
$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa
File: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (raw, json)
Hash identifier: 40R+DRWbI6AD7X69y+O2s0U8qVSzuQdPnKR80+3niV8=
Subject key identifier: 43:B5:6D:9E:BA:98:5E:FC:31:35:38:A1:F9:E4:E0:1F:F3:7E:B6:A4
Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial: 0C66
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:42:22 +0000
ROA not before: Thu 26 Jun 2025 18:43:06 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 131270
IP address blocks: 103.68.160.0/22 maxlen: 24
103.232.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3174 (0xc66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Validity
Not Before: Jun 26 18:43:06 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4261e-f40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:5b:53:56:d5:8e:6b:5a:8c:2d:01:91:a2:
ee:17:ce:64:ec:a7:a9:6f:91:6c:82:7a:44:23:8f:
4e:87:49:d8:54:d6:3b:13:97:a3:c9:f5:9a:b0:d6:
3c:7f:22:2a:44:e4:ed:c9:04:48:46:25:6f:d0:57:
29:af:d8:44:f9:ba:9d:f8:27:7c:f0:23:f8:d1:c5:
e5:3e:88:d7:bc:7f:73:9c:a4:f4:1e:d2:9d:10:00:
7f:9e:28:97:e8:c4:e0:e6:1a:6e:fc:43:7c:e4:15:
ac:09:09:51:ae:3d:41:b0:e2:d6:c6:43:81:27:94:
29:e2:65:aa:77:4b:8b:f9:ae:7b:12:8a:7a:7f:ef:
d5:09:4e:8e:02:c2:f4:ee:71:84:25:56:83:ce:67:
97:33:89:26:63:4c:68:2e:e0:d9:1b:96:52:04:88:
c1:fd:16:3a:76:9e:f7:80:ce:82:2c:84:46:3a:c9:
8a:c6:b7:da:32:d4:26:3b:0b:59:fa:87:9d:03:07:
41:2f:88:ed:fc:0f:00:2f:7d:0d:ba:43:b1:65:16:
73:48:50:c9:a5:de:5f:cc:5e:d7:94:e2:ef:b1:b4:
7d:56:00:dd:66:d2:5b:c2:16:0e:3b:69:ac:31:65:
f1:61:7f:b7:d6:11:93:80:1e:08:7c:d0:bd:b2:76:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B5:6D:9E:BA:98:5E:FC:31:35:38:A1:F9:E4:E0:1F:F3:7E:B6:A4
X509v3 Authority Key Identifier:
keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.160.0/22
103.232.76.0/22
Signature Algorithm: sha256WithRSAEncryption
10:93:d4:7c:35:39:39:b9:d8:4e:bc:a1:9f:86:ba:9c:8f:b8:
fe:f5:e5:5b:d2:24:3c:c8:a1:bb:44:69:b2:25:66:e8:00:d5:
fb:b4:7b:24:d9:37:41:db:25:49:6c:fc:9d:66:42:8d:d5:89:
c3:61:0a:01:38:62:37:de:0b:a0:34:28:4c:98:fe:b1:4d:42:
a3:5a:3e:be:c5:48:31:83:f9:a1:fd:0c:5d:6a:70:ad:d7:33:
5f:82:55:c1:14:4a:b0:0f:63:02:b7:00:ff:f5:36:de:3f:86:
90:e1:75:15:34:00:3f:d0:49:61:d7:c7:32:22:ff:f5:aa:b6:
db:c1:05:35:f8:3b:85:7e:c9:cc:b8:6e:d3:6b:06:9c:63:7c:
b2:59:c2:aa:52:07:17:2f:be:72:3b:52:7e:99:5e:3d:03:4c:
2b:70:e1:2b:fd:5b:48:a5:40:c5:79:9a:09:32:de:8b:9c:8b:
57:ad:94:f8:b2:45:93:44:8e:8c:25:60:20:e9:93:e7:10:83:
64:50:63:ef:ec:95:e7:0a:68:38:1b:dd:6b:20:c6:e1:41:51:
73:dd:18:cb:14:59:93:27:3f:aa:42:b8:6d:42:f8:b5:2d:bc:
08:7c:17:23:f0:cc:ef:29:13:57:ce:8e:0f:98:55:e5:9d:f2:
d6:b0:c0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:28 2026 by rpki-client