
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/AFA37450139811EA807F1A26C4F9AE02.roa
File: AFA37450139811EA807F1A26C4F9AE02.roa (raw, json)
Hash identifier: Y1iY5bDdtF14xe5+ecYddY6nYDDRlZBhph8kiu8Him8=
Subject key identifier: C8:6A:35:26:AF:9B:BA:C1:19:B6:1A:BC:23:11:B9:C0:99:04:91:6D
Certificate issuer: /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Certificate serial: 1B18
Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/AFA37450139811EA807F1A26C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:27:52 +0000
ROA not before: Thu 22 Jan 2026 16:12:55 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 24389
IP address blocks: 37.111.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 15:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6936 (0x1b18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3A74, serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Validity
Not Before: Jan 22 16:12:55 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a45af8-3c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:49:4b:10:8e:d9:dd:64:51:f4:ec:cd:95:
8c:a6:22:47:ac:62:f4:ef:57:ea:51:57:2a:9c:45:
fa:e7:2a:ee:6e:45:fd:b3:ec:fe:f5:3f:4d:be:6d:
05:aa:2e:51:6a:f9:45:b1:8e:b0:bf:a2:94:ab:9a:
39:53:7c:e2:31:af:61:37:f2:a3:4e:86:01:77:b2:
3a:a8:f7:bc:6a:1e:e3:8c:83:26:3c:5d:76:50:71:
6f:c9:c0:05:bb:6a:42:59:c4:7d:2f:2a:9d:44:97:
6c:73:58:e8:bb:11:94:a1:57:39:de:ed:24:ed:d0:
bc:97:0b:f8:b1:11:ea:0a:cb:7a:cf:4a:5a:54:4e:
3c:56:c5:6c:d3:4d:68:61:62:d4:a2:d6:1a:8f:65:
ac:4b:2e:8d:b7:4d:de:8f:3e:28:c0:98:33:16:f8:
87:13:29:d1:2f:29:f9:00:7c:7e:de:2d:97:e1:7e:
f4:ce:12:ab:46:ef:6b:ce:30:b8:3d:44:e1:0b:c3:
a2:d1:90:c2:85:6f:1c:e9:21:5d:82:af:05:9d:4d:
42:9a:e6:8d:63:47:1e:b9:c7:9c:51:75:e2:4c:96:
b5:de:0a:62:45:2a:4e:00:db:d0:d5:0f:3a:fd:d8:
db:54:3f:a0:c5:3c:24:b1:08:89:dd:8a:ab:3a:0e:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6A:35:26:AF:9B:BA:C1:19:B6:1A:BC:23:11:B9:C0:99:04:91:6D
X509v3 Authority Key Identifier:
keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/AFA37450139811EA807F1A26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
37.111.192.0/18
Signature Algorithm: sha256WithRSAEncryption
be:a3:eb:0d:f5:4c:6e:73:ce:34:11:bd:8d:07:d2:a3:6b:00:
0c:72:7a:a7:ea:87:0c:d9:4a:27:b2:40:bf:92:bc:24:81:07:
9b:be:b0:fe:d1:a3:f1:8a:1c:f8:5c:9e:bc:78:4f:45:99:bd:
4b:70:9c:94:9a:31:8b:08:69:9c:c1:de:64:cc:27:2e:af:49:
2f:fa:9e:cd:c2:7d:19:77:b5:31:3d:33:ce:5f:d8:16:2b:79:
43:7b:e2:19:51:91:77:c2:47:00:09:03:e2:fc:ea:5f:fa:f9:
92:cd:1d:ab:31:b8:56:6d:37:bd:a7:c1:4b:33:97:0f:d5:ca:
7d:96:67:6c:d4:a4:0f:50:66:e6:e1:54:23:03:bd:ba:30:1a:
51:93:a9:89:01:8a:c5:7e:b6:a3:4a:8d:07:a7:db:09:90:9c:
2e:33:59:17:bc:fd:ea:8c:8e:aa:86:cb:97:66:e5:70:7b:30:
97:f5:ed:64:34:5d:6b:0f:ad:f2:9c:e5:61:83:15:40:c6:e2:
0f:63:38:e9:b2:96:1e:8c:ea:86:5f:4e:4b:ae:e9:da:f6:c3:
4c:78:d7:b9:53:09:14:a0:8a:22:0e:d5:9d:7d:9f:7a:77:36:
f2:e1:2b:66:3d:68:1b:a0:e1:5a:b0:0c:67:38:8a:22:eb:90:
ca:39:f6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:34 2026 by rpki-client