
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/3818D9A09A9011EFB14F1729C4F9AE02.roa
File: 3818D9A09A9011EFB14F1729C4F9AE02.roa (raw, json)
Hash identifier: WPLajparplJU8xXoLqj3sJQqQv2qTK7SmIP3Bri0gcA=
Subject key identifier: 74:B5:95:95:6D:BC:A0:1F:AE:D8:BB:1D:CD:5B:73:CE:1C:B5:E8:DA
Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Certificate serial: 0A4A
Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/3818D9A09A9011EFB14F1729C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:01:18 +0000
ROA not before: Tue 28 Oct 2025 20:09:04 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 9825
IP address blocks: 103.74.229.0/24 maxlen: 24
103.74.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2634 (0xa4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23B3, serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Validity
Not Before: Oct 28 20:09:04 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a462ce-f038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:ef:fd:c2:6b:87:37:81:93:4a:93:e3:dd:
a7:db:a1:36:9e:02:7d:55:2e:70:64:64:0b:8f:8e:
3b:ce:f6:2d:f4:a3:2a:50:f1:59:b0:28:18:88:1c:
72:6c:2f:95:00:50:ad:d3:ef:4f:8e:b5:e9:e0:4c:
05:08:a2:3f:cd:55:c4:bc:6a:b3:cc:79:96:ce:9f:
8e:aa:01:4b:10:33:02:7f:c4:3e:62:ab:a8:8e:30:
cf:0d:57:5a:4b:c9:27:54:46:b2:5d:7d:c4:87:f7:
d4:7a:fe:a6:4d:f7:4b:02:f3:d9:ec:39:aa:f5:b3:
89:01:08:3f:1b:d9:8e:14:77:1d:79:18:69:ea:62:
1b:4b:05:a9:56:f0:70:1d:1a:64:93:3f:1c:42:4e:
dd:3f:28:3c:3a:58:03:4b:19:05:af:e7:98:1e:80:
2f:84:52:b3:c8:00:37:b8:14:0f:65:02:1e:b5:07:
25:c8:df:42:36:56:a5:9b:a1:b1:98:9c:59:56:29:
c3:06:4e:90:c9:97:66:38:0d:00:05:b9:9f:a3:a8:
73:3e:dc:10:b8:ce:e2:d9:10:14:ce:85:3c:1b:34:
9b:cc:4f:ed:34:7b:f2:ad:77:f9:ab:f0:db:f9:4d:
c3:64:bf:10:24:70:79:2a:b9:aa:a8:60:d3:a1:65:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B5:95:95:6D:BC:A0:1F:AE:D8:BB:1D:CD:5B:73:CE:1C:B5:E8:DA
X509v3 Authority Key Identifier:
keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/3818D9A09A9011EFB14F1729C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.74.229.0-103.74.230.255
Signature Algorithm: sha256WithRSAEncryption
91:2c:15:62:6b:f4:27:01:f0:b9:be:00:b0:9d:9d:4e:03:ae:
a7:74:05:02:92:88:59:ae:68:42:b7:41:c9:e2:3f:47:11:be:
62:39:35:dd:32:05:e7:d6:5e:6d:6b:89:fc:a9:67:b8:9e:a1:
e1:72:f9:03:b3:06:dd:50:a9:85:59:a5:de:81:05:1b:56:c1:
0f:9c:fa:a1:92:9b:dd:ac:13:99:9a:86:9c:2d:3a:e0:07:fc:
ea:61:82:15:1a:98:0f:7d:5f:05:44:c4:9d:de:65:35:9b:d7:
28:06:1e:32:a3:60:77:80:ad:88:06:7c:86:b2:e7:7e:df:27:
0b:e2:9d:52:cd:3a:1c:20:3f:1b:3b:53:62:34:ed:a4:69:03:
ed:c9:a9:4b:1f:dd:a4:f0:45:02:fb:9f:ca:b9:19:9e:d8:07:
01:76:02:c8:38:6b:a1:00:4b:a5:29:6c:74:95:aa:0e:b5:b3:
9c:87:03:d6:de:2f:3a:7f:85:58:6b:93:24:ca:6c:4d:ba:0f:
da:de:1f:e9:ac:e6:9c:a9:b8:a2:18:19:e3:1f:54:13:e7:7e:
ee:80:48:91:1c:ca:b0:df:8d:b0:d6:db:67:8e:37:4f:d0:87:
1a:60:04:e3:34:02:b6:98:d4:ad:4f:d9:4c:83:4c:f7:14:25:
fa:f7:d3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:41 2026 by rpki-client