
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/EE380826D87211EFBAE0FC19C4F9AE02.roa
File: EE380826D87211EFBAE0FC19C4F9AE02.roa (raw, json)
Hash identifier: eYKV4envgCgs3WvH6pBo9YBy1q8A8VpKoNaaI9QRSww=
Subject key identifier: 87:A8:0E:BE:98:10:78:AC:E9:C5:A0:84:7E:E0:E2:C0:80:CC:8A:6A
Certificate issuer: /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
Certificate serial: D2
Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/EE380826D87211EFBAE0FC19C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:57:49 +0000
ROA not before: Sun 25 May 2025 06:29:43 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152706
IP address blocks: 103.36.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl
rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD7B, serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
Validity
Not Before: May 25 06:29:43 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3e36d-0f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:3c:18:80:1a:84:8f:eb:90:30:5f:08:fc:
99:0b:79:00:5c:a4:df:fa:f9:bd:31:f7:58:f3:1b:
95:c4:14:41:04:46:75:75:42:d2:b6:54:a9:60:de:
cb:61:cf:2d:5e:84:c9:61:7e:8c:df:58:4b:7f:3d:
5b:51:64:7f:8a:fa:eb:39:5f:29:8e:f9:79:93:52:
94:26:9b:87:70:97:2e:82:ce:5f:64:65:c6:58:df:
7d:af:41:90:c9:7d:87:46:7c:9b:a3:45:5e:ff:1f:
1c:3b:ec:15:95:1e:b5:7c:45:42:fb:20:5a:a7:41:
5b:d2:3e:e1:b8:17:10:6e:9b:55:6b:fa:40:18:94:
ad:80:1d:4a:98:29:eb:39:b1:d6:d5:df:1b:e5:c4:
94:f3:71:3d:ec:c4:34:f9:a9:d5:df:22:c6:61:eb:
4b:ed:88:bf:c5:62:19:1d:67:63:0b:c0:96:94:10:
cd:71:4b:b0:ef:86:34:a8:35:29:a8:ff:91:75:46:
15:33:df:f1:69:96:aa:5d:3d:b1:47:b5:ec:46:ae:
34:32:39:51:df:3c:65:4e:c2:dd:23:eb:52:30:45:
35:96:3a:04:b5:74:98:64:60:13:ae:d1:aa:33:09:
05:e6:56:17:4f:24:08:31:61:5c:76:ce:5a:eb:12:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A8:0E:BE:98:10:78:AC:E9:C5:A0:84:7E:E0:E2:C0:80:CC:8A:6A
X509v3 Authority Key Identifier:
keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/EE380826D87211EFBAE0FC19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.36.150.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:f6:c9:7d:0f:cf:28:39:89:4f:7b:e2:2f:22:4b:6c:77:a0:
91:f7:2f:ae:7c:e2:6f:42:35:8f:06:9d:b2:89:65:4a:50:c4:
87:9b:f3:42:72:d0:a5:3c:87:57:a5:20:99:cf:59:8b:35:2f:
07:3a:f7:30:bf:9b:ab:29:cf:41:c4:09:09:c5:eb:77:65:b6:
72:f5:9e:1b:b0:aa:31:00:d6:27:02:cf:db:01:77:93:7c:f6:
47:38:ec:4f:aa:71:d7:83:dd:88:ff:59:ec:a0:eb:99:34:25:
2e:d0:41:7d:bf:22:13:21:af:fd:e8:b4:46:de:50:a5:d7:d5:
43:99:07:e9:d3:f9:5b:86:ea:be:a6:fa:4f:2f:17:f1:81:de:
31:4f:36:0a:6d:8d:c9:d6:7c:57:d6:25:b4:c5:82:94:ca:dc:
fe:f3:de:4a:26:95:2a:6f:a4:40:13:53:a4:bb:16:89:2c:76:
9e:7f:25:51:7b:4c:4a:dd:10:ef:6f:17:ed:b5:53:dc:1f:65:
c0:05:52:e6:ac:92:55:8e:d2:42:19:51:38:fe:6c:87:d8:25:
e4:da:d1:14:0c:8a:75:a6:b9:20:4d:67:bd:f5:e1:72:b1:5c:
0a:a1:01:35:b7:70:36:d3:7f:9d:cc:84:42:81:9c:5e:ad:ed:
65:d3:9f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:50:21 2026 by rpki-client