
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/36EA74DAB55C11EF9EF5381AC4F9AE02.roa
File: 36EA74DAB55C11EF9EF5381AC4F9AE02.roa (raw, json)
Hash identifier: kUbpAfWzm7gsXmhWRg6IzDR2DdLkfaBYH9H8I9WU3QM=
Subject key identifier: 13:E6:7C:17:41:FE:67:C4:33:F1:B8:FD:78:24:C3:6C:BF:FC:59:6F
Certificate issuer: /CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228
Certificate serial: 0226
Authority key identifier: C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/36EA74DAB55C11EF9EF5381AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:24:41 +0000
ROA not before: Sat 08 Nov 2025 23:15:12 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 153038
IP address blocks: 103.20.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl
rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1710, serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228
Validity
Not Before: Nov 8 23:15:12 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a49279-e153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:73:b4:34:f9:54:0b:80:04:5b:e1:e4:a6:be:
49:79:60:68:b4:c2:62:c4:43:82:fa:ca:a1:79:69:
be:b4:4a:ff:a7:7c:1c:b3:a5:6e:05:25:ac:d3:79:
1d:08:ac:9a:e6:a5:3e:00:55:5e:a3:d7:92:01:3f:
50:62:32:b3:10:7f:58:61:da:37:78:47:48:48:a6:
58:b3:2c:80:26:d4:d0:9a:fc:73:11:6b:d7:83:21:
6c:16:cb:f8:98:19:fc:60:b6:ed:70:0c:df:2d:ac:
2f:fe:10:11:fe:fe:7a:20:86:51:cc:38:f6:54:f1:
14:b6:9c:5f:f2:a7:5b:8c:5e:cd:9d:3f:5e:4b:cc:
56:89:44:93:3d:30:9b:e7:e7:b5:fe:bf:45:73:dc:
84:d9:d2:60:f4:7c:04:ef:fc:af:74:e9:d5:e4:d8:
86:89:e3:c6:aa:e6:eb:d7:71:1c:20:d2:c9:0b:6a:
e8:be:19:44:9d:58:8c:ca:7a:f9:ad:31:0b:fc:e6:
95:e5:17:5d:9c:cf:ea:1b:87:de:ed:bc:89:53:5a:
59:f7:6a:96:dd:ac:7f:21:f1:35:12:8e:80:2e:8d:
8d:2b:4c:3e:80:58:48:55:b0:53:09:82:25:f0:ff:
b3:0e:1d:85:e0:e5:ad:5e:0a:b1:34:55:1a:27:c9:
c7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E6:7C:17:41:FE:67:C4:33:F1:B8:FD:78:24:C3:6C:BF:FC:59:6F
X509v3 Authority Key Identifier:
keyid:C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/36EA74DAB55C11EF9EF5381AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.20.89.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d9:39:4a:44:57:b3:3f:ae:a5:0e:de:a6:69:ab:34:06:2d:
af:69:c0:e6:fe:06:56:78:99:ca:b6:38:ee:14:60:3d:4b:a4:
08:d9:f1:be:8f:30:eb:cb:c5:1f:12:e4:fe:27:c1:5f:bf:54:
64:60:8b:a3:95:db:d6:7e:79:f3:85:93:67:22:db:d0:b0:de:
70:df:29:d0:76:de:d5:57:35:1f:18:1e:fb:8d:da:e2:fe:63:
f9:26:0c:a7:f6:0f:5d:c9:2a:a2:b5:90:05:a7:ea:43:29:7d:
10:54:0a:c9:c2:50:f8:9f:bd:e0:1f:e3:79:c9:29:b9:04:fc:
b7:c2:5c:4d:d9:e1:b6:59:44:9d:6a:a1:08:86:71:84:5b:ae:
47:8d:df:c5:49:25:d1:2c:e8:a6:f2:8b:aa:3a:d2:15:d9:54:
0f:65:5d:12:9f:08:c9:86:76:13:85:be:63:de:c1:37:23:94:
94:f7:bf:e0:eb:47:54:58:66:48:52:17:5b:87:33:93:e4:3f:
ce:13:f7:49:33:43:14:b0:2a:42:9c:ad:58:3d:07:ea:7d:20:
79:ad:e3:28:d7:0a:9b:fd:99:75:e6:cc:e6:f4:5a:e7:6d:82:
7c:2f:41:12:af:27:70:e4:27:c6:63:98:ec:cd:44:1d:f0:82:
73:2c:e7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:28 2026 by rpki-client