
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/3E4B01008BDA11EFA4A11684C4F9AE02.roa
File: 3E4B01008BDA11EFA4A11684C4F9AE02.roa (raw, json)
Hash identifier: efzaqQoS8xAy0qR24miaNeo4rUHDpnVE5YQrIw9jbAM=
Subject key identifier: 6E:C9:86:B3:F1:1C:7F:2A:EB:53:8D:76:E9:2A:01:BF:42:75:63:93
Certificate issuer: /CN=A91B37C4/serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4
Certificate serial: 0132
Authority key identifier: B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/3E4B01008BDA11EFA4A11684C4F9AE02.roa
Signing time: Wed 13 May 2026 06:38:18 +0000
ROA not before: Wed 13 May 2026 06:38:18 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137186
IP address blocks: 103.166.22.0/23 maxlen: 23
103.166.22.0/24 maxlen: 24
103.166.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl
rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B37C4, serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4
Validity
Not Before: May 13 06:38:18 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a041c5a-2bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:f1:ee:73:90:ee:b8:3e:e5:e5:4d:51:53:
d0:c5:53:62:6d:4c:26:f1:90:07:12:65:79:6a:b5:
a4:9a:bc:00:02:31:49:49:91:e2:44:ee:43:00:e5:
85:c3:67:f0:74:80:41:03:e9:fc:9f:79:8c:8e:7f:
9a:32:86:6e:61:65:51:12:13:0e:1d:18:bf:b1:1d:
2c:f6:d7:0c:a6:18:50:e5:ae:d5:0f:2a:43:d9:93:
f5:43:c6:5a:da:1f:2e:1e:ce:3d:f9:6e:b1:8a:c7:
51:e2:ba:26:2e:54:93:00:47:7f:c6:07:15:a2:8c:
04:ca:e6:a4:22:df:0b:28:6b:77:75:31:d1:ab:c6:
7c:91:85:5a:41:8c:2c:6c:b5:43:f0:b7:3d:ac:3a:
bc:e8:79:7e:c4:d7:7c:22:01:77:5e:72:07:2a:e0:
3f:68:9b:ab:5d:22:18:f9:4f:4d:f1:ef:c5:9b:b1:
11:b7:49:5d:f6:46:e9:02:6c:21:16:49:7d:7d:38:
3a:22:87:20:10:94:7a:cb:de:08:01:23:75:b1:d5:
35:d1:00:12:a9:88:7f:4f:83:d4:dc:7e:fa:22:c6:
99:8d:e5:a3:66:e7:5f:16:ee:78:e2:73:8a:da:60:
88:23:75:71:e0:13:a5:77:98:ff:fa:c2:8e:6b:db:
2c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C9:86:B3:F1:1C:7F:2A:EB:53:8D:76:E9:2A:01:BF:42:75:63:93
X509v3 Authority Key Identifier:
keyid:B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/3E4B01008BDA11EFA4A11684C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.22.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:d3:4a:90:8f:28:e1:6b:ba:66:ef:82:c6:e7:90:d0:d5:71:
bc:77:dc:a6:3f:53:1a:ed:13:92:d9:bc:6e:f6:15:46:88:f2:
19:87:02:b9:cc:6f:d9:8b:6b:84:b5:89:ea:84:f9:98:81:fa:
a1:ed:d6:91:18:c3:b3:ae:fa:27:a8:20:d8:81:ad:c6:dd:7a:
c8:68:7a:95:36:b9:d2:74:6d:ed:33:c2:ad:bb:21:97:50:5d:
34:df:ba:11:9f:cb:ac:d8:78:65:3e:85:c3:73:f6:54:18:c5:
6c:c0:ff:f7:a6:e1:5b:f1:d6:a4:eb:4d:02:52:d5:cf:a1:71:
fe:8b:6f:88:4e:3a:90:0e:c2:11:f1:75:f3:55:8b:94:48:85:
60:e3:78:32:3a:09:5f:7c:b5:a8:f9:3f:e2:b6:46:ce:de:bd:
03:93:83:05:53:38:6e:87:33:29:fa:15:62:bb:79:68:6e:c7:
b2:f8:06:ce:e9:79:95:9d:d9:73:ae:15:1c:ae:0e:44:87:e2:
9e:78:b9:95:24:32:d7:2c:f6:cc:62:d9:f1:9b:66:b5:1d:90:
1e:ac:b6:48:e6:f5:6f:4a:16:9e:d3:d4:22:09:5e:bf:1c:2e:
4a:33:3b:4d:ff:62:37:1c:de:da:86:2a:be:9f:79:43:a9:9c:
f7:0d:b4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:27:53 2026 by rpki-client