
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/AB52C51AB96B11ECB44AC533C4F9AE02.roa
File: AB52C51AB96B11ECB44AC533C4F9AE02.roa (raw, json)
Hash identifier: 9DZO4gtEwqGm1N7r2iLEutY8W3IqMNDQEag8fkVAF7Q=
Subject key identifier: 6F:48:30:C5:26:8D:61:D0:30:6B:3C:1F:B3:34:42:75:52:9E:93:9F
Certificate issuer: /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13
Certificate serial: 0EC3
Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/AB52C51AB96B11ECB44AC533C4F9AE02.roa
Signing time: Mon 16 Mar 2026 18:22:41 +0000
ROA not before: Mon 16 Mar 2026 18:22:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142128
IP address blocks: 103.137.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl
rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3779 (0xec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3D04, serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13
Validity
Not Before: Mar 16 18:22:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69b84a71-683f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:05:dc:ed:78:04:51:ec:b8:0a:89:b3:d9:
28:ee:b0:8e:0d:26:9d:f1:47:11:8c:d1:e7:1d:8b:
ec:50:29:ae:0c:9e:da:13:b3:cb:48:5b:7b:a9:90:
1c:44:66:fa:4e:08:6a:77:39:17:80:55:13:0a:7c:
5e:4f:46:f9:e8:52:94:04:94:35:ff:88:d7:f2:d9:
9b:cf:49:7b:51:21:b7:bf:43:f1:e0:19:98:5c:05:
1a:6b:7e:91:42:a3:c7:3e:1c:1c:23:4e:13:28:41:
a1:95:71:a9:ac:68:00:d0:b2:ba:03:6b:7a:54:91:
92:13:79:2d:01:e3:77:9e:4d:c1:d3:af:bd:3d:9b:
05:02:ee:f1:2b:f6:87:48:d2:37:10:d3:c2:d5:dd:
38:f6:76:00:35:9c:58:01:53:26:3b:43:4b:d7:23:
9f:e9:69:9e:d3:37:b3:7f:23:f1:ec:93:5a:72:52:
37:18:3f:7e:3e:2c:ba:5c:e5:34:5c:e0:05:46:85:
f6:2a:c2:ce:15:b1:d6:b6:bc:05:a3:23:73:1f:56:
ff:e4:3c:08:89:96:46:af:85:63:a2:06:0e:4e:0e:
1c:9b:17:2a:cc:2f:ba:97:3c:45:e5:70:49:dd:cc:
40:64:aa:9d:ad:0a:62:ae:77:92:e0:61:3a:33:d9:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:48:30:C5:26:8D:61:D0:30:6B:3C:1F:B3:34:42:75:52:9E:93:9F
X509v3 Authority Key Identifier:
keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/AB52C51AB96B11ECB44AC533C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:8e:0d:f5:8c:38:47:17:ef:b6:4e:41:e0:fe:40:a7:7f:8d:
ac:5b:05:66:23:df:50:4c:ad:a7:a0:b1:aa:48:b7:dc:60:14:
18:5e:01:1a:8e:c4:b3:0e:d8:7c:a9:71:33:91:5a:d2:77:db:
44:86:ee:55:63:1f:b9:3a:65:e3:ac:ad:3f:df:42:92:6d:88:
6c:b2:15:9f:fd:16:37:69:80:ef:5a:d5:f2:69:3a:cc:ab:22:
3e:cc:c7:86:9c:88:41:83:e6:b0:b9:fa:b3:46:40:cc:17:8f:
21:ac:37:32:fe:93:16:57:ac:5a:96:2f:77:37:24:28:49:4e:
98:01:de:a2:51:89:d4:bd:12:ce:28:81:66:f6:6a:b8:3e:d0:
a8:c4:8e:c3:5c:0f:38:de:95:ff:5c:dd:ed:24:28:b6:fb:96:
6a:3f:d3:ea:93:9a:b3:02:c3:af:a6:91:22:d9:50:72:aa:8e:
6d:99:21:1b:bf:27:6e:f1:bb:25:8a:5e:5b:07:28:31:a0:cb:
60:4a:6c:00:6d:41:05:85:00:05:9f:93:1a:77:15:b8:12:c1:
f8:c1:00:c3:67:a1:9f:dd:5c:03:5d:c9:26:ed:a0:f7:df:fa:
f7:4f:f0:cd:89:c9:66:b5:a8:27:cc:6a:5d:be:f2:22:f0:3f:
78:f0:e7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:24:26 2026 by rpki-client