
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/3B7794D2664A11EDB095B812C4F9AE02.roa
File: 3B7794D2664A11EDB095B812C4F9AE02.roa (raw, json)
Hash identifier: Iimyc3Pw8e+jVyrMv/gbC063P+WqofRd4H1VyiZ+JmI=
Subject key identifier: 84:50:80:95:25:8D:6B:85:67:34:4B:DD:20:D6:00:F7:C8:16:01:94
Certificate issuer: /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
Certificate serial: 0270
Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/3B7794D2664A11EDB095B812C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:05:16 +0000
ROA not before: Mon 25 Aug 2025 02:39:31 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 150321
IP address blocks: 103.55.178.0/24 maxlen: 24
2001:df1:4c40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl
rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6AEE, serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
Validity
Not Before: Aug 25 02:39:31 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a40f5c-07ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:fa:27:e6:0f:73:6f:6c:5b:53:1e:6f:b9:
17:83:78:fc:c3:fa:fa:7d:3c:50:48:45:d5:04:9d:
a9:45:d3:d2:02:cc:e5:f4:0f:4e:c3:72:33:22:45:
1f:dc:cc:73:35:b1:94:af:0f:9d:e7:03:cb:23:62:
c3:c6:a9:83:12:80:1a:77:12:d9:48:45:73:d7:16:
85:27:ff:58:fb:d9:a1:c1:ca:42:24:c9:87:68:c9:
58:e8:fd:7c:4f:40:b2:b4:b3:5e:0b:e6:c1:43:3c:
84:72:80:dc:6b:6d:81:6d:c7:c8:2a:ab:4a:df:b1:
4c:b4:f9:f5:42:39:16:d8:e2:bc:01:f7:c0:17:ed:
18:e3:4b:8c:48:77:e9:64:fe:47:4e:6c:b5:3d:ba:
d1:48:a4:da:cf:f3:1d:e4:78:65:82:f5:7d:47:6c:
96:a5:4c:66:3f:f7:ed:35:13:63:71:ca:36:61:70:
f1:a6:2b:fe:b9:98:e2:72:77:09:3a:a4:5c:60:3e:
2d:f0:64:df:cd:7c:ff:f0:51:02:e3:2c:af:9a:b6:
47:f9:8e:87:f3:b9:aa:d8:c9:b0:51:88:0c:37:7b:
58:c0:4e:48:07:c5:5f:ea:54:6d:02:a6:7d:d2:ae:
4d:02:00:9a:6e:9e:2b:1a:8c:f9:7a:89:64:ef:54:
cc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:80:95:25:8D:6B:85:67:34:4B:DD:20:D6:00:F7:C8:16:01:94
X509v3 Authority Key Identifier:
keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/3B7794D2664A11EDB095B812C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.55.178.0/24
IPv6:
2001:df1:4c40::/48
Signature Algorithm: sha256WithRSAEncryption
a8:03:2e:47:28:59:b7:17:26:bf:56:b4:bb:42:d3:c1:54:e9:
b2:ae:1f:e9:50:85:6b:81:c1:e4:89:32:13:e1:74:31:a6:c5:
b7:35:4a:ec:3f:34:ea:f2:18:36:48:bb:95:c8:86:29:c9:c4:
74:96:df:b0:bb:b2:dc:57:72:ce:8b:01:c2:47:72:9a:3f:1f:
98:b4:3a:08:0b:b3:42:0b:be:3a:b5:44:54:34:3f:80:45:a5:
7e:9a:cd:6a:5b:23:ea:c0:04:99:83:8f:0d:51:c4:04:b3:18:
af:9f:9b:fe:e8:04:fa:68:97:87:dc:8f:05:fe:5c:e8:73:67:
16:e6:4a:a8:50:de:74:70:eb:cb:cf:1e:6d:28:c5:ef:8b:34:
56:b1:c7:dc:48:1d:f6:19:5e:1b:7e:26:09:a9:60:3d:3e:94:
4a:b9:43:66:8b:4e:1e:67:67:90:e0:ed:ea:67:e8:64:f0:fb:
59:04:49:68:25:ce:27:e0:c9:20:ed:59:ff:da:76:c1:7e:e7:
55:ca:8c:71:09:ce:26:8c:88:8c:a9:b3:80:78:32:65:f0:ee:
b5:93:72:f3:cd:a0:55:1e:f9:54:45:6a:77:cb:6e:89:86:95:
4a:ed:b8:07:fe:ac:ff:73:4a:e0:19:20:92:25:8d:c2:f1:21:
ce:a6:78:69
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZBRUUxMTAvBgNVBAUTKDFENkMzRTlDNDcyMTJFRTQ4REY5RjU0RTY0OTBBOUE2
MTZENDExODkwHhcNMjUwODI1MDIzOTMxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGY1Yy0wN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2F76J+YPc29sW1Meb7kXg3j8w/r6fTxQSEXVBJ2pRdPSAszl9A9Ow3IzIkUf
3MxzNbGUrw+d5wPLI2LDxqmDEoAadxLZSEVz1xaFJ/9Y+9mhwcpCJMmHaMlY6P18
T0CytLNeC+bBQzyEcoDca22BbcfIKqtK37FMtPn1QjkW2OK8AffAF+0Y40uMSHfp
ZP5HTmy1PbrRSKTaz/Md5HhlgvV9R2yWpUxmP/ftNRNjcco2YXDxpiv+uZjicncJ
OqRcYD4t8GTfzXz/8FEC4yyvmrZH+Y6H87mq2MmwUYgMN3tYwE5IB8Vf6lRtAqZ9
0q5NAgCabp4rGoz5eolk71TMCwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIRQgJUl
jWuFZzRL3SDWAPfIFgGUMB8GA1UdIwQYMBaAFB1sPpxHIS7kjfn1TmSQqaYW1BGJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkFFRS80RjMzMjg4MjY2
NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1U04tZlZPWkpDcHBoYlVF
WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hXdy1uRWNoTHVTTi1mVk9aSkNwcGhiVUVZay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjZBRUUvNEYzMzI4ODI2NjQ2MTFFRDhEMkM3NTBGQzRGOUFFMDIvM0I3Nzk0RDI2
NjRBMTFFREIwOTVCODEyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZzeyMA8EAgACMAkDBwAgAQ3xTEAwDQYJKoZIhvcNAQELBQADggEB
AKgDLkcoWbcXJr9WtLtC08FU6bKuH+lQhWuBweSJMhPhdDGmxbc1Suw/NOryGDZI
u5XIhinJxHSW37C7stxXcs6LAcJHcpo/H5i0OggLs0ILvjq1RFQ0P4BFpX6azWpb
I+rABJmDjw1RxASzGK+fm/7oBPpol4fcjwX+XOhzZxbmSqhQ3nRw68vPHm0oxe+L
NFaxx9xIHfYZXht+JgmpYD0+lEq5Q2aLTh5nZ5Dg7epn6GTw+1kESWglzifgySDt
Wf/adsF+51XKjHEJziaMiIyps4B4MmXw7rWTcvPNoFUe+VRFanfLbomGlUrtuAf+
rP9zSuAZIJIljcLxIc6meGk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:09 2026 by rpki-client