
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/36E3783A1BA311F0985A7C2DC4F9AE02.roa
File: 36E3783A1BA311F0985A7C2DC4F9AE02.roa (raw, json)
Hash identifier: w9x6ex+eugipzBiKV6t1m+6mQ2AuaVk/w2nbhUiC89E=
Subject key identifier: 71:98:6F:8A:6A:4B:E2:9C:BB:64:26:29:FC:E8:E1:CB:6C:8C:7A:46
Certificate issuer: /CN=A9125852/serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Certificate serial: A5
Authority key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/36E3783A1BA311F0985A7C2DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:03:12 +0000
ROA not before: Thu 17 Apr 2025 15:47:44 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 153667
IP address blocks: 163.223.34.0/24 maxlen: 24
163.223.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Validity
Not Before: Apr 17 15:47:44 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3e4b0-244a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:42:a7:e7:4b:4c:93:63:70:ba:24:a0:06:7d:
01:27:67:eb:2b:92:7d:b1:46:bc:a1:60:32:03:0e:
62:78:d6:98:58:f1:b3:8c:06:0e:a2:15:e5:e1:6b:
37:d0:11:0d:15:e7:df:24:7c:28:38:3f:33:46:c2:
32:be:58:91:2c:e4:ff:32:5f:cc:8b:15:47:38:f2:
dc:9a:d2:d9:ea:d5:dc:35:0c:f9:74:2f:b2:4e:23:
f6:9c:0e:2a:a7:c1:31:80:05:5d:b7:3c:92:0f:14:
47:e0:bc:fa:1e:b2:b3:03:a9:7a:98:e8:1b:a4:5a:
32:bb:c1:46:93:3d:b6:56:e7:b0:8a:6b:fd:a7:f5:
73:94:5e:8b:30:46:0e:a4:19:76:84:6b:90:87:da:
1e:2b:b0:c3:29:07:e2:3a:74:24:e7:b1:12:63:b6:
83:26:d9:9d:bd:39:79:fb:6a:3f:9e:48:19:30:1b:
7b:8a:6a:62:ee:26:e2:28:73:04:2a:ee:5a:69:d1:
bf:d4:67:5b:01:d0:46:24:cb:22:3e:e8:0b:e0:ad:
09:bd:d7:ea:0b:a2:b6:e0:92:58:a6:c1:87:e7:6c:
2e:73:fa:e7:9c:45:4e:3e:33:91:9d:06:39:d5:fb:
93:44:0e:d8:9d:5c:43:4a:f3:83:92:31:e4:e0:29:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:98:6F:8A:6A:4B:E2:9C:BB:64:26:29:FC:E8:E1:CB:6C:8C:7A:46
X509v3 Authority Key Identifier:
keyid:87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/36E3783A1BA311F0985A7C2DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.34.0/23
Signature Algorithm: sha256WithRSAEncryption
43:24:8e:16:f4:39:67:95:65:05:18:a0:59:54:e4:e8:76:be:
01:82:a8:e2:8d:f7:aa:14:24:ae:45:a2:df:9b:b2:2d:41:6b:
cc:4d:aa:2d:b0:da:a3:bd:87:f9:1d:f9:19:4f:76:8e:ed:b4:
f5:a9:dd:05:4b:87:f5:db:bc:43:1d:8c:b7:76:33:38:14:a3:
d9:35:4a:0d:ae:03:4b:9c:7a:99:7d:67:4a:c9:27:18:83:8c:
4d:12:8a:62:cb:5c:52:5f:20:1c:84:ed:4b:20:65:b6:c8:56:
81:37:39:87:dd:a6:9c:aa:0d:8c:73:e5:d7:ac:82:cf:79:b3:
e3:01:50:8d:6d:60:77:de:49:06:44:25:7d:61:9c:5b:c7:45:
fd:dc:f4:19:cb:48:48:d7:5e:10:99:01:b4:c4:91:d9:35:b8:
74:e8:d4:df:88:d7:2c:81:c0:96:b2:4c:39:3d:d0:d7:5f:94:
b5:1a:88:19:d9:99:91:57:24:64:dc:5a:e1:b7:af:d6:08:74:
7a:65:cd:61:79:76:a5:92:82:89:6e:dc:de:33:83:c2:22:c0:
34:fa:fb:a3:2a:bb:2b:a7:b3:84:f1:89:9a:75:9b:c8:d7:5d:
4d:9a:0c:4e:5c:85:15:5f:d0:0b:b6:27:a2:86:4c:f4:1e:61:
ef:3c:18:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:14 2026 by rpki-client