
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/3712E24075D911E8A722EC33C4F9AE02.roa
File: 3712E24075D911E8A722EC33C4F9AE02.roa (raw, json)
Hash identifier: 0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=
Subject key identifier: 48:5D:92:31:B2:42:B4:6A:3B:6C:18:CA:1A:2B:4C:5A:C1:39:BA:5A
Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial: 3560
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/3712E24075D911E8A722EC33C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:52:05 +0000
ROA not before: Wed 28 Jan 2026 15:10:49 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 131584
IP address blocks: 103.226.212.0/23 maxlen: 24
103.226.214.0/24 maxlen: 24
103.226.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13664 (0x3560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Validity
Not Before: Jan 28 15:10:49 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a460a5-11c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:81:9f:90:56:69:7f:a8:4d:93:b6:29:ca:
8d:73:05:6c:89:b9:5d:8d:89:f9:a1:32:c8:3f:2f:
83:62:9f:b2:56:5c:59:fd:55:ea:c7:18:e7:7e:6d:
06:6a:3a:6f:f4:26:eb:7e:e4:44:9e:97:a5:cd:79:
36:ca:8e:11:10:2c:02:2e:b7:da:e0:0f:55:d1:98:
fc:1e:cc:b9:a2:1b:39:91:44:fe:86:f1:b8:f2:e1:
7c:2a:76:f2:51:8b:86:10:df:13:b8:a7:f1:9b:4d:
be:75:ca:83:2e:bc:41:da:9b:56:4d:aa:7a:02:41:
b3:da:43:50:24:b9:f4:3c:52:ef:a1:c7:85:2e:7f:
2f:ce:32:09:73:e3:97:aa:35:06:68:5b:d3:0a:95:
d2:29:60:67:2f:c2:83:19:da:e3:6e:67:08:f6:fc:
99:e0:07:d3:05:db:e4:9f:98:12:84:3d:e8:8f:cd:
6e:14:54:4e:d4:fa:10:4f:f2:47:9c:6e:a6:8a:ba:
f4:f0:93:15:f0:2d:4c:23:37:08:5f:ae:a6:d4:28:
2f:ea:52:22:95:99:4b:4a:ce:a3:5d:b5:d7:55:1e:
33:cb:35:db:17:73:36:61:bf:aa:92:10:3e:3f:bb:
1b:b6:5f:cb:ad:9e:48:fe:c9:39:a1:dd:8a:3a:52:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5D:92:31:B2:42:B4:6A:3B:6C:18:CA:1A:2B:4C:5A:C1:39:BA:5A
X509v3 Authority Key Identifier:
keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/3712E24075D911E8A722EC33C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.226.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:00:7d:ae:f0:65:c4:e6:3d:6d:b9:e9:dd:64:be:c5:a1:2e:
80:32:dd:2b:3a:d7:bb:a9:60:32:49:a3:9e:f2:b9:4d:c7:c2:
62:b5:e5:6e:1e:99:c6:27:dc:a1:f1:ca:69:ab:ad:66:ab:f8:
38:a1:18:bd:48:63:37:67:76:ee:95:61:fa:5f:37:e1:12:be:
12:f3:5c:65:9d:8c:df:6e:91:6a:3e:90:ad:74:bb:b7:e7:37:
80:88:b8:ac:83:1f:4c:eb:b1:c4:56:98:99:e7:8c:9f:62:ba:
86:f4:17:f8:85:e3:7d:ed:b5:b1:b4:b4:21:24:ce:2f:09:8d:
9a:5b:db:51:6d:1f:a6:2e:fd:0c:c7:7a:45:97:a6:be:f9:f6:
61:76:6e:d5:c7:d7:59:ee:bc:11:35:b9:83:d1:92:63:3e:6a:
61:ae:6d:56:1d:b1:1e:da:3e:e2:83:bc:70:9e:69:12:08:2e:
3d:db:f6:5f:cb:e6:44:d1:11:bc:85:19:fa:a9:9f:62:f7:c7:
d8:35:8d:fe:54:3b:d8:fa:ab:94:2e:26:d7:25:d8:02:e9:87:
ff:cb:e2:54:95:6d:20:69:27:dc:8c:49:18:9a:dc:31:48:75:
95:13:42:56:99:e9:52:c5:5e:95:fe:3b:30:12:45:80:54:92:
f7:e5:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:04 2026 by rpki-client