
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0BD4BBC2716911EDA03D4A50C4F9AE02.roa
File: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (raw, json)
Hash identifier: H3UyhkzzibOUYss8LsCthA0jqoyZZmdZqwto2ZgduQo=
Subject key identifier: D8:64:C8:04:E8:AE:A1:A6:12:3B:AD:87:F5:74:74:16:C4:7D:03:80
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 0707
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0BD4BBC2716911EDA03D4A50C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:19:07 +0000
ROA not before: Mon 10 Nov 2025 22:45:24 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 134927
IP address blocks: 36.255.200.0/22 maxlen: 22
36.255.200.0/24 maxlen: 24
36.255.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1799 (0x707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Nov 10 22:45:24 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4912b-cee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:6b:e5:31:e3:04:1b:88:39:45:19:c0:ac:
3f:54:23:fe:81:6e:46:5f:7b:67:07:81:f3:42:22:
e6:d3:db:b9:c5:ed:84:71:bf:71:9c:6e:23:f2:09:
0d:e3:6c:85:8e:27:fa:d0:cd:bb:3b:cf:9e:c6:94:
2e:35:49:d0:43:4a:59:12:c9:f2:76:0f:03:47:46:
f2:71:88:0d:6b:c0:09:39:01:c9:d1:a3:76:4d:bc:
88:7b:48:86:ae:d4:b5:a9:2f:a2:83:4a:b0:ad:29:
8a:58:dd:c8:55:cf:fb:09:5c:ad:6c:dc:d8:c1:97:
7f:54:2c:bd:5a:da:53:30:c0:f3:2f:32:4b:d8:81:
99:36:f7:ab:24:aa:2c:13:3f:1c:1a:2c:40:bd:b4:
21:bb:0b:8f:3e:65:18:f7:f0:8a:41:2c:76:f8:9d:
cf:c8:6c:72:88:fc:17:7e:2f:8a:84:2d:54:4f:da:
13:7a:6b:91:cf:d4:69:d0:04:97:26:30:10:26:ad:
1c:10:46:2c:ba:2d:44:56:92:5c:a9:cf:21:c0:3d:
98:22:ff:c8:f5:ca:6d:7b:70:ca:13:ab:1e:99:66:
66:3b:ec:89:88:c4:23:b9:cd:f0:ff:02:5d:8b:09:
ee:e5:1c:39:c5:c3:8e:87:c4:cd:b2:8c:cf:e0:5e:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:64:C8:04:E8:AE:A1:A6:12:3B:AD:87:F5:74:74:16:C4:7D:03:80
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0BD4BBC2716911EDA03D4A50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.200.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:84:9d:d3:ff:cb:b1:c2:d9:8a:20:20:a3:34:7d:ee:9e:91:
4f:a6:1d:97:86:d3:03:b0:2b:15:7c:6b:36:7f:1b:4c:ad:8b:
54:9e:66:8f:9f:70:c4:53:b3:a1:de:4e:e7:4b:cc:19:7d:f7:
19:a6:56:9a:1f:54:37:3e:38:11:00:cf:e5:3b:a4:a5:9a:0d:
a2:b8:4b:48:84:3a:89:3e:49:b6:18:77:a8:c4:c1:d8:30:48:
f9:f0:84:cf:bc:f7:75:5a:e5:9c:67:da:17:e4:9d:ff:fd:f7:
bb:e6:68:1f:64:ed:8c:d8:22:38:01:ad:ba:06:ba:3d:63:f1:
bf:d1:fd:36:11:cc:36:57:77:cf:c6:6f:91:e8:1c:57:ff:0a:
a5:17:a9:c5:aa:25:2a:76:f4:49:a1:fd:c7:cd:5f:b8:2d:c3:
ce:ac:e0:3f:03:e8:ca:52:43:63:a5:bd:41:cd:72:fc:6b:bb:
e7:e7:77:6f:a0:c8:dd:f0:95:3c:f9:0e:33:89:0b:6c:e1:02:
b2:99:fd:db:7b:ce:fb:41:1f:0b:b4:c0:5e:f6:b8:84:a0:8a:
e2:f9:e6:3f:f5:45:e3:f1:41:96:65:7e:b5:81:ba:de:f1:50:
36:43:d4:e5:b9:d5:9b:69:11:d5:90:23:db:78:a1:67:66:6c:
5b:b7:f1:b6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3
RDc0MTQ3RjMwHhcNMjUxMTEwMjI0NTI0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTEyYi1jZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA14Rr5THjBBuIOUUZwKw/VCP+gW5GX3tnB4HzQiLm09u5xe2Ecb9xnG4j8gkN
42yFjif60M27O8+expQuNUnQQ0pZEsnydg8DR0bycYgNa8AJOQHJ0aN2TbyIe0iG
rtS1qS+ig0qwrSmKWN3IVc/7CVytbNzYwZd/VCy9WtpTMMDzLzJL2IGZNverJKos
Ez8cGixAvbQhuwuPPmUY9/CKQSx2+J3PyGxyiPwXfi+KhC1UT9oTemuRz9Rp0ASX
JjAQJq0cEEYsui1EVpJcqc8hwD2YIv/I9cpte3DKE6semWZmO+yJiMQjuc3w/wJd
iwnu5Rw5xcOOh8TNsozP4F4P/wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNhkyATo
rqGmEjuth/V0dBbEfQOAMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF
NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvMEJENEJCQzI3
MTY5MTFFREEwM0Q0QTUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCJP/IMA0GCSqGSIb3DQEBCwUAA4IBAQBNhJ3T/8uxwtmKICCjNH3u
npFPph2XhtMDsCsVfGs2fxtMrYtUnmaPn3DEU7Oh3k7nS8wZffcZplaaH1Q3PjgR
AM/lO6Slmg2iuEtIhDqJPkm2GHeoxMHYMEj58ITPvPd1WuWcZ9oX5J3//fe75mgf
ZO2M2CI4Aa26Bro9Y/G/0f02Ecw2V3fPxm+R6BxX/wqlF6nFqiUqdvRJof3HzV+4
LcPOrOA/A+jKUkNjpb1BzXL8a7vn53dvoMjd8JU8+Q4ziQts4QKymf3be877QR8L
tMBe9riEoIri+eY/9UXj8UGWZX61gbre8VA2Q9TludWbaRHVkCPbeKFnZmxbt/G2
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:17 2026 by rpki-client