
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa
File: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (raw, json)
Hash identifier: ahWWs0kZBjkLDlGiJDE5aUNwMLJFe7OoP0FqUJEFa+k=
Subject key identifier: B6:0C:C1:63:96:DD:62:E9:77:26:C7:8F:88:12:A8:53:D3:49:B9:F3
Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial: 05ED
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:18:03 +0000
ROA not before: Thu 20 Nov 2025 06:55:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55470
IP address blocks: 202.41.64.0/24 maxlen: 24
202.141.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1517 (0x5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Validity
Not Before: Nov 20 06:55:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a482db-db75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:87:56:b5:85:56:5d:33:0d:db:6d:11:87:
ab:22:f8:ac:b9:73:aa:cf:03:63:ab:4b:47:8a:d7:
1b:30:94:d6:29:b3:3d:14:66:03:56:1d:8d:28:66:
c4:29:5e:ab:dd:0e:4d:5e:20:fa:cc:6a:3d:26:2a:
15:3c:41:ee:40:4e:dd:ac:ba:d1:95:8a:3c:f3:8f:
d7:17:6a:d0:ad:68:f4:41:e6:21:6a:1a:fc:cb:bf:
a0:10:e5:61:57:82:a7:de:f0:44:c3:94:b4:a3:c7:
b5:2b:35:19:f3:5a:ef:2c:77:bb:29:be:41:da:33:
f6:5d:eb:cd:9e:b5:53:ab:a9:26:c8:84:72:b6:cd:
9e:79:53:b0:5c:7e:29:d8:53:a5:53:11:74:29:34:
46:38:bd:94:9b:31:e7:40:c3:fe:1e:09:38:75:a3:
ab:5f:4c:ca:01:70:2c:6c:95:9a:a8:8a:08:cc:b0:
de:53:dc:fd:61:34:a5:89:8f:49:d5:f9:26:ac:17:
67:23:a6:69:80:70:35:91:f7:bb:17:57:c0:84:dd:
75:84:92:8f:2b:dc:b0:16:6f:e3:ca:6a:8e:30:8e:
1c:6f:03:c9:60:e2:3c:66:76:bf:6d:1c:66:79:52:
9f:62:c0:8a:14:75:1c:47:54:fc:2e:aa:01:f7:65:
cb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0C:C1:63:96:DD:62:E9:77:26:C7:8F:88:12:A8:53:D3:49:B9:F3
X509v3 Authority Key Identifier:
keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.41.64.0/24
202.141.133.0/24
Signature Algorithm: sha256WithRSAEncryption
18:66:20:85:0b:be:c5:b9:4d:f2:98:84:1c:0b:98:f7:2a:00:
40:7b:86:db:1e:5b:18:1c:aa:8a:9f:32:15:b0:c0:92:c2:e9:
02:f8:d0:3b:6b:88:77:b8:a3:56:46:30:e2:c5:5b:25:11:86:
c1:19:11:b7:3d:0b:17:41:57:ad:5f:a3:f5:0f:ac:57:e2:61:
ee:65:5c:64:42:24:65:d7:f5:8a:de:6c:15:40:43:ff:9d:1a:
31:7f:f9:53:fe:2d:28:5e:43:7b:44:b7:66:58:e6:d8:1f:2c:
6f:9e:6c:8f:80:10:cf:f0:d9:96:bd:9b:c1:fa:87:58:5f:de:
d8:44:88:37:d7:6d:7f:7d:a9:6b:0b:ff:a6:84:51:d8:95:b5:
67:21:18:cf:fd:12:e3:77:79:25:d6:13:f5:b0:aa:2f:61:8c:
ed:92:45:c0:8a:30:db:33:5a:a0:2e:43:92:7a:e5:47:58:15:
55:0b:0e:fc:c5:ca:9a:8c:e4:f2:3f:a8:df:4a:87:2b:55:3f:
43:10:e7:38:6f:43:d1:54:f2:d2:3a:57:37:94:3c:e0:91:0a:
e5:09:ba:3a:4a:9b:95:4a:d2:9b:35:6d:89:07:11:05:0f:c6:
17:a2:6b:4b:5f:93:cf:46:74:43:6a:32:6d:3b:f8:33:a7:aa:
99:42:6a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:19 2026 by rpki-client