
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/36F0A6E6370811ECA61C8B38C4F9AE02.roa
File: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (raw, json)
Hash identifier: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=
Subject key identifier: E4:10:23:8C:7E:3F:39:CC:AA:7F:76:D3:DC:26:FF:2C:C1:70:B6:C5
Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Certificate serial: 0A0B
Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/36F0A6E6370811ECA61C8B38C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:40:23 +0000
ROA not before: Fri 24 Oct 2025 21:09:23 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 136950
IP address blocks: 103.142.100.0/23 maxlen: 23
103.142.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:55:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2571 (0xa0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Validity
Not Before: Oct 24 21:09:23 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45de6-9d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:45:58:7f:75:bd:fe:55:0e:3b:20:b9:fc:
5f:44:ba:1c:0a:04:51:ef:c3:21:89:45:0c:92:7e:
e9:3c:38:6b:6e:04:1b:a3:18:3d:69:eb:f9:7a:05:
08:66:31:4f:4e:d7:9b:0b:bf:53:28:c5:25:ba:89:
f2:45:56:6f:9f:55:16:49:82:3b:2f:14:56:35:85:
31:95:b5:43:1e:2f:13:b3:07:dc:14:72:00:df:52:
2d:51:03:b2:5b:b6:b3:96:1e:a3:da:77:c3:d6:ab:
fb:db:da:3e:e5:0e:0a:d2:8d:bf:2b:b1:b2:90:68:
f4:00:26:c0:c3:80:29:70:d1:d7:a7:45:31:c0:8f:
76:9a:55:66:fa:46:a0:33:32:53:c6:ea:75:58:49:
a6:29:3d:73:fd:a8:50:a2:66:dd:cb:6e:b0:5d:b6:
7b:be:5e:89:1d:31:3b:2f:e1:5d:ed:d4:4a:55:a3:
4b:03:39:ae:95:01:74:e5:f7:e7:86:5b:91:aa:4e:
33:77:e7:5b:47:d4:9a:f2:42:36:65:31:d3:d5:d9:
a2:39:b9:0d:61:ba:82:ef:35:54:a6:eb:53:00:33:
ee:59:90:d5:84:9f:f4:8b:5b:e7:9d:24:91:40:db:
96:67:83:a6:10:b5:b2:dd:76:76:83:1c:cc:26:3f:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:10:23:8C:7E:3F:39:CC:AA:7F:76:D3:DC:26:FF:2C:C1:70:B6:C5
X509v3 Authority Key Identifier:
keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/36F0A6E6370811ECA61C8B38C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.100.0/23
Signature Algorithm: sha256WithRSAEncryption
37:cd:77:ac:5b:e5:01:2f:e7:29:1d:b8:7e:0f:8b:32:21:1e:
6a:fd:95:22:21:2d:d0:9a:a3:e7:ed:c9:73:d9:cd:18:38:d7:
8e:b5:4d:3a:0b:a1:46:47:6f:59:43:2e:ef:7d:b5:57:ab:f4:
03:46:e0:94:70:0b:d3:95:90:0b:22:f1:fc:94:2c:e1:4e:23:
a8:d8:dd:ea:44:af:9e:6c:15:a2:64:29:07:ac:76:50:f8:ab:
eb:93:84:b2:cb:62:24:40:a2:2f:f3:09:f1:0c:41:09:d6:e1:
81:d2:19:40:2a:1b:a9:d9:79:c8:42:8b:62:e0:a8:a4:c9:ae:
72:5d:02:43:0b:b3:55:d4:ba:b1:12:be:ee:2a:8b:cb:12:a0:
5d:4f:1e:30:90:43:a3:0f:4c:47:ed:33:d3:b7:b9:b1:be:3f:
e1:50:df:5b:b1:a0:44:3b:cf:06:46:80:1f:95:cf:9b:2c:c1:
40:10:13:12:4a:d6:03:39:69:5d:f1:cb:b8:f3:4a:fc:7b:f2:
28:d7:5d:ec:cd:3c:c4:d4:e7:c9:7a:f8:2b:fa:77:9c:e2:29:
21:a5:ac:08:80:90:5f:29:9d:af:de:e3:e0:dd:a2:7a:c8:7a:
b8:2e:c9:65:44:18:27:ff:7b:84:71:fb:5a:1f:cf:4d:9c:22:
66:48:48:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:15 2026 by rpki-client