
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/3C46581E96C411F0AA8A5D32C4F9AE02.roa
File: 3C46581E96C411F0AA8A5D32C4F9AE02.roa (raw, json)
Hash identifier: 5UiluviLkvdmrPxj6Fg50iGwlauvTqLugtpFjTJWRPY=
Subject key identifier: DA:2B:3B:18:31:B8:E9:8C:6C:66:0E:D2:26:36:65:BE:14:A4:E2:21
Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
Certificate serial: 0DB0
Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/3C46581E96C411F0AA8A5D32C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:01:33 +0000
ROA not before: Fri 31 Oct 2025 10:53:22 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 139667
IP address blocks: 103.143.88.0/24 maxlen: 24
103.143.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl
rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3504 (0xdb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
Validity
Not Before: Oct 31 10:53:22 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a470ec-3dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:b1:0d:98:4f:ff:2a:c5:82:60:24:9a:c6:
41:5a:53:c6:ef:7b:5c:b7:7e:06:d9:6f:d6:ed:94:
3a:c6:bd:b2:cc:83:c6:39:e5:56:67:fc:c1:c2:fa:
40:b1:c2:58:f5:d6:59:20:7c:0a:57:e2:89:a5:6c:
38:d3:24:f1:5b:c5:29:82:d0:18:a5:18:e8:43:3c:
5d:25:62:f8:0c:e2:1d:38:fa:db:e4:1a:ed:e6:7e:
a8:7d:be:32:be:9c:e3:7f:35:87:38:70:fe:72:c7:
91:cb:18:bc:ea:43:e4:6a:40:99:d4:25:85:c1:81:
01:7c:d2:5e:f1:e1:cb:9d:c4:54:b8:b7:14:2b:3a:
57:d3:da:f8:f0:a0:fc:6a:7a:df:52:ce:79:52:c6:
22:22:49:81:f9:6d:87:89:51:85:b4:dc:3d:0e:7b:
79:47:f3:fd:0b:98:5e:0c:28:bc:10:8d:4c:8f:c1:
69:9d:2e:2c:1c:ec:23:2b:2d:8e:c5:8d:82:6f:b0:
fc:3e:cb:2b:fc:12:26:12:6f:f7:d4:ca:5b:a0:16:
c7:d2:83:b9:be:1b:b5:94:dc:d5:06:f1:4a:5b:1e:
e8:9c:da:e0:6a:de:ab:e9:83:f5:2b:ef:e9:a8:4c:
e1:5f:57:7b:b7:27:57:d9:ff:f2:a6:20:0d:7e:92:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2B:3B:18:31:B8:E9:8C:6C:66:0E:D2:26:36:65:BE:14:A4:E2:21
X509v3 Authority Key Identifier:
keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/3C46581E96C411F0AA8A5D32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.88.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:dc:31:88:e0:ab:19:f6:54:36:54:cf:80:f7:28:c1:a2:a1:
ce:c6:44:ed:8e:c5:36:54:42:e5:cf:96:d7:79:38:c9:98:16:
e3:56:2d:38:a5:1d:c7:39:d5:c4:95:bc:db:2e:2f:28:a3:78:
b7:cb:38:b2:60:08:fa:c8:b8:ec:e2:cb:54:9a:da:89:a5:65:
84:30:8c:d3:85:11:78:8e:de:82:61:bb:c6:ca:7d:28:27:9d:
59:89:7c:85:2b:ed:a6:41:94:05:d9:45:7b:b1:e8:1d:b0:f3:
39:dc:65:86:87:95:93:53:96:5b:8f:be:da:87:16:a6:78:6a:
14:07:7e:4d:dc:cc:cf:7c:6c:7c:9b:8d:af:bb:9c:ed:5a:30:
fa:0a:26:6d:32:67:4a:9c:c7:7c:55:79:d9:c1:85:b3:4e:26:
8d:34:e9:89:65:9e:d8:82:31:b1:9d:1d:e7:99:50:9c:31:ef:
cd:17:d5:75:ed:4a:6e:8d:41:31:3d:60:a5:ef:46:84:a1:b6:
06:01:1d:50:bb:98:12:15:33:83:94:96:e9:1d:c9:b5:05:90:
92:27:c8:f5:75:8e:5e:49:30:97:22:9d:4c:70:b0:eb:c0:e3:
a6:4a:48:d0:4a:99:35:a9:92:1f:e1:91:b3:6a:31:b7:fc:2d:
2f:24:81:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:16 2026 by rpki-client