
$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/38361A086DD311F08BB89272C4F9AE02.roa
File: 38361A086DD311F08BB89272C4F9AE02.roa (raw, json)
Hash identifier: 2lrhUXtKBWBWGt7uGRm4aZdQcxwMjfeEEWsYi96Nx0s=
Subject key identifier: 4B:2B:14:FC:23:E7:06:F7:53:0A:B1:24:42:57:A1:22:F5:0E:25:19
Certificate issuer: /CN=A91907D3/serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
Certificate serial: 7B
Authority key identifier: D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/38361A086DD311F08BB89272C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:12:54 +0000
ROA not before: Thu 31 Jul 2025 05:57:20 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153861
IP address blocks: 165.99.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl
rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91907D3, serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
Validity
Not Before: Jul 31 05:57:20 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3e6f6-0b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:3f:06:bc:09:a2:c9:95:d9:b2:27:fd:8e:
26:fe:1c:4c:7c:3f:24:c0:67:fe:61:92:60:15:35:
63:68:4a:11:68:fe:fd:f6:b9:0e:d6:d9:02:dd:c4:
a3:1d:e1:68:e2:d2:aa:d9:18:27:85:ab:a2:27:30:
82:9a:90:25:90:a4:c6:7a:1b:0e:ad:2d:e5:f7:64:
6b:62:68:7c:18:02:77:f7:78:b4:f4:23:25:46:a7:
af:49:48:1b:79:83:5e:b2:37:e9:f9:4a:ec:5c:77:
8d:a9:d3:e4:c8:b0:64:3a:f4:15:9f:a3:03:b1:b8:
f4:c1:83:12:47:bb:40:eb:69:bc:ea:89:1e:35:3d:
ce:6c:70:33:e5:53:00:53:52:20:b9:f3:70:61:84:
de:80:9d:2d:41:3d:c0:69:86:73:0f:42:20:02:90:
95:f8:52:70:59:2b:14:8b:26:42:6f:3b:77:f2:ea:
ef:6c:04:0f:2f:2c:64:24:c6:2b:31:e0:39:b2:ef:
e1:49:48:70:25:90:07:da:56:18:e4:aa:62:c9:e9:
11:68:e3:c3:b4:12:ec:91:e8:63:ac:da:2b:e5:d9:
e9:c6:f1:58:1f:6d:54:a6:d0:a2:b8:67:a3:44:2a:
9e:c4:1a:9b:a3:2c:dd:a1:3a:77:69:fa:6e:59:ef:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2B:14:FC:23:E7:06:F7:53:0A:B1:24:42:57:A1:22:F5:0E:25:19
X509v3 Authority Key Identifier:
keyid:D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/38361A086DD311F08BB89272C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.2.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:b8:d4:60:d3:89:0f:ab:ff:a1:1d:db:d1:c3:1c:d5:d3:3f:
84:36:7a:47:f8:5f:4e:9c:0d:4e:dc:50:e1:b9:83:a2:38:5b:
44:63:8f:b9:7d:49:ce:c2:b7:f3:50:b2:1a:87:d9:c8:f3:77:
c5:40:ff:23:22:20:eb:1f:1e:0d:82:70:da:72:bb:fa:53:0e:
3e:20:d1:e1:0d:27:0d:f5:dc:72:b7:ec:84:9f:65:fa:e9:c3:
d6:02:b9:f9:09:25:ac:1b:33:9d:f3:de:e1:5f:d5:d7:fb:aa:
a8:4c:d1:95:16:ae:68:c3:fa:20:87:0d:18:09:67:26:e4:77:
28:bd:b5:07:80:a5:aa:25:60:52:a9:85:14:b2:b8:43:c7:df:
a7:ac:89:fd:b1:e5:a3:93:11:1f:64:d8:43:94:27:6a:c7:b4:
53:bd:b7:0d:8f:23:4d:30:9c:38:45:1d:19:d6:62:72:42:01:
c3:23:3b:b4:79:77:22:8b:f5:ce:8d:f6:48:c6:90:3e:cd:64:
b6:0f:3b:a9:6d:0b:e5:6c:63:eb:d6:18:67:d7:c8:ce:56:60:
da:b9:a1:31:e1:62:d5:1f:29:08:64:73:b7:9d:84:06:4f:de:
e8:36:f7:2b:ef:20:cb:e0:ee:4b:bf:f1:13:4e:7c:d1:1b:6e:
5d:46:ae:9a
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MDdEMzExMC8GA1UEBRMoRDVCNEQ2QzQ4MEJCRTk2QkFCQzg3MjI0ODUwMjVENEM0
NUZFQzc4QTAeFw0yNTA3MzEwNTU3MjBaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNlNmY2LTBiMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCr7T8GvAmiyZXZsif9jib+HEx8PyTAZ/5hkmAVNWNoShFo/v32uQ7W2QLdxKMd
4Wji0qrZGCeFq6InMIKakCWQpMZ6Gw6tLeX3ZGtiaHwYAnf3eLT0IyVGp69JSBt5
g16yN+n5Suxcd42p0+TIsGQ69BWfowOxuPTBgxJHu0DrabzqiR41Pc5scDPlUwBT
UiC583BhhN6AnS1BPcBphnMPQiACkJX4UnBZKxSLJkJvO3fy6u9sBA8vLGQkxisx
4Dmy7+FJSHAlkAfaVhjkqmLJ6RFo48O0EuyR6GOs2ivl2enG8VgfbVSm0KK4Z6NE
Kp7EGpujLN2hOndp+m5Z7zkbAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUSysU/CPn
BvdTCrEkQlehIvUOJRkwHwYDVR0jBBgwFoAU1bTWxIC76WuryHIkhQJdTEX+x4ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwN0QzLzM4RkIyMTVDNkM1
OTExRjBBMzg4NEU3QUM0RjlBRTAyLzFiVFd4SUM3Nld1cnlISWtoUUpkVEVYLXg0
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMWJUV3hJQzc2V3VyeUhJa2hRSmRURVgteDRvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDdEMy8zOEZCMjE1QzZDNTkxMUYwQTM4ODRFN0FDNEY5QUUwMi8zODM2MUEwODZE
RDMxMUYwOEJCODkyNzJDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGlYwIwDQYJKoZIhvcNAQELBQADggEBAKO41GDTiQ+r/6Ed29HDHNXT
P4Q2ekf4X06cDU7cUOG5g6I4W0Rjj7l9Sc7Ct/NQshqH2cjzd8VA/yMiIOsfHg2C
cNpyu/pTDj4g0eENJw313HK37ISfZfrpw9YCufkJJawbM53z3uFf1df7qqhM0ZUW
rmjD+iCHDRgJZybkdyi9tQeApaolYFKphRSyuEPH36esif2x5aOTER9k2EOUJ2rH
tFO9tw2PI00wnDhFHRnWYnJCAcMjO7R5dyKL9c6N9kjGkD7NZLYPO6ltC+VsY+vW
GGfXyM5WYNq5oTHhYtUfKQhkc7edhAZP3ug29yvvIMvg7ku/8RNOfNEbbl1Grpo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:22:45 2026 by rpki-client