
$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/37A0ACFC8FCD11EDB4772D55C4F9AE02.roa
File: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (raw, json)
Hash identifier: TNBEB8bv/VEmVVea2OmlN0ueyYUZVCLkiz8lmx3cgdU=
Subject key identifier: 04:F9:A3:62:0D:AD:16:93:9B:41:64:10:71:17:F8:ED:96:7A:54:66
Certificate issuer: /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A
Certificate serial: 0250
Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/37A0ACFC8FCD11EDB4772D55C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:07:17 +0000
ROA not before: Sun 19 Oct 2025 05:07:14 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 137941
IP address blocks: 103.250.196.0/23 maxlen: 23
103.250.196.0/24 maxlen: 24
103.250.197.0/24 maxlen: 24
2400:aa60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl
rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A
Validity
Not Before: Oct 19 05:07:14 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a40fd5-c1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:9c:23:df:eb:37:87:4f:3c:57:6a:85:59:
60:61:1a:cc:6d:ce:e0:ac:64:4a:7d:f3:f1:47:87:
e4:77:0b:db:a5:90:9f:29:6a:3f:e3:30:27:ab:d0:
59:ee:bf:4c:fe:ed:3c:cb:9b:36:56:88:47:37:43:
bc:cc:d5:be:7e:d2:dc:30:ee:dc:ad:a1:f0:99:07:
b4:c1:76:4d:f1:0e:be:46:1c:00:a4:96:91:87:69:
41:7c:39:d5:2f:2c:ec:4d:88:7a:d8:03:62:ec:c8:
4c:47:53:9c:34:d3:75:e9:3a:4a:80:32:c1:bb:87:
25:d4:eb:c8:fc:4d:d6:d6:48:a0:31:36:01:f7:ac:
db:45:c2:6e:28:71:4f:d4:1c:03:b9:b8:31:4e:47:
05:32:6c:26:0c:9a:64:06:61:c7:70:dc:59:9c:14:
ac:21:c0:fa:05:f9:ca:66:ad:3b:78:07:c4:ae:8b:
8e:b7:09:68:37:7b:41:19:38:0b:21:c6:ac:0b:c1:
d2:a7:52:72:8c:0d:20:8c:9f:8b:1b:01:6e:78:e8:
7c:b5:8c:a0:0c:36:d6:70:1c:c2:7f:b1:48:5a:94:
94:d8:61:c9:c1:c8:60:54:40:02:ef:e2:e5:af:1c:
e1:01:73:4e:b3:e7:77:ce:80:83:4c:05:99:a1:ca:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F9:A3:62:0D:AD:16:93:9B:41:64:10:71:17:F8:ED:96:7A:54:66
X509v3 Authority Key Identifier:
keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/37A0ACFC8FCD11EDB4772D55C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.250.196.0/23
IPv6:
2400:aa60::/32
Signature Algorithm: sha256WithRSAEncryption
5a:18:5c:8f:11:05:67:53:2d:84:67:22:26:ba:6e:44:06:82:
ac:36:00:bc:ed:5b:77:a2:83:f7:2e:07:68:87:86:5d:08:b8:
96:60:96:e5:85:f0:a8:99:08:52:01:06:ce:d3:f0:c6:60:16:
08:3d:23:1e:a1:7f:bd:d6:51:85:57:11:6d:47:1b:87:e3:2a:
ae:3e:51:ce:05:0c:10:15:7d:92:40:5e:87:64:f5:3f:65:87:
4b:09:17:96:04:12:bc:ab:8a:3c:43:e8:2b:8b:96:88:77:4b:
df:1e:7c:bf:17:9f:d0:d1:42:a8:eb:b5:fc:e4:d3:b3:3d:1d:
bf:a9:75:c0:3b:52:10:cd:22:0f:b1:f1:32:b9:2b:03:8a:4a:
88:49:ec:0e:ee:48:25:90:42:d5:2c:d8:35:45:f3:22:32:2d:
8e:21:7d:26:fe:3e:74:21:a0:05:56:85:44:dc:78:6d:c5:df:
bc:6a:f8:1b:b6:da:e2:cf:4c:e2:3f:fe:c8:58:83:76:6f:96:
d6:a9:f5:bf:68:fb:d2:b9:6b:93:ed:68:5a:f2:c2:0a:20:3b:
0f:9a:64:e0:0c:d2:2f:0d:39:fa:c8:b1:6a:7c:d5:63:da:9b:
ce:59:8e:7c:ed:28:1e:08:8e:c3:e2:23:68:19:f6:45:ad:f4:
42:2c:cf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:22 2026 by rpki-client