
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/3636BCD2937011EA8A795583C4F9AE02.roa
File: 3636BCD2937011EA8A795583C4F9AE02.roa (raw, json)
Hash identifier: pxNuh5srbtMxxnoUXoogGH47f0VhHR+2FLeTjpcucQE=
Subject key identifier: AC:A9:DC:1A:0C:9F:E4:36:5D:AE:34:88:B3:11:52:12:67:AB:92:B3
Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829
Certificate serial: 0A13
Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/3636BCD2937011EA8A795583C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:31:53 +0000
ROA not before: Fri 30 Jan 2026 20:16:45 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 55361
IP address blocks: 103.6.4.0/24 maxlen: 24
103.6.5.0/24 maxlen: 24
103.6.6.0/24 maxlen: 24
103.6.7.0/24 maxlen: 24
113.20.20.0/24 maxlen: 24
113.20.21.0/24 maxlen: 24
113.20.22.0/24 maxlen: 24
113.20.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl
rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2579 (0xa13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829
Validity
Not Before: Jan 30 20:16:45 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a469f9-5da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d0:f6:7b:8f:31:2e:00:fb:8e:57:30:ab:75:
a9:f2:83:ff:99:37:74:4c:6b:7e:95:d4:06:13:3a:
32:bb:3c:a6:3f:60:a4:e4:72:1f:e6:ab:73:2c:be:
91:c8:44:fe:cf:9e:a8:02:3d:87:7f:c7:55:83:6d:
67:13:6b:5b:0d:8e:3a:d1:d6:86:41:66:b9:bc:c0:
e6:95:bc:17:40:f3:a4:6c:12:14:f4:b2:36:f8:1b:
35:29:c2:d8:46:2f:58:a3:4d:56:03:28:7e:08:cc:
c2:0a:f8:00:36:41:ae:5b:8a:e4:eb:86:9a:d5:11:
68:06:d4:cb:0e:a1:3b:98:65:b1:1b:40:8e:9b:ce:
72:3f:bd:9b:4b:24:a3:6c:73:79:02:ad:ad:40:91:
15:17:56:6d:bb:38:48:ec:9d:ea:12:67:9a:c9:46:
b2:e2:5e:90:f2:bd:63:ea:63:75:d5:ea:eb:2b:18:
6d:37:75:57:5e:9a:31:df:2e:f4:04:56:c3:b4:8f:
63:8f:6d:90:86:15:46:b6:90:84:71:97:e0:50:fe:
ae:0d:a7:0a:26:e1:31:9d:82:1e:54:61:4f:a4:8c:
dd:f9:46:39:53:94:c0:4d:52:a6:e8:1a:dc:f7:22:
dc:f8:63:41:9d:21:a4:0d:34:b6:79:19:9f:3c:f7:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A9:DC:1A:0C:9F:E4:36:5D:AE:34:88:B3:11:52:12:67:AB:92:B3
X509v3 Authority Key Identifier:
keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/3636BCD2937011EA8A795583C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.4.0/22
113.20.20.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:87:de:94:0d:25:b9:20:f0:95:3f:0e:c6:47:89:6c:31:3d:
8d:35:63:e9:4e:ce:24:dd:f4:76:a6:f5:38:cc:a7:23:94:de:
47:e4:14:98:c6:fd:7d:e9:f1:28:73:5d:cf:bb:f1:08:1d:6c:
41:69:48:76:82:33:72:35:e1:75:17:cd:a5:3b:41:6e:52:e3:
a3:bd:31:8d:5e:00:81:f9:6c:1b:cc:19:a4:75:f3:47:8c:b6:
2d:6a:23:ae:c9:02:9c:74:79:5f:e2:b6:c1:67:56:d6:fe:eb:
6e:76:f1:36:c4:67:e1:ab:e3:0b:29:e6:f5:36:34:09:7c:95:
9a:2f:d4:b2:35:1a:91:9e:45:9a:d4:5f:3f:d3:83:9a:35:9d:
d7:75:23:70:72:e2:15:66:54:d5:83:25:cd:81:9f:c2:ed:5b:
78:54:f5:4c:fe:2a:19:5b:1d:82:63:ee:0e:5a:44:38:23:1f:
53:4f:91:ae:21:3b:40:1e:2f:c1:69:80:98:f8:7e:44:f0:e6:
93:97:74:56:76:a4:dc:2d:1e:f9:d2:99:19:df:f3:7a:f6:97:
16:d5:56:db:b5:a8:22:6a:60:2c:02:d9:5c:2b:96:57:87:77:
21:a0:55:44:10:1e:05:0e:49:24:10:9c:60:e4:1d:ea:08:5b:
cf:fa:bd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:46 2026 by rpki-client