
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/36B29DDC841711F0AB46F416C4F9AE02.roa
File: 36B29DDC841711F0AB46F416C4F9AE02.roa (raw, json)
Hash identifier: wgip0DQGeaZ0QNSC6Osjp3LdtBXVxXRo5X2o3r8AIKo=
Subject key identifier: 63:2F:69:9E:63:56:8E:C8:FC:B7:54:F6:19:06:28:AC:EA:DD:D3:45
Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Certificate serial: 0346
Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/36B29DDC841711F0AB46F416C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:26:56 +0000
ROA not before: Fri 29 Aug 2025 02:18:47 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 149991
IP address blocks: 2001:df0:e6c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl
rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 838 (0x346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Validity
Not Before: Aug 29 02:18:47 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a44cb0-4867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:50:65:4f:65:94:02:f8:1c:20:03:79:9f:
32:71:bc:ee:f6:ca:01:ad:29:03:d9:80:34:9d:fa:
1d:88:99:b7:e9:2d:13:dd:e8:fb:b3:04:97:63:c4:
26:63:07:70:83:05:0a:f1:b0:1e:71:12:ee:5e:52:
24:fa:1f:18:b8:41:0f:72:5b:bd:cb:24:d9:73:e4:
69:dd:3a:12:3a:18:32:e7:48:dd:ef:ee:9c:79:14:
62:7c:2c:4f:39:b2:ea:3d:66:1b:44:9d:ce:61:a4:
ba:64:cf:62:53:de:77:15:42:19:74:83:91:59:dc:
08:88:7d:79:17:ae:cc:80:e6:d2:a5:7c:2f:b7:4d:
e2:23:8b:9c:52:e7:ac:e9:b4:8a:93:83:99:ce:de:
b4:13:a8:59:f9:7c:e9:fb:a0:b5:46:c4:28:3f:23:
a4:60:d2:9b:46:f0:5c:7c:28:5e:6a:c6:5e:51:78:
a5:2a:8b:45:14:18:7e:7a:93:21:72:b2:ff:38:81:
51:ca:7c:aa:28:20:34:61:19:70:43:0f:4d:50:eb:
f8:63:32:70:95:7d:b6:99:64:61:54:3a:b7:9c:ba:
af:d0:eb:5c:51:30:b7:b9:b3:c2:bf:18:b3:f5:91:
f2:08:76:48:5a:bd:18:1a:09:69:f7:20:57:33:82:
b5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2F:69:9E:63:56:8E:C8:FC:B7:54:F6:19:06:28:AC:EA:DD:D3:45
X509v3 Authority Key Identifier:
keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/36B29DDC841711F0AB46F416C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:e6c0::/48
Signature Algorithm: sha256WithRSAEncryption
15:9a:d0:e4:45:f5:b5:00:26:9f:50:45:1f:4f:d1:65:12:7c:
9a:24:b7:9d:b5:80:84:c7:c2:ee:dd:eb:dc:66:d5:9c:0d:88:
93:7c:16:53:b4:cb:be:ee:a7:60:13:71:90:ef:95:27:99:bc:
ac:36:aa:36:27:4d:cd:0c:05:f0:1d:50:ba:ea:70:87:82:67:
70:f4:96:e8:10:84:d5:28:6e:bd:b7:64:96:1f:55:61:04:53:
db:bb:00:ab:aa:d1:cf:7b:6b:0e:20:90:5a:ee:d1:70:54:59:
24:99:2f:4a:df:b9:e0:11:65:4d:01:52:5c:df:1e:95:34:c6:
5f:2d:04:5f:5f:97:06:68:4c:2a:66:47:67:52:9e:90:9f:34:
70:e9:e8:22:ca:09:50:24:66:04:d1:77:ad:b3:4d:1c:05:bb:
9b:26:18:60:26:94:f6:57:54:4f:e4:f7:93:77:95:c7:df:ea:
de:02:df:a3:fb:ca:7d:80:c4:dd:a9:a5:68:4c:01:dc:e7:c1:
ea:97:65:a9:a1:5e:9a:8d:7c:e3:de:a5:1a:6d:a8:cd:e5:16:
3d:f2:5e:96:c2:32:32:f2:a0:d8:59:94:ec:a2:ab:09:9a:72:
5d:45:24:32:ea:f3:49:bf:1a:0f:6f:3d:72:de:0a:ad:f8:b8:
4c:73:96:db
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw
MDJERTMxQTkwHhcNMjUwODI5MDIxODQ3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGNiMC00ODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqW9QZU9llAL4HCADeZ8ycbzu9soBrSkD2YA0nfodiJm36S0T3ej7swSXY8Qm
YwdwgwUK8bAecRLuXlIk+h8YuEEPclu9yyTZc+Rp3ToSOhgy50jd7+6ceRRifCxP
ObLqPWYbRJ3OYaS6ZM9iU953FUIZdIORWdwIiH15F67MgObSpXwvt03iI4ucUues
6bSKk4OZzt60E6hZ+Xzp+6C1RsQoPyOkYNKbRvBcfCheasZeUXilKotFFBh+epMh
crL/OIFRynyqKCA0YRlwQw9NUOv4YzJwlX22mWRhVDq3nLqv0OtcUTC3ubPCvxiz
9ZHyCHZIWr0YGglp9yBXM4K1UQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFGMvaZ5j
Vo7I/LdU9hkGKKzq3dNFMB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE
MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN
YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0I4QTMvOTY2NTBGMzhGRDE3MTFFQzgyODk4MzY1QzRGOUFFMDIvMzZCMjlEREM4
NDE3MTFGMEFCNDZGNDE2QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN8ObAMA0GCSqGSIb3DQEBCwUAA4IBAQAVmtDkRfW1ACafUEUf
T9FlEnyaJLedtYCEx8Lu3evcZtWcDYiTfBZTtMu+7qdgE3GQ75UnmbysNqo2J03N
DAXwHVC66nCHgmdw9JboEITVKG69t2SWH1VhBFPbuwCrqtHPe2sOIJBa7tFwVFkk
mS9K37ngEWVNAVJc3x6VNMZfLQRfX5cGaEwqZkdnUp6QnzRw6egiyglQJGYE0Xet
s00cBbubJhhgJpT2V1RP5PeTd5XH3+reAt+j+8p9gMTdqaVoTAHc58Hql2WpoV6a
jXzj3qUabajN5RY98l6WwjIy8qDYWZTsoqsJmnJdRSQy6vNJvxoPbz1y3gqt+LhM
c5bb
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:06 2026 by rpki-client