
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3E3640816B711ECBD752D47C4F9AE02.roa
File: A3E3640816B711ECBD752D47C4F9AE02.roa (raw, json)
Hash identifier: f2I2JUyPVwawA2Jitwp6FbWujLi61XO5prWcR/JL+8o=
Subject key identifier: 03:77:2C:31:07:E0:4B:92:FE:68:B4:D9:29:B0:63:0C:44:99:C1:E2
Certificate issuer: /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial: 05F2
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3E3640816B711ECBD752D47C4F9AE02.roa
Signing time: Fri 24 Jul 2026 21:42:35 +0000
ROA not before: Fri 24 Jul 2026 21:42:35 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 63916
IP address blocks: 103.113.156.0/22 maxlen: 22
103.113.156.0/24 maxlen: 24
103.113.157.0/24 maxlen: 24
103.113.158.0/24 maxlen: 24
103.113.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1522 (0x5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Validity
Not Before: Jul 24 21:42:35 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a63dc4a-c7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:44:55:dc:0f:4e:fe:79:78:c7:25:7c:0f:
4e:7e:86:89:b3:11:54:cc:05:20:d4:89:35:6b:52:
88:1f:f7:89:d8:82:6d:dd:dc:5c:0e:d2:81:e7:06:
51:cb:60:d5:7b:62:3a:cd:98:71:a0:58:29:d2:2f:
3b:1f:58:1d:03:79:c5:cd:ba:6e:3c:55:e8:ce:d7:
b0:ac:53:e8:9c:6e:b7:fa:55:2d:c8:3b:ec:7a:d7:
ca:53:54:0b:e9:52:73:07:4f:23:49:92:9e:5b:68:
bd:e2:e3:07:b8:98:a1:3f:67:68:25:ec:31:c0:51:
98:40:f6:fd:5e:79:e6:83:34:7a:56:3b:a1:67:44:
fd:70:2a:92:c5:aa:7a:ae:c0:27:c1:fd:10:aa:ed:
3d:87:af:f6:be:11:6d:28:67:5c:f0:30:54:d2:bc:
83:53:59:36:9a:36:42:6c:56:6c:e8:92:19:d1:2e:
5c:b0:ec:b8:9a:00:f9:c4:b5:07:87:d5:8f:2c:23:
d5:36:e4:83:15:e4:0d:d6:82:32:73:f2:17:d3:ac:
f0:1b:29:60:40:8b:4b:35:9a:cd:4e:3d:bc:0f:cb:
eb:35:59:93:e8:74:85:bf:4f:77:22:32:d3:c3:a1:
63:3f:f6:e9:d3:55:92:fe:70:a6:58:15:74:19:8d:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:77:2C:31:07:E0:4B:92:FE:68:B4:D9:29:B0:63:0C:44:99:C1:E2
X509v3 Authority Key Identifier:
keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3E3640816B711ECBD752D47C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.156.0/22
Signature Algorithm: sha256WithRSAEncryption
96:db:1d:1d:8f:dc:23:1d:ba:36:68:3d:26:50:5f:31:08:5f:
63:32:67:ae:ed:34:04:1c:82:2d:73:9b:90:2b:aa:6b:04:4d:
9b:06:33:83:c6:98:a9:53:b0:98:03:35:44:2d:51:39:e3:eb:
f2:06:a4:bc:68:ec:42:c6:07:12:71:3f:f3:85:23:ef:de:57:
fe:6b:7e:86:e5:49:d3:87:64:f4:3f:e3:f9:cb:89:88:95:cd:
ae:3f:07:f8:1a:a4:0d:54:1b:c5:18:5c:9f:ec:2b:d0:c9:fd:
e2:41:04:80:3f:eb:8f:a5:10:ba:2e:b0:02:ac:74:de:08:0b:
83:f0:3d:7b:c0:05:d4:da:5a:1d:cb:5b:2b:01:2b:ef:dc:c9:
98:f0:f5:f7:a6:6e:25:f0:f4:95:24:f2:08:75:e5:c9:d1:49:
95:81:2c:d7:dd:b9:ee:1b:93:7b:6d:d3:cc:36:bd:c1:78:23:
d6:70:28:ce:35:0c:1b:62:88:1b:f0:73:de:f5:3f:97:d5:a7:
8c:f5:03:a5:36:9f:89:e5:1a:2f:c6:b0:7e:63:6e:02:72:eb:
84:79:0e:86:19:bc:37:c9:4e:a5:47:30:63:23:6b:9d:d2:ea:
7f:c4:c6:c4:d8:eb:94:84:07:90:8d:25:07:2d:d6:74:2f:8c:
ce:4a:67:a4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg5MUQxMTAvBgNVBAUTKDQxRDI2OEM1MTEzRUYzRUQ3QjE3M0I3ODBFMDE3RUQz
RkU4NTU1RjcwHhcNMjYwNzI0MjE0MjM1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYzZGM0YS1jN2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoi5EVdwPTv55eMclfA9OfoaJsxFUzAUg1Ik1a1KIH/eJ2IJt3dxcDtKB5wZR
y2DVe2I6zZhxoFgp0i87H1gdA3nFzbpuPFXoztewrFPonG63+lUtyDvsetfKU1QL
6VJzB08jSZKeW2i94uMHuJihP2doJewxwFGYQPb9XnnmgzR6VjuhZ0T9cCqSxap6
rsAnwf0Qqu09h6/2vhFtKGdc8DBU0ryDU1k2mjZCbFZs6JIZ0S5csOy4mgD5xLUH
h9WPLCPVNuSDFeQN1oIyc/IX06zwGylgQItLNZrNTj28D8vrNVmT6HSFv093IjLT
w6FjP/bp01WS/nCmWBV0GY1CqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAN3LDEH
4EuS/mi02SmwYwxEmcHiMB8GA1UdIwQYMBaAFEHSaMURPvPtexc7eA4BftP+hVX3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD
QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9RZEpveFJFLTgtMTdGenQ0RGdGLTBfNkZW
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FkSm94UkUtOC0xN0Z6dDREZ0YtMF82RlZmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDg5MUQvMzgxQThGMkExQ0MyMTFFQjgyQjU3MTc4QzRGOUFFMDIvQTNFMzY0MDgx
NkI3MTFFQ0JENzUyRDQ3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3GcMA0GCSqGSIb3DQEBCwUAA4IBAQCW2x0dj9wjHbo2aD0mUF8x
CF9jMmeu7TQEHIItc5uQK6prBE2bBjODxpipU7CYAzVELVE54+vyBqS8aOxCxgcS
cT/zhSPv3lf+a36G5UnTh2T0P+P5y4mIlc2uPwf4GqQNVBvFGFyf7CvQyf3iQQSA
P+uPpRC6LrACrHTeCAuD8D17wAXU2lody1srASvv3MmY8PX3pm4l8PSVJPIIdeXJ
0UmVgSzX3bnuG5N7bdPMNr3BeCPWcCjONQwbYogb8HPe9T+X1aeM9QOlNp+J5Rov
xrB+Y24CcuuEeQ6GGbw3yU6lRzBjI2ud0up/xMbE2OuUhAeQjSUHLdZ0L4zOSmek
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:59:06 2026 by rpki-client