
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/A7470BFC33A711EBA4313B36C4F9AE02.roa
File: A7470BFC33A711EBA4313B36C4F9AE02.roa (raw, json)
Hash identifier: ZCVyWhNkXCNm36AW8HvL8obBGE1kXtO5k/l1MbGslew=
Subject key identifier: B0:A7:D8:67:41:23:E3:1C:06:1C:50:67:09:2F:B6:D8:7E:7B:31:82
Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Certificate serial: 0BFC
Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/A7470BFC33A711EBA4313B36C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:35:04 +0000
ROA not before: Sat 12 Jul 2025 19:59:28 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 139006
IP address blocks: 101.97.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Validity
Not Before: Jul 12 19:59:28 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a478c7-27d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:a2:5f:b9:20:02:0b:59:45:9b:e9:3c:94:
d9:7e:fa:af:0c:09:81:04:43:f1:28:4c:f4:5a:fa:
e2:d2:b4:48:db:43:07:46:7e:da:5d:7d:31:9e:12:
61:bc:73:05:8e:80:bd:78:6a:b0:d6:e0:84:7f:58:
3f:dd:d3:58:5a:f0:ab:1f:01:ee:fd:39:18:b6:93:
d0:7e:04:9a:15:33:7e:d5:73:ef:63:5a:5f:f3:f2:
ad:90:3e:8e:ed:46:05:af:67:1f:8b:9c:49:91:8f:
0f:25:a7:dc:9a:fc:9b:32:32:50:ab:16:47:78:3c:
62:09:eb:32:b7:19:98:90:39:d1:f6:aa:1c:6e:1c:
50:b7:87:e5:0d:bc:40:9c:fd:56:ae:86:28:05:4b:
3f:a4:e6:c1:8e:e3:e8:a1:df:10:61:72:a1:ef:94:
c0:fc:dc:b3:81:39:13:22:59:f0:26:09:20:72:30:
69:9f:49:93:dc:8e:9a:67:7c:68:44:03:c8:f6:f9:
54:e6:f1:0a:29:f0:3f:12:b1:a4:e6:23:8e:83:1e:
d2:82:2d:e4:91:be:2a:6b:50:c8:1c:5a:ba:4c:1c:
b1:e6:3c:7d:08:27:5c:72:59:62:57:cb:63:bd:79:
c8:da:0a:42:84:98:75:45:c3:45:e8:44:82:44:66:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A7:D8:67:41:23:E3:1C:06:1C:50:67:09:2F:B6:D8:7E:7B:31:82
X509v3 Authority Key Identifier:
keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/A7470BFC33A711EBA4313B36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.97.36.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d5:db:c2:3c:2c:1f:98:9e:3f:34:70:83:06:9e:0e:4e:29:
df:04:de:3c:f2:2b:38:38:f5:ce:20:4b:13:7e:b2:ca:cf:a3:
9c:51:33:9f:5d:06:aa:0d:69:de:14:c3:45:9a:72:ec:4c:88:
89:73:8f:dd:ae:45:1b:3e:19:0a:72:66:d7:ca:10:bb:18:c9:
43:43:d9:2d:f7:12:25:a7:fa:ff:8a:9f:be:cb:7d:87:bb:a1:
24:8c:bf:c3:7d:50:8c:6b:36:f4:75:3f:53:3d:9c:f2:d6:46:
92:82:14:de:54:bf:79:af:f5:fe:2c:16:e4:a2:76:8e:ac:b7:
26:95:87:95:95:75:57:ee:01:a4:b9:fa:c2:3e:7d:5b:d0:4c:
75:c6:66:07:4b:d9:f0:eb:5f:5c:4a:e6:1f:33:05:c9:ea:93:
03:4d:4d:1b:e9:ab:87:56:c6:3f:bd:41:44:89:15:79:4e:15:
d9:6c:c5:15:d2:d4:99:58:47:22:ff:6b:e6:d4:eb:fa:d4:57:
72:cc:cf:5a:0f:10:68:8d:7d:2a:0a:7f:85:52:f0:06:ce:ba:
48:26:3a:6a:b0:c2:30:95:ca:82:01:06:08:86:69:4e:a0:11:
50:4d:f9:ab:91:4b:52:1a:b3:ef:a7:7d:ae:83:53:44:6b:d5:
9d:c2:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:38 2026 by rpki-client