
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/7321413EC22511E99FB7F225C4F9AE02.roa
File: 7321413EC22511E99FB7F225C4F9AE02.roa (raw, json)
Hash identifier: QV4VcOWMjw2Q8agZQUCaZHMoZiK398hrWlFAisrLEf0=
Subject key identifier: 6F:8F:EB:A9:4C:46:AB:09:A2:F9:CF:D8:D4:E2:E5:12:01:65:FA:8D
Certificate issuer: /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Certificate serial: 0E2B
Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/7321413EC22511E99FB7F225C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:37:40 +0000
ROA not before: Fri 20 Jun 2025 18:41:51 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 58625
IP address blocks: 103.14.36.0/22 maxlen: 22
103.14.36.0/24 maxlen: 24
103.14.37.0/24 maxlen: 24
103.14.38.0/24 maxlen: 24
103.14.39.0/24 maxlen: 24
2404:2700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3627 (0xe2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0367, serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Validity
Not Before: Jun 20 18:41:51 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a42504-8742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:0e:d1:d6:c6:69:b8:c4:68:fd:ab:fb:38:
2c:a9:2a:c6:08:45:16:ba:f0:81:31:ea:99:54:5f:
98:1f:82:15:9f:9c:31:2b:92:58:99:34:1a:76:c0:
2f:4b:fb:e9:2a:9b:8f:94:30:dd:9f:0e:7d:b1:2f:
62:88:55:64:23:7c:ba:2b:87:35:58:01:de:5a:a7:
5d:8e:2d:63:b8:14:4c:4c:cc:46:04:89:06:31:0c:
5e:18:5d:64:35:00:9c:be:71:e0:13:59:95:b9:87:
87:85:c9:fd:22:f3:03:28:89:65:4a:6e:b1:43:b1:
39:9a:a7:8f:89:0b:ca:69:24:47:00:23:3c:ce:a4:
57:f3:f4:92:07:a9:6e:45:15:b0:a8:6a:87:44:d2:
6a:20:38:5d:2b:4a:be:e9:36:c1:9e:49:e3:92:97:
97:b7:6c:7b:9b:85:af:3c:08:b7:61:b1:04:22:ee:
f7:5e:50:d4:6f:03:33:b8:ba:f7:69:3c:59:15:30:
27:c0:2a:77:e9:9f:68:d8:00:18:ba:42:5f:6a:b2:
23:0a:e9:a7:97:c6:69:d1:88:8d:29:cb:40:65:40:
d6:39:d0:71:00:f7:f7:76:d1:ce:7f:b3:a3:24:b0:
e2:64:75:52:83:76:ec:b7:da:b2:0c:e5:a9:ba:90:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8F:EB:A9:4C:46:AB:09:A2:F9:CF:D8:D4:E2:E5:12:01:65:FA:8D
X509v3 Authority Key Identifier:
keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/7321413EC22511E99FB7F225C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.36.0/22
IPv6:
2404:2700::/32
Signature Algorithm: sha256WithRSAEncryption
9b:91:87:07:97:0f:c3:1c:da:a2:52:cc:36:96:77:53:0b:f4:
c1:c9:08:2f:ba:10:b7:6e:03:f7:e4:66:d0:12:80:bb:7a:3e:
80:d2:0b:3b:11:df:d5:d7:8f:00:d1:dc:66:b6:f4:29:a4:2e:
9c:d4:59:1b:bc:cf:c2:aa:68:76:b5:d9:4f:85:97:fb:07:fc:
59:8d:98:63:ed:ce:22:2d:6b:8e:8d:c3:74:7c:74:5a:96:d3:
bf:e5:a6:f8:a9:ea:fc:fa:6a:f3:f4:23:26:46:d4:9b:30:d9:
42:08:6f:bb:f3:16:09:05:a5:d9:c2:f5:8e:ba:c0:a6:24:31:
e8:44:f9:34:3b:73:df:db:b9:6f:08:1f:ea:c1:cc:44:e5:3b:
6b:ae:53:2e:39:4e:ad:52:8d:12:93:43:e3:2f:87:34:ce:1a:
8f:fe:7a:36:dc:92:c0:f5:be:03:40:f4:5f:13:78:89:d6:39:
2c:c0:8b:54:3f:d2:5b:16:04:5f:6a:8a:ac:bf:bd:40:1d:3c:
d9:e6:45:43:01:95:9d:3c:32:7b:eb:7a:bb:4e:d8:e8:d8:8e:
ee:9d:32:a3:3c:66:69:98:6c:27:61:85:b3:9d:8b:27:f6:85:
52:eb:98:dc:e2:60:8c:0d:f4:cc:09:f7:4a:0e:5b:9e:e3:6b:
da:e4:29:6e
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICDiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAzNjcxMTAvBgNVBAUTKEUxNUEzNjAzNzJEREFGMUM1QjIxOEU4QzRDRjY5RjZG
OEJEN0Y1OUEwHhcNMjUwNjIwMTg0MTUxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjUwNC04NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt18O0dbGabjEaP2r+zgsqSrGCEUWuvCBMeqZVF+YH4IVn5wxK5JYmTQadsAv
S/vpKpuPlDDdnw59sS9iiFVkI3y6K4c1WAHeWqddji1juBRMTMxGBIkGMQxeGF1k
NQCcvnHgE1mVuYeHhcn9IvMDKIllSm6xQ7E5mqePiQvKaSRHACM8zqRX8/SSB6lu
RRWwqGqHRNJqIDhdK0q+6TbBnknjkpeXt2x7m4WvPAi3YbEEIu73XlDUbwMzuLr3
aTxZFTAnwCp36Z9o2AAYukJfarIjCumnl8Zp0YiNKctAZUDWOdBxAPf3dtHOf7Oj
JLDiZHVSg3bst9qyDOWpupD6GQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFG+P66lM
RqsJovnP2NTi5RIBZfqNMB8GA1UdIwQYMBaAFOFaNgNy3a8cWyGOjEz2n2+L1/Wa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2Ny8wOEMzRDI4RUMy
MjUxMUU5QTM2N0QzMjVDNEY5QUUwMi80Vm8yQTNMZHJ4eGJJWTZNVFBhZmI0dlg5
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRWbzJBM0xkcnh4YklZNk1UUGFmYjR2WDlaby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjAzNjcvMDhDM0QyOEVDMjI1MTFFOUEzNjdEMzI1QzRGOUFFMDIvNzMyMTQxM0VD
MjI1MTFFOTlGQjdGMjI1QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZw4kMA0EAgACMAcDBQAkBCcAMA0GCSqGSIb3DQEBCwUAA4IBAQCb
kYcHlw/DHNqiUsw2lndTC/TByQgvuhC3bgP35GbQEoC7ej6A0gs7Ed/V148A0dxm
tvQppC6c1FkbvM/Cqmh2tdlPhZf7B/xZjZhj7c4iLWuOjcN0fHRaltO/5ab4qer8
+mrz9CMmRtSbMNlCCG+78xYJBaXZwvWOusCmJDHoRPk0O3Pf27lvCB/qwcxE5Ttr
rlMuOU6tUo0Sk0PjL4c0zhqP/no23JLA9b4DQPRfE3iJ1jkswItUP9JbFgRfaoqs
v71AHTzZ5kVDAZWdPDJ763q7Ttjo2I7unTKjPGZpmGwnYYWznYsn9oVS65jc4mCM
DfTMCfdKDlue42va5Clu
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:49 2026 by rpki-client