
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/A3013D2A0CCB11ED97820077C4F9AE02.roa
File: A3013D2A0CCB11ED97820077C4F9AE02.roa (raw, json)
Hash identifier: TRVZ/NM/BJRiha8eAPz94grzikRFW1KWfdpr0FjIAaE=
Subject key identifier: 87:CB:CB:F9:2B:7E:40:DE:98:54:B2:B0:40:93:A5:47:8D:36:02:C9
Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
Certificate serial: 030F
Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/A3013D2A0CCB11ED97820077C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:53:19 +0000
ROA not before: Thu 25 Dec 2025 01:21:21 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 64065
IP address blocks: 103.19.36.0/24 maxlen: 24
103.88.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl
rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783 (0x30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
Validity
Not Before: Dec 25 01:21:21 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a436bf-7b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8c:61:2b:8e:68:25:8b:4c:d7:b7:b2:1f:1e:
0d:ab:5e:fd:b4:6f:83:8a:00:6a:70:5b:9e:84:79:
33:9a:fb:bb:3b:a3:43:81:63:18:34:c9:d8:ca:4b:
5f:cb:ed:a7:7f:bd:3a:13:97:21:52:eb:41:92:5b:
ec:85:94:b2:d6:70:c6:ef:a1:58:aa:f7:df:c0:79:
59:af:aa:65:fc:d0:04:5e:5f:7c:da:43:76:73:5a:
c5:3b:5f:61:6a:da:48:ee:39:84:d5:93:9f:be:d0:
8d:dc:ee:74:d1:9b:38:35:91:b6:41:ed:b6:59:1d:
dd:11:9b:c3:1b:07:66:a4:02:08:3e:9e:d4:22:d8:
f5:fd:d4:12:09:81:bc:07:8c:6c:0e:66:3a:30:8d:
d1:0f:92:ac:7e:25:11:8b:0e:9e:30:a6:db:a9:75:
b2:fa:c6:89:6d:7c:11:a5:71:dd:b5:37:4e:ed:d1:
fa:06:ba:df:63:29:73:54:01:c3:35:9b:f1:0d:d4:
70:2b:8b:ca:45:b9:b6:04:27:b8:2a:69:0a:1e:95:
52:fe:c7:b3:3f:02:ab:0e:5e:f9:cd:b5:2d:5a:6d:
b6:8e:31:b5:16:f8:b4:52:5b:08:b8:a0:61:de:53:
84:fe:e6:31:9e:b8:87:79:8e:8f:4b:f5:08:bb:db:
b4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CB:CB:F9:2B:7E:40:DE:98:54:B2:B0:40:93:A5:47:8D:36:02:C9
X509v3 Authority Key Identifier:
keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/A3013D2A0CCB11ED97820077C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.19.36.0/24
103.88.136.0/23
Signature Algorithm: sha256WithRSAEncryption
64:19:12:7e:14:94:4e:ed:92:38:16:7f:be:5e:37:4e:36:fc:
10:0c:2c:5a:43:91:63:ec:f6:8b:f5:04:96:85:03:31:ff:d5:
3b:7b:11:15:0a:c1:ff:ba:ba:b9:70:a1:0b:22:86:4d:bb:4e:
3b:24:9e:33:02:8c:3e:54:fc:8c:b2:16:dd:81:33:3d:f8:a4:
d6:8c:bf:66:cd:44:d9:40:b9:2d:41:bc:cd:43:f2:bc:55:04:
81:33:24:08:37:b0:21:31:d9:30:36:81:b8:bf:e1:5b:03:48:
c6:dd:a1:eb:b1:75:7e:85:82:d5:5d:53:d6:db:93:56:80:bc:
97:34:b3:fc:ee:86:aa:3a:a8:f9:ea:e6:c2:a9:97:bd:9e:f7:
41:38:d2:3f:18:e1:a9:03:a8:73:e1:56:45:94:82:24:a6:84:
b1:ec:3e:84:f8:d7:7e:79:8c:97:7a:69:6c:3f:98:62:44:99:
04:87:3e:f6:66:bd:91:2e:fb:8e:54:a2:89:78:b2:ea:d5:c7:
a1:0e:09:bc:3c:67:86:13:a9:3d:cb:d6:24:bf:d1:91:c5:f6:
7e:0a:10:31:c3:37:fe:4e:85:0c:ae:d9:7a:92:08:ad:82:de:
24:15:61:ca:a6:96:ec:ec:c2:3e:c4:71:9a:19:f6:5b:42:11:
af:7a:02:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:12 2026 by rpki-client