
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/3728DA229A8611EFA824F73BC4F9AE02.roa
File: 3728DA229A8611EFA824F73BC4F9AE02.roa (raw, json)
Hash identifier: WAW2CdRHZenQ2VR6CRuIZWRm9VyTgjzkK5cSEcBqoHI=
Subject key identifier: F4:63:22:7E:C3:23:EB:40:4F:5A:44:1C:C9:4B:E8:12:32:9B:CB:25
Certificate issuer: /CN=A91C0C73/serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
Certificate serial: 02B2
Authority key identifier: E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/3728DA229A8611EFA824F73BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:24:39 +0000
ROA not before: Sat 17 May 2025 02:19:40 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 139041
IP address blocks: 103.138.226.0/24 maxlen: 24
103.138.227.0/24 maxlen: 24
2401:1c20::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl
rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690 (0x2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C73, serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
Validity
Not Before: May 17 02:19:40 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3e9b7-714d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:de:d3:f9:b8:c9:aa:df:56:16:73:8e:fb:
c8:99:a3:61:6a:c8:bb:2a:ec:ff:92:93:d6:ac:d5:
94:f3:77:5b:ca:fd:a5:fe:63:c4:89:5a:44:81:12:
75:48:1d:30:b1:8a:eb:bb:48:f3:bb:c5:26:70:26:
1c:9a:44:86:52:1f:ea:c1:30:68:d2:6d:83:67:4b:
1d:4d:2d:ca:e0:14:9c:d6:e9:b6:32:1a:da:25:f8:
83:ae:90:b1:66:fc:c0:a3:01:2d:93:19:6c:ac:5b:
c1:00:67:ae:6b:6f:34:8c:ef:c6:99:19:c7:78:ad:
91:10:dd:fd:99:f6:fd:55:df:9b:26:65:fa:f6:9f:
4e:91:e2:8f:0d:e7:16:31:70:eb:4f:fc:af:eb:1e:
13:36:0e:c0:75:79:c0:b4:a8:d0:99:43:10:77:7e:
04:4a:93:69:2f:db:3c:dc:10:6f:e7:f8:9f:0c:b8:
7a:aa:b2:59:88:c6:44:fc:be:5a:b9:4a:7b:7c:95:
38:1f:fe:71:3e:5b:c8:dc:c8:20:63:51:ed:35:81:
30:e0:f8:11:65:e8:34:f2:25:2c:bb:a3:94:a2:39:
97:47:c2:53:a8:0b:f2:4c:35:a7:bf:14:29:93:e4:
b7:52:4f:87:73:14:a2:97:ac:b6:4e:bb:ef:5f:54:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:63:22:7E:C3:23:EB:40:4F:5A:44:1C:C9:4B:E8:12:32:9B:CB:25
X509v3 Authority Key Identifier:
keyid:E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/3728DA229A8611EFA824F73BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.226.0/23
IPv6:
2401:1c20::/33
Signature Algorithm: sha256WithRSAEncryption
3e:a6:ac:4d:6c:c6:11:83:3f:54:66:e5:fd:f8:c6:aa:68:cc:
d7:dd:fa:b2:48:86:d7:d3:2a:0f:82:d8:fd:31:cf:50:de:4c:
5c:08:f7:8d:db:25:93:0e:37:0e:f2:47:09:b3:af:15:f1:7f:
50:6d:5b:c1:c2:6a:30:c2:4d:ab:67:6e:3d:b0:8d:13:28:d5:
3d:52:9d:48:87:73:6b:ab:a5:01:44:d2:e5:d1:e0:3e:cd:5c:
be:dd:05:03:77:b3:b0:ab:24:6e:1b:f9:c7:42:12:5b:00:3a:
98:81:85:68:7d:6c:e8:5e:43:21:4a:e1:e0:d2:74:d2:34:ae:
92:78:7f:eb:9e:cb:82:19:31:01:63:e2:4f:45:f6:3b:ea:61:
88:66:51:5d:09:40:44:6d:67:95:47:d0:11:b7:9a:a3:82:ec:
3d:7b:20:e9:35:3e:7d:86:06:01:65:36:e6:ce:8f:be:54:a4:
a7:82:c1:f2:77:4c:52:c1:ec:a6:92:1f:9b:ea:ca:74:64:a7:
22:3b:11:c1:7b:bd:bb:bb:0c:41:9e:b9:16:db:c5:2a:7c:bf:
22:70:20:87:87:a9:c2:98:5c:64:d1:96:24:c6:be:bb:74:73:
c8:98:ca:71:7a:24:ea:5d:1f:57:4f:06:ce:27:1a:5d:13:52:
a2:e5:d1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:22 2026 by rpki-client