
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/38702E769AF611ED8D41985BC4F9AE02.roa
File: 38702E769AF611ED8D41985BC4F9AE02.roa (raw, json)
Hash identifier: nnTjgZ46HqO0Mpo0brQW7RdIt/A/0sbmdcDjLarFt5g=
Subject key identifier: CF:30:2B:0C:34:1F:DF:DB:78:57:28:5D:DF:F0:C2:82:97:A5:7D:6B
Certificate issuer: /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Certificate serial: 0265
Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/38702E769AF611ED8D41985BC4F9AE02.roa
Signing time: Sun 05 Apr 2026 02:35:33 +0000
ROA not before: Sun 05 Apr 2026 02:35:33 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 134732
IP address blocks: 103.72.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Validity
Not Before: Apr 5 02:35:33 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69d1ca75-a8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:05:46:91:3d:78:97:43:c5:79:59:17:0e:
b5:c3:24:d7:0a:75:5f:45:a8:9b:91:4a:e1:39:be:
2f:e4:4d:cb:52:eb:0a:bc:d3:65:26:f7:9e:a4:c0:
54:d2:0b:41:a2:98:a7:72:01:a3:fb:e8:51:18:bf:
32:ce:c8:36:01:76:1a:e8:dd:25:87:f4:19:ca:ea:
b5:e9:c1:01:d0:33:8c:61:64:5a:aa:64:2f:d2:12:
fc:47:64:66:62:80:01:cc:42:b3:ff:c7:c5:00:50:
aa:0a:e2:9b:0b:75:a3:92:13:0e:eb:1f:db:c2:df:
37:0f:9e:95:73:46:8d:c1:cd:a0:2a:9d:f7:29:8c:
97:c6:15:f9:40:5e:dc:c6:27:83:ff:17:13:97:f3:
5c:01:9c:bb:81:5a:7c:36:f3:7f:a7:3a:d0:42:9e:
3f:06:bb:93:11:ea:c3:15:50:46:ab:18:58:e2:82:
2e:c0:82:f5:62:5b:61:f2:0e:7f:3d:de:56:c5:33:
c9:53:55:b5:25:22:8d:f9:16:d6:ff:30:fb:f4:db:
d6:6c:0f:cf:e9:e2:55:dc:de:2a:f8:59:53:37:fc:
23:1a:c5:78:9b:3f:34:57:cc:3e:60:0d:11:9c:aa:
20:10:01:ba:5e:4e:06:63:91:7f:08:2e:e4:93:af:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:30:2B:0C:34:1F:DF:DB:78:57:28:5D:DF:F0:C2:82:97:A5:7D:6B
X509v3 Authority Key Identifier:
keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/38702E769AF611ED8D41985BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.72.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:de:2f:84:ab:19:a7:77:8d:c6:a8:18:6c:76:ae:d8:bf:94:
01:ac:dc:c8:ec:20:6b:f1:8f:f5:5c:ab:69:7d:c3:fb:35:8e:
58:84:76:fd:86:d1:45:32:f7:53:aa:e7:78:e6:bd:66:a2:31:
ec:14:13:36:1e:91:5c:da:b8:ab:e6:9c:bb:49:a6:cf:4b:2b:
32:65:62:2d:9a:0c:b8:c2:e5:a5:c0:d8:71:0e:59:73:c0:02:
58:bb:88:8c:a8:1b:8b:66:46:2f:98:43:98:44:ab:27:bc:d0:
fe:e2:e8:4a:24:4e:b8:1a:8c:cf:84:7e:84:94:a2:87:fb:88:
1a:98:31:93:ab:7b:1b:28:ee:0b:ea:9d:ef:1f:04:2f:91:a4:
5e:69:7e:0a:fa:23:9f:a3:14:8a:2c:d6:87:9c:e4:fd:88:2e:
44:57:ed:4a:44:0b:a3:95:65:83:8d:02:b8:dd:c6:c5:f2:ef:
eb:95:dc:b0:7f:80:fb:42:a8:6e:17:7d:98:c3:e7:dc:3f:f3:
f8:42:ea:0f:2d:95:2a:6c:68:8c:51:ec:56:08:70:81:66:4b:
7f:2f:15:cd:ca:ca:72:1e:5f:f5:2b:06:a2:70:36:e4:b7:d9:
54:8c:a4:3d:bf:a5:19:e1:b0:87:56:39:0f:38:6f:59:c4:fe:
ee:11:bd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:39 2026 by rpki-client