
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/736BC8B433B011EBB38B4E68C4F9AE02.roa
File: 736BC8B433B011EBB38B4E68C4F9AE02.roa (raw, json)
Hash identifier: 3VbEprdUkL8m1GA2u2LXvlOjG1yVfgww8DFLCukSZV4=
Subject key identifier: 68:17:84:67:D5:6B:3C:30:4B:7C:EE:15:BF:8C:D8:B3:B0:DA:F3:79
Certificate issuer: /CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
Certificate serial: 07BF
Authority key identifier: 26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/736BC8B433B011EBB38B4E68C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:10:08 +0000
ROA not before: Wed 14 Jan 2026 21:17:46 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 141444
IP address blocks: 103.159.138.0/24 maxlen: 24
103.159.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl
rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1983 (0x7bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0022, serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
Validity
Not Before: Jan 14 21:17:46 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a448c0-590e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f0:68:5e:7d:72:9f:77:d9:a2:1a:ae:d0:e0:
09:d1:3f:ef:93:b6:19:93:1a:3a:61:20:d9:31:1d:
6c:4b:45:f5:c3:4d:ed:ec:f2:65:9f:12:0e:2b:80:
e5:7b:27:a8:25:f4:6b:25:05:dd:4f:ce:31:ee:92:
cc:bc:5f:6f:7a:24:69:04:3c:18:89:2c:07:a2:af:
94:4e:6c:7d:62:51:41:da:05:8b:12:62:a9:2e:ce:
b9:70:c8:ab:22:cb:a2:7a:fe:d8:a1:db:cf:2a:cb:
42:34:2d:1a:c4:e9:06:52:e0:9b:74:28:34:a0:f2:
92:3c:93:d8:df:bf:16:75:62:c5:15:e7:bb:cd:4c:
06:6d:d2:a0:85:46:28:4c:a4:01:2b:15:22:a0:0d:
21:58:5b:e8:61:32:14:d2:2d:27:a6:18:a6:79:59:
ac:06:80:cf:60:24:03:39:1e:8e:13:7f:d3:3d:43:
05:17:c5:78:26:12:13:3e:2f:b9:30:cf:3d:92:fe:
27:69:81:d8:d5:62:78:10:5d:e5:8c:fb:b9:a6:c8:
5f:7a:be:81:e6:4e:1b:42:a8:41:0c:e4:e9:a7:9f:
98:86:63:66:31:f4:2e:d7:73:e9:d0:19:c0:5a:c4:
b4:a8:a5:f8:d7:dc:19:31:ef:d1:42:49:19:48:4e:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:17:84:67:D5:6B:3C:30:4B:7C:EE:15:BF:8C:D8:B3:B0:DA:F3:79
X509v3 Authority Key Identifier:
keyid:26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/736BC8B433B011EBB38B4E68C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.159.138.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:85:d3:21:3d:ad:1f:8e:3a:fb:e6:7b:ec:c3:ae:63:b2:86:
90:72:ba:f4:d8:1b:eb:7e:fb:4b:31:07:1c:03:68:82:48:f7:
13:a6:81:4b:5a:77:61:79:3f:a0:ea:9e:54:94:53:ba:3f:49:
ee:b6:2f:de:34:80:fc:ac:09:cd:0c:6e:d9:a7:62:26:fd:53:
10:98:b2:cd:7b:31:50:de:31:ab:dc:91:f0:3c:d9:36:ff:f0:
5e:c2:01:82:e6:76:77:f3:c5:ec:f3:95:06:a3:4a:38:50:6f:
3b:bf:63:6a:cf:95:6c:5b:d9:e6:d4:12:76:ea:de:c6:ce:81:
a0:99:4f:19:5b:58:8d:d3:9f:59:76:7c:3d:0d:50:da:0b:4c:
04:e4:d1:e7:cf:ef:cf:bb:04:8f:25:ca:ad:aa:71:ac:6f:6c:
a9:06:28:06:89:d3:f8:4b:cd:9e:a2:78:ad:75:74:80:ab:0e:
20:65:b3:b2:96:3c:3d:8a:94:aa:54:0b:74:05:c9:0f:c8:7e:
50:21:58:eb:fc:70:88:96:08:f4:ad:86:50:b4:45:73:93:d8:
53:ef:77:53:22:23:aa:ea:4f:92:5c:7a:2d:8f:c7:85:7e:42:
d1:65:55:9b:26:c6:22:cf:2e:ac:8b:a3:1d:e3:fc:59:6a:a7:
a9:b0:c2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:06 2026 by rpki-client