
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/B3695572FD9E11F087EE26735F6F56BC.roa
File: B3695572FD9E11F087EE26735F6F56BC.roa (raw, json)
Hash identifier: rCPj89ZhrAuLJpKSrj2V9nyJ0NP4IwMB9Wn3wdAsanU=
Subject key identifier: 98:1D:7B:65:27:71:F6:D8:F4:E6:3B:09:6A:EE:67:F0:07:33:B6:EA
Certificate issuer: /CN=A91E04E1/serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
Certificate serial: 14
Authority key identifier: 31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/B3695572FD9E11F087EE26735F6F56BC.roa
Signing time: Sun 01 Mar 2026 05:39:36 +0000
ROA not before: Fri 30 Jan 2026 05:44:11 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 18126
IP address blocks: 103.64.132.0/23 maxlen: 23
103.64.134.0/24 maxlen: 24
103.64.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl
rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04E1, serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
Validity
Not Before: Jan 30 05:44:11 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3d118-2a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:5b:fe:48:74:3b:03:3e:77:47:d3:fc:59:
45:d9:bf:a8:b0:85:55:88:87:e3:60:0f:0d:9c:dd:
04:9f:84:47:2a:a8:72:c7:c4:27:b1:ad:95:05:df:
1a:0b:07:b6:8a:ba:8f:82:59:70:49:1b:2e:31:6d:
a9:70:63:6c:36:0d:49:54:f9:1e:ec:1e:a4:38:f1:
34:60:56:67:cd:96:8c:46:fa:e5:ff:87:cb:0f:11:
a6:14:77:a2:0d:b0:4c:f0:a4:b2:c5:4d:d3:be:9d:
74:83:52:9c:5a:d6:88:40:97:5c:80:ff:0d:66:7c:
59:43:89:56:ef:6c:cf:1d:c0:6c:0d:88:72:a9:92:
a6:6c:ff:f6:8b:51:1d:13:80:43:1f:08:83:a0:9c:
b0:af:c9:2b:41:a0:ea:5b:2a:49:4b:75:fe:8a:0c:
f4:62:10:d9:1f:25:2c:b5:c9:9a:bb:91:a8:9c:18:
3e:ee:03:c2:fb:b6:41:ea:82:52:0a:a9:bc:99:07:
0e:e3:63:da:a6:6a:14:ab:27:02:6d:fd:65:a9:d5:
8f:91:0a:f7:63:90:ce:db:f5:ea:86:51:38:4a:88:
27:be:0a:1d:5a:7c:f7:70:30:27:96:55:5a:36:90:
49:8e:b4:93:b7:7d:9e:51:0b:5d:39:6c:84:8e:27:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1D:7B:65:27:71:F6:D8:F4:E6:3B:09:6A:EE:67:F0:07:33:B6:EA
X509v3 Authority Key Identifier:
keyid:31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/B3695572FD9E11F087EE26735F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.64.132.0/22
Signature Algorithm: sha256WithRSAEncryption
59:81:cd:7d:51:47:97:44:eb:14:ac:69:e6:a5:3e:80:07:b6:
9a:95:99:a0:87:c0:42:12:88:6b:47:7f:59:61:97:0f:03:e0:
62:10:b4:b5:4c:0d:20:c3:11:cb:09:dc:9f:27:ed:01:70:1b:
fa:2d:fb:25:bf:4a:c4:f5:64:0b:57:c7:89:1f:dd:38:24:d7:
17:11:29:71:da:80:17:2b:97:fa:d3:29:c4:e1:fc:29:39:60:
dc:0a:9a:6e:9e:b5:a3:6d:80:73:97:18:89:3e:9f:ec:e4:35:
62:2d:20:67:4b:e3:cb:97:68:47:44:c9:57:e9:b5:41:90:df:
0a:18:0b:e7:97:0f:44:d2:29:b5:1c:0b:c3:72:29:85:05:e2:
d6:e7:af:66:04:6c:20:a9:f0:38:08:ad:a8:88:dd:2d:21:56:
9a:e6:69:28:01:22:be:83:5e:b4:8a:18:db:c8:4f:7e:67:85:
77:01:f5:12:b7:99:69:ab:79:f2:64:8d:9f:86:48:00:89:21:
77:0a:8f:50:5e:fd:b2:a7:a4:1e:1b:69:2d:99:9b:96:44:67:
a6:2a:47:6b:f1:14:c7:01:41:e0:21:f2:a4:e3:da:65:48:d4:
f2:65:26:56:23:9f:b6:e6:d6:a7:f5:df:88:f6:ce:08:e4:3e:
6c:dd:08:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:51:44 2026 by rpki-client