
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/3CED465E8E0811EE8450D961C4F9AE02.roa
File: 3CED465E8E0811EE8450D961C4F9AE02.roa (raw, json)
Hash identifier: ziV25lfjtFOT+vBGm4XLNNAFbNMnNRrhayXY3daFNNs=
Subject key identifier: 62:6A:2D:84:E8:FC:65:C2:F3:54:A8:EF:28:34:14:51:72:77:D5:30
Certificate issuer: /CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Certificate serial: 01F1
Authority key identifier: B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/3CED465E8E0811EE8450D961C4F9AE02.roa
Signing time: Mon 01 Jun 2026 04:34:08 +0000
ROA not before: Mon 01 Jun 2026 04:34:08 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 149849
IP address blocks: 103.188.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl
rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF306, serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Validity
Not Before: Jun 1 04:34:08 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a1d0bc0-7bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:1f:ea:ac:a0:f8:c8:9a:c5:07:2d:55:00:
53:f3:be:18:1e:d7:9f:66:44:4b:64:e7:56:bc:8e:
81:05:e5:a9:01:fe:6a:26:15:34:1d:d6:7e:13:29:
a2:37:78:2b:33:50:74:7e:6b:75:d4:c9:44:19:e4:
fd:6a:27:19:79:e7:b4:db:8a:65:c9:09:b7:d9:d7:
d8:3f:c4:fd:35:f5:26:b1:54:d7:24:02:16:cc:ad:
d8:05:bb:47:3d:dd:e9:85:a6:b9:fb:82:9a:1f:8d:
90:95:04:dd:83:93:90:f1:69:2d:d3:2b:ec:7e:90:
3b:ae:81:23:f8:44:f1:9c:f7:e2:d8:b8:56:88:5e:
f0:fd:db:50:52:08:ba:90:25:04:d6:cc:ba:55:b3:
2f:d4:c2:ac:16:c7:4c:a7:76:9c:66:c8:c3:93:45:
11:fa:19:28:9a:8e:a6:92:cf:8a:dd:0a:31:11:cb:
03:9f:06:a2:35:ed:da:a5:e1:5f:fe:81:4c:6b:11:
25:60:5f:84:98:33:d1:9c:b8:90:53:e0:52:36:39:
7b:49:f7:b3:d8:2a:3c:c3:79:b3:85:6d:7b:06:4a:
31:0d:bb:dd:b6:59:49:ba:c2:b9:42:1a:6b:a4:85:
5d:fd:29:12:82:e4:d8:6c:e3:56:ee:36:be:4d:03:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6A:2D:84:E8:FC:65:C2:F3:54:A8:EF:28:34:14:51:72:77:D5:30
X509v3 Authority Key Identifier:
keyid:B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/3CED465E8E0811EE8450D961C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.188.88.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:29:df:b6:a1:12:b8:aa:50:41:28:4f:12:3b:af:5e:0d:e0:
74:e3:ec:d6:df:c3:49:4d:cf:6b:b7:5f:b2:d9:29:7b:ea:e3:
c1:3d:43:52:7e:d2:40:41:4a:74:17:f5:ed:77:47:ac:05:48:
89:ae:ad:ff:72:4d:9a:e5:34:dd:22:05:b3:d4:59:00:e8:aa:
b3:1d:ff:ee:ac:83:a0:b1:5b:97:5b:af:5b:34:60:4f:55:55:
39:64:92:22:6e:cd:a9:70:c4:18:29:51:9a:3e:3e:61:bc:26:
f2:f9:1e:b2:be:8e:13:56:dd:64:9c:f6:62:51:7f:c4:b3:70:
ee:60:76:9d:9f:9f:ea:70:7e:f1:4f:45:f3:ed:56:31:b8:d9:
8f:0e:12:4f:85:e4:8e:d1:9b:26:88:75:5b:3a:f1:65:07:bd:
1e:a3:4a:f5:b7:46:79:fa:af:e7:27:96:85:14:28:35:6c:f8:
5a:af:5f:d3:2e:d6:34:57:37:68:66:d0:e5:46:bb:9d:68:c1:
d6:05:a3:7d:98:01:3a:87:48:23:77:aa:12:94:93:1c:1b:d1:
4a:d2:ad:a3:f5:65:5f:c3:97:28:ad:ea:dd:a1:a5:52:9f:67:
6d:7c:18:fd:f8:e0:44:5d:fb:fb:8b:02:bb:f2:1d:f8:d2:59:
a5:ea:1c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:35 2026 by rpki-client