
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/75C18F96305811EB94E3192FC4F9AE02.roa
File: 75C18F96305811EB94E3192FC4F9AE02.roa (raw, json)
Hash identifier: JLGn76090XO49GxPAgwtd2MTIbWpDSO85D1g5CnOfe8=
Subject key identifier: F0:F4:51:9D:A6:8F:14:A1:FF:E6:84:4D:33:93:13:59:1B:27:94:77
Certificate issuer: /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218
Certificate serial: 3528
Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/75C18F96305811EB94E3192FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:30:23 +0000
ROA not before: Tue 24 Feb 2026 15:10:06 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 45630
IP address blocks: 103.38.60.0/22 maxlen: 22
103.38.60.0/24 maxlen: 24
103.38.61.0/24 maxlen: 24
103.38.62.0/24 maxlen: 24
103.38.63.0/24 maxlen: 24
203.201.184.0/22 maxlen: 22
2401:880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl
rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13608 (0x3528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5D81, serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218
Validity
Not Before: Feb 24 15:10:06 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a44d7f-e987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:4e:9d:56:2a:a0:26:8a:a1:8b:40:20:6f:
31:7c:f3:35:db:18:3c:0c:e1:a6:f9:dc:19:d4:1e:
ef:24:9d:ce:d4:03:c4:dd:cc:cb:93:df:a2:15:ad:
91:e2:23:f0:c3:a6:86:01:e9:c7:0e:83:f5:63:d4:
15:c2:7b:69:e8:93:18:ef:3e:2b:52:e4:f0:8f:9f:
03:a2:d7:5b:23:19:44:1c:bd:b0:69:79:a3:6a:6d:
9f:93:98:9a:68:2b:4b:45:d7:68:90:72:ff:e4:12:
4a:5e:79:53:2c:3c:4a:29:8a:dd:60:11:b9:ca:00:
33:c7:43:04:ca:98:1a:b0:a7:5e:34:ad:74:24:8b:
a6:33:a9:8c:05:6d:0a:4b:28:16:8f:e5:af:99:1c:
2a:8f:29:64:82:15:3e:1d:65:cc:ee:b7:66:7c:5a:
11:e0:53:e3:34:c5:aa:50:1c:fc:a0:ef:77:3b:9c:
28:65:cc:3b:53:44:08:96:8a:79:f2:a4:1d:6f:e0:
23:82:c9:70:c1:bc:80:ff:45:ea:25:7c:4e:1d:a2:
f6:8f:64:75:0c:d6:56:aa:71:7f:9b:fe:3f:98:1a:
e3:4f:e5:98:b5:ad:69:a2:51:f5:2d:ff:1c:7f:03:
35:75:eb:47:eb:74:d9:59:da:b4:24:86:c9:e0:d1:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F4:51:9D:A6:8F:14:A1:FF:E6:84:4D:33:93:13:59:1B:27:94:77
X509v3 Authority Key Identifier:
keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/75C18F96305811EB94E3192FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.38.60.0/22
203.201.184.0/22
IPv6:
2401:880::/32
Signature Algorithm: sha256WithRSAEncryption
99:b3:2d:af:13:68:f7:b3:72:e2:c8:03:f6:03:80:cd:9c:f7:
34:3e:49:03:31:31:0e:c3:63:28:f0:f4:de:bb:69:01:7c:ed:
01:3c:05:8d:9e:3d:63:25:a4:1f:96:7f:a5:a2:52:ef:26:dc:
62:56:d0:45:76:f9:06:35:0c:05:f5:79:4a:32:0b:01:ec:c5:
f6:b9:ee:b7:9d:46:b9:35:7d:56:5d:52:f2:46:87:86:32:15:
8b:87:c0:12:6c:77:ca:cc:ab:c3:7f:f9:7a:71:de:98:47:a2:
cb:ad:ae:35:57:c0:11:6b:21:34:8c:06:d8:2b:c9:7e:24:49:
fa:81:7d:f2:46:4b:7b:cc:c0:40:5f:a1:b1:e7:84:62:be:6c:
79:78:40:75:a6:82:94:5f:88:ae:23:49:bb:59:44:94:54:71:
54:31:00:33:80:47:70:ea:2c:d2:0c:82:42:be:e0:cf:24:15:
2f:a3:95:50:c1:cd:d9:bf:c8:c6:5f:fe:47:12:db:b4:57:b2:
c7:9a:02:ef:07:26:0f:e5:3d:7f:87:24:44:87:12:8a:ad:84:
c1:25:62:d1:26:a2:d7:87:81:3e:3e:05:25:19:1d:79:2a:88:
ec:bf:e7:6d:ce:8a:9e:cf:ca:b4:14:ee:04:6e:79:ce:90:a2:
68:f7:0b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:28 2026 by rpki-client