
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/E036A33A724711EBAC3F0059C4F9AE02.roa
File: E036A33A724711EBAC3F0059C4F9AE02.roa (raw, json)
Hash identifier: 1Chxn96nNA7oNUELmf6ynN2eqdlPAPSq53GJ8LyaxFM=
Subject key identifier: 3D:70:AF:42:F5:67:D2:54:3D:30:68:18:35:8C:FE:AF:72:51:F8:6A
Certificate issuer: /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485
Certificate serial: 071F
Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/E036A33A724711EBAC3F0059C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:30:32 +0000
ROA not before: Fri 24 Oct 2025 23:11:26 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 132347
IP address blocks: 103.76.144.0/22 maxlen: 22
103.76.144.0/24 maxlen: 24
103.76.145.0/24 maxlen: 24
103.76.146.0/24 maxlen: 24
103.76.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl
rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1823 (0x71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485
Validity
Not Before: Oct 24 23:11:26 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a43168-8d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:67:a0:22:0e:c3:ac:16:d6:3c:e4:df:79:
58:c7:6e:40:57:03:81:3c:49:4f:ad:5c:ce:8e:35:
5e:2a:98:d9:5f:c2:e7:0a:53:78:77:88:70:fd:d8:
ce:cf:75:81:80:6a:bc:f4:f1:8c:17:7e:b8:0d:33:
bc:d0:56:bc:3c:01:51:2c:81:a2:33:f8:22:f0:fb:
fe:f9:cf:b3:04:22:92:17:04:65:7f:fb:36:93:fe:
f0:d8:6b:61:08:24:26:47:ff:a1:31:bb:ec:52:50:
99:36:27:af:1b:19:d5:20:70:c8:98:2a:3b:6f:ab:
b8:40:ac:6d:c8:e8:46:f7:28:4e:8f:70:22:49:20:
cc:9d:e3:1e:fb:90:68:ce:42:de:be:27:95:c7:8b:
66:1c:d2:b1:f6:96:38:d8:84:e0:51:4c:76:b2:dd:
13:10:92:60:cf:7b:8e:6d:db:83:2e:3c:d9:e4:e0:
f2:fb:01:07:4c:24:01:ff:ed:3a:94:20:c7:7f:74:
f1:1e:d7:8d:92:1a:d8:a5:bf:1c:1e:ae:9d:7a:37:
82:e0:90:82:98:bf:41:09:8d:4d:f9:9c:80:32:70:
aa:96:72:da:5c:f8:2c:8f:06:3b:69:fd:03:64:c5:
26:c8:b5:f8:cb:b3:b1:36:a7:b7:40:0e:f6:7f:11:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:70:AF:42:F5:67:D2:54:3D:30:68:18:35:8C:FE:AF:72:51:F8:6A
X509v3 Authority Key Identifier:
keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/E036A33A724711EBAC3F0059C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.76.144.0/22
Signature Algorithm: sha256WithRSAEncryption
84:19:01:11:6e:43:ff:25:69:2b:07:f4:7b:0e:9f:6c:c0:e6:
77:9f:11:0e:77:4c:7b:3c:df:64:4b:9b:fc:76:6d:15:b1:21:
2f:96:32:a7:f7:73:26:e4:97:72:3e:76:f4:b2:8d:86:20:d3:
b0:7b:c1:95:1d:b3:3a:ee:dc:8b:89:fe:bb:0c:46:a0:55:b6:
83:90:36:13:d6:e5:3c:a7:8d:28:12:ef:32:4c:67:5e:39:ca:
bd:ba:f6:f4:cd:bc:fb:12:1e:19:9c:de:0b:c9:03:71:b7:3e:
2c:04:53:6f:2d:49:14:d6:38:f4:b9:4c:82:95:5e:6b:ea:0e:
bb:32:f0:de:7f:2f:02:2e:70:31:98:70:0f:fb:24:e6:32:56:
42:a4:79:8e:9f:d5:72:21:b3:f8:a5:74:ed:48:59:44:53:16:
88:ea:20:21:43:8a:3c:69:f3:b0:fb:df:ff:dd:6d:fd:f1:56:
db:01:41:9c:cf:bb:eb:bf:26:71:f7:b0:72:7f:a4:3d:6d:99:
71:a1:4e:33:80:de:12:36:d8:14:27:dd:c8:60:7f:c5:ee:3b:
99:cd:7b:de:05:cb:a7:51:05:46:29:44:93:76:4d:20:c4:c1:
a8:86:ef:54:28:8d:80:07:77:d9:fc:f1:6d:d0:f5:0d:75:c4:
9a:ec:20:ce
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUUzMDkxMTAvBgNVBAUTKDQxMDlBMTZFMTg3MkE0MzFBRjU5MTg2NjU1QkI2MEQ1
MzM3Q0E0ODUwHhcNMjUxMDI0MjMxMTI2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzE2OC04ZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtDZnoCIOw6wW1jzk33lYx25AVwOBPElPrVzOjjVeKpjZX8LnClN4d4hw/djO
z3WBgGq89PGMF364DTO80Fa8PAFRLIGiM/gi8Pv++c+zBCKSFwRlf/s2k/7w2Gth
CCQmR/+hMbvsUlCZNievGxnVIHDImCo7b6u4QKxtyOhG9yhOj3AiSSDMneMe+5Bo
zkLevieVx4tmHNKx9pY42ITgUUx2st0TEJJgz3uObduDLjzZ5ODy+wEHTCQB/+06
lCDHf3TxHteNkhrYpb8cHq6dejeC4JCCmL9BCY1N+ZyAMnCqlnLaXPgsjwY7af0D
ZMUmyLX4y7OxNqe3QA72fxGk3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD1wr0L1
Z9JUPTBoGDWM/q9yUfhqMB8GA1UdIwQYMBaAFEEJoW4YcqQxr1kYZlW7YNUzfKSF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTMwOS9CREI0MkYzNjcy
NDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBER3ZXUmhtVmJ0ZzFUTjhw
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FRbWhiaGh5cERHdldSaG1WYnRnMVROOHBJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUUzMDkvQkRCNDJGMzY3MjQ2MTFFQjhBRUREQzU4QzRGOUFFMDIvRTAzNkEzM0E3
MjQ3MTFFQkFDM0YwMDU5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ0yQMA0GCSqGSIb3DQEBCwUAA4IBAQCEGQERbkP/JWkrB/R7Dp9s
wOZ3nxEOd0x7PN9kS5v8dm0VsSEvljKn93Mm5JdyPnb0so2GINOwe8GVHbM67tyL
if67DEagVbaDkDYT1uU8p40oEu8yTGdeOcq9uvb0zbz7Eh4ZnN4LyQNxtz4sBFNv
LUkU1jj0uUyClV5r6g67MvDefy8CLnAxmHAP+yTmMlZCpHmOn9VyIbP4pXTtSFlE
UxaI6iAhQ4o8afOw+9//3W398VbbAUGcz7vrvyZx97Byf6Q9bZlxoU4zgN4SNtgU
J93IYH/F7juZzXveBcunUQVGKUSTdk0gxMGohu9UKI2AB3fZ/PFt0PUNdcSa7CDO
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:42 2026 by rpki-client