:b9:7d:a1:08:a4:bb:f3:40:a4:b7:71:f7:
3c:8d:7c:0a:fa:ab:b9:5e:96:2e:eb:88:3f:4b:08:
ee:bd:12:3e:f3:26:18:a6:bb:4d:6f:a9:33:f9:b9:
93:82:6b:7d:9b:1e:11:82:47:dd:d4:c4:c0:89:a4:
1d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B3:6F:38:C4:42:1B:C4:46:46:EC:06:9C:F0:10:70:04:7B:10:46
X509v3 Authority Key Identifier:
keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/3C3F21BAD6F011EE9B38B67DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.215.0/24
Signature Algorithm: sha256WithRSAEncryption
58:88:81:1f:27:33:ea:b8:f4:30:74:50:4d:ea:84:02:28:f9:
3f:d4:0c:f7:05:ed:e4:fb:ca:76:ac:5a:f8:95:c5:be:05:0d:
61:9f:90:93:19:d5:f3:19:f4:01:01:4e:8d:ef:a2:a9:66:40:
a6:46:a8:77:c2:a1:1d:53:11:39:e5:13:56:9a:4a:6d:eb:77:
6b:0d:0d:dc:e2:f6:7d:e9:2b:17:60:a2:94:d2:c9:35:68:79:
64:48:d6:22:c3:6c:98:47:78:e1:9b:9c:5d:42:2e:1a:99:c8:
56:8a:3c:87:28:40:f6:fd:18:ee:73:15:4f:df:c6:db:11:d9:
0d:93:0a:f8:30:00:fe:c3:e3:e3:52:ba:15:a0:41:b3:42:8b:
e9:75:3f:0b:89:7b:fd:67:b8:e8:b7:a0:0e:88:34:d6:63:cf:
f3:52:7f:27:01:8b:41:12:1c:f2:26:73:e4:e8:95:d2:f8:e3:
5c:7b:bc:7c:c8:43:66:95:ef:41:e4:c0:b0:8a:a2:48:d8:40:
20:41:df:d6:18:67:1f:70:0b:41:60:78:67:9e:38:98:9e:e7:
d3:b3:6e:98:39:18:13:a4:e7:3c:d4:29:42:9d:be:ff:ac:8a:
19:34:eb:a4:7c:6e:ee:fa:ee:80:3d:59:3e:e4:f9:26:08:be:
af:df:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:05:00 2026 by rpki-client