
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/36837F32574A11EC911FAC86C4F9AE02.roa
File: 36837F32574A11EC911FAC86C4F9AE02.roa (raw, json)
Hash identifier: wBrg9EM4NwDkdFMcEqz/Qv1QuFLGEbWiLtavdDRu3+I=
Subject key identifier: EF:BA:2B:8A:7E:B5:78:B6:28:AC:3D:2A:88:09:18:38:BA:B1:56:06
Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
Certificate serial: 04DD
Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/36837F32574A11EC911FAC86C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:47:12 +0000
ROA not before: Fri 17 Oct 2025 02:05:52 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 64058
IP address blocks: 103.195.54.0/23 maxlen: 23
103.195.54.0/24 maxlen: 24
103.195.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl
rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1245 (0x4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152643, serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
Validity
Not Before: Oct 17 02:05:52 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a43550-18ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cd:72:bd:ec:7b:16:fd:5a:f8:91:49:7d:ce:
02:1b:5e:2d:56:20:93:3f:d8:25:e9:7e:88:fd:36:
45:64:15:20:00:65:f1:8d:5f:7b:84:f8:42:90:14:
88:10:d7:a1:14:56:c5:2f:67:ca:c0:a9:4a:3c:53:
28:bf:df:13:b5:f4:6d:14:ce:4d:f2:8c:db:a4:fa:
d9:65:ac:cd:01:83:a5:b7:cc:73:25:d8:a7:66:3a:
d4:36:f3:db:d6:a3:9d:9b:c6:48:9e:96:aa:ff:56:
a0:0d:d8:2b:17:29:e5:58:92:b7:85:e4:ba:d4:0a:
28:03:56:5f:82:ee:1c:93:11:00:1f:bc:f7:7e:d8:
a5:3b:27:2f:28:b9:c0:f5:8b:e1:1c:84:91:b4:73:
b0:21:cb:14:bc:06:14:41:26:88:6d:b7:34:e5:19:
3e:e5:f3:91:6d:f1:a9:50:c2:cf:52:a4:a6:7b:56:
67:bc:dc:86:a9:22:10:40:aa:c8:75:84:1d:d2:8f:
ff:f6:40:54:1a:62:27:3c:09:37:c3:63:83:28:a7:
bf:09:a6:18:12:8d:e1:ee:f6:30:0b:d6:97:1c:d2:
1b:27:1c:29:9f:06:cf:3c:12:3c:96:75:96:9a:3f:
5e:c6:af:83:d6:6b:fc:dc:9a:6f:b5:c1:ec:77:d0:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BA:2B:8A:7E:B5:78:B6:28:AC:3D:2A:88:09:18:38:BA:B1:56:06
X509v3 Authority Key Identifier:
keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/36837F32574A11EC911FAC86C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.195.54.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:73:19:ec:b5:dd:a9:c9:ad:fa:34:dd:92:79:77:b5:6e:ad:
48:8f:00:ed:19:71:fb:68:f8:04:a1:6a:3e:dd:a8:7a:bd:af:
03:90:55:42:65:64:df:9b:85:72:26:e7:e6:f7:a6:ec:84:89:
3d:fa:d6:ce:19:6f:3f:3d:3a:76:60:9c:ee:06:ac:ad:3d:a5:
87:da:41:25:f0:57:f1:86:fe:d3:de:e2:aa:a6:5f:13:6e:ac:
d1:eb:40:38:fd:a2:8e:10:71:87:24:7e:b1:73:ba:fd:c3:4f:
7f:d9:b9:60:9e:47:14:aa:9a:29:e6:95:0b:3a:c2:51:8c:08:
2f:42:e4:5a:60:69:54:c0:ac:0c:ce:c6:81:06:f6:26:93:15:
ca:6e:8b:91:c6:8b:65:c9:a8:8b:2b:0a:e6:b5:f7:26:b3:3f:
91:80:b3:bf:b0:a5:9e:8a:43:40:80:80:a0:0b:e7:ca:57:40:
29:fd:a5:45:7e:1a:be:e5:5e:ea:0a:d2:09:58:f3:69:48:82:
ee:36:dc:71:f6:1e:0a:47:12:b1:3a:e8:fe:e3:7b:c4:05:25:
b4:77:a4:b4:40:35:c3:8b:0e:9e:64:1d:b0:2d:98:49:ad:80:
11:c4:af:96:0d:a4:62:27:26:4f:c0:64:21:8f:81:5a:f8:9b:
9d:79:df:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:04 2026 by rpki-client