
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/37868F90574711EBB6BA4183C4F9AE02.roa
File: 37868F90574711EBB6BA4183C4F9AE02.roa (raw, json)
Hash identifier: OYV9eK2HNZwk+SVet5sg0PfolaNTvnaGC/XgX9+ge9A=
Subject key identifier: 36:45:76:F8:B3:EB:39:03:BD:EE:77:A7:F6:23:4E:4B:14:C8:DD:25
Certificate issuer: /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Certificate serial: 0799
Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/37868F90574711EBB6BA4183C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:07:08 +0000
ROA not before: Thu 30 Oct 2025 19:38:57 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138325
IP address blocks: 103.122.248.0/24 maxlen: 24
2403:9840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl
rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1945 (0x799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B927E, serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Validity
Not Before: Oct 30 19:38:57 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a48e5c-b00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:92:5e:1f:d3:40:c4:c0:93:bc:96:2b:8b:f4:
e8:1c:0b:3e:1c:82:57:f4:78:b6:db:6c:3d:d1:e8:
cb:d1:7d:cc:9e:53:aa:9b:56:be:32:f4:e2:05:5c:
1e:5f:1d:44:8d:f2:db:6e:93:d7:cd:25:7e:f6:3d:
63:46:e9:06:3c:d8:f1:18:2b:fd:df:d2:c4:80:48:
74:4f:76:a4:88:1b:e1:8b:a0:0a:ca:5a:dd:03:54:
80:6c:06:23:88:78:b6:88:23:37:5c:a2:e4:84:df:
95:c2:c8:0d:f4:b7:94:d1:80:35:69:af:2c:75:00:
5b:23:1f:64:ea:88:6e:bc:d4:c5:54:dd:22:bf:8f:
e1:cf:60:b4:3b:f3:fa:30:c9:3b:45:4f:a9:82:3c:
d6:39:76:a6:fe:6b:e9:d1:b4:ff:d1:76:a3:9c:f2:
3b:9f:f0:b9:74:30:90:4c:70:9b:72:9e:3c:06:69:
30:a5:a4:0f:54:99:9c:9a:f3:04:9e:13:86:2e:8d:
76:02:26:2a:c9:7a:66:a3:d3:9e:7f:a0:28:08:0e:
77:d7:5f:60:aa:00:62:4f:b5:4e:d4:81:27:42:25:
8a:21:bf:f0:5f:8d:fd:59:6f:1d:15:b2:d0:1d:de:
1b:cf:93:e4:67:21:15:d1:62:a3:2e:27:bb:f4:35:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:45:76:F8:B3:EB:39:03:BD:EE:77:A7:F6:23:4E:4B:14:C8:DD:25
X509v3 Authority Key Identifier:
keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/37868F90574711EBB6BA4183C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.122.248.0/24
IPv6:
2403:9840::/32
Signature Algorithm: sha256WithRSAEncryption
4c:ed:88:0e:b8:a0:0d:88:d5:14:09:a9:cc:21:83:f4:e6:15:
a2:df:73:4f:be:be:47:50:19:bf:ee:6e:9e:76:3b:43:13:c8:
c7:92:61:1d:e7:35:3e:97:da:bf:05:22:fe:02:75:19:35:f8:
c6:3c:f1:33:bb:4b:5c:cb:ad:56:13:a1:3a:eb:4f:ba:22:e4:
18:33:51:bd:7f:53:07:66:58:b4:3a:54:c0:0d:d5:37:ec:f0:
dd:40:d0:8f:1f:f0:cf:bd:21:58:5b:6d:be:94:67:bb:1b:11:
81:88:6b:78:63:66:95:9f:83:4b:0e:9b:9f:0d:38:01:2e:9a:
a9:31:a8:61:26:f3:32:21:3f:e3:a8:30:39:cd:e7:40:ad:97:
1d:47:66:01:86:b3:ee:2c:15:36:f1:9a:65:ff:e3:1b:2c:0d:
d2:6a:a2:a8:a1:ff:48:b6:d5:b7:16:8e:e3:de:e9:98:c4:ae:
fe:51:00:33:10:93:59:4b:9f:01:d2:01:db:da:f8:e8:49:78:
0a:47:1c:1c:fc:9a:08:aa:b1:9b:85:ed:99:58:1b:9c:f1:31:
de:c8:c1:aa:6c:63:04:4c:d7:20:59:1b:27:1e:de:4a:0c:33:
80:e2:a6:4c:49:11:80:84:33:a5:a6:82:58:d6:ea:dd:cc:db:
0a:fc:84:cb
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkyN0UxMTAvBgNVBAUTKDJBQzBBQjRCNUYzQkI1QjBFRjc5QkQyMUE2NDlDQUZG
RTdGOUMyMEEwHhcNMjUxMDMwMTkzODU3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGU1Yy1iMDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiJJeH9NAxMCTvJYri/ToHAs+HIJX9Hi222w90ejL0X3MnlOqm1a+MvTiBVwe
Xx1EjfLbbpPXzSV+9j1jRukGPNjxGCv939LEgEh0T3akiBvhi6AKylrdA1SAbAYj
iHi2iCM3XKLkhN+VwsgN9LeU0YA1aa8sdQBbIx9k6ohuvNTFVN0iv4/hz2C0O/P6
MMk7RU+pgjzWOXam/mvp0bT/0XajnPI7n/C5dDCQTHCbcp48BmkwpaQPVJmcmvME
nhOGLo12AiYqyXpmo9Oef6AoCA53119gqgBiT7VO1IEnQiWKIb/wX439WW8dFbLQ
Hd4bz5PkZyEV0WKjLie79DUjUQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFDZFdviz
6zkDve53p/YjTksUyN0lMB8GA1UdIwQYMBaAFCrAq0tfO7Ww73m9IaZJyv/n+cIK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4
REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3RiRHZlYjBocGtuS18tZjV3
Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tzQ3JTMTg3dGJEdmViMGhwa25LXy1mNXdnby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjkyN0UvQ0NENkVEMUM2OERGMTFFQTk3QjE1NTI0QzRGOUFFMDIvMzc4NjhGOTA1
NzQ3MTFFQkI2QkE0MTgzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQAZ3r4MA0EAgACMAcDBQAkA5hAMA0GCSqGSIb3DQEBCwUAA4IBAQBM
7YgOuKANiNUUCanMIYP05hWi33NPvr5HUBm/7m6edjtDE8jHkmEd5zU+l9q/BSL+
AnUZNfjGPPEzu0tcy61WE6E660+6IuQYM1G9f1MHZli0OlTADdU37PDdQNCPH/DP
vSFYW22+lGe7GxGBiGt4Y2aVn4NLDpufDTgBLpqpMahhJvMyIT/jqDA5zedArZcd
R2YBhrPuLBU28Zpl/+MbLA3SaqKoof9IttW3Fo7j3umYxK7+UQAzEJNZS58B0gHb
2vjoSXgKRxwc/JoIqrGbhe2ZWBuc8THeyMGqbGMETNcgWRsnHt5KDDOA4qZMSRGA
hDOlpoJY1urdzNsK/ITL
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:46 2026 by rpki-client