
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/3C70D06076D011EDBAECD665C4F9AE02.roa
File: 3C70D06076D011EDBAECD665C4F9AE02.roa (raw, json)
Hash identifier: hYHdnr2oFJt+0Y0EftReU0/2zxETIJpzujXYr1vfHyc=
Subject key identifier: 2C:BA:93:16:33:5B:D8:3D:71:D9:FC:D2:6C:43:C1:E4:16:8E:E9:C2
Certificate issuer: /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial: 0430
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/3C70D06076D011EDBAECD665C4F9AE02.roa
Signing time: Fri 05 Jun 2026 00:31:18 +0000
ROA not before: Fri 05 Jun 2026 00:31:18 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 38141
IP address blocks: 103.186.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1072 (0x430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Validity
Not Before: Jun 5 00:31:18 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2218d5-659d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:be:ff:2f:7f:61:cc:81:0c:e5:20:25:be:
d0:9f:0a:d5:07:7b:52:7c:79:4f:55:4f:d1:7f:81:
61:39:60:31:6a:fe:13:27:d2:32:06:9f:a4:f2:d4:
7e:b9:bd:4b:ec:49:0d:83:d5:64:b7:46:ae:f6:fc:
03:ab:7b:76:90:5b:f5:bf:e2:c1:d5:2d:fc:32:bb:
5f:ec:45:2e:f7:5d:52:10:2f:c8:07:3b:c2:98:26:
e3:db:61:7b:36:23:70:47:47:a4:ea:47:32:b4:75:
8a:1c:e3:bd:d6:35:d7:bf:cd:96:00:14:69:a4:b9:
4b:cd:7d:a6:b8:cd:d5:43:e9:61:04:99:35:d0:33:
f5:d9:7b:73:e5:02:2e:b6:de:80:8a:5b:55:26:2e:
18:63:30:2b:a2:f2:43:f2:e7:18:0e:5f:43:6b:f6:
09:c5:d4:65:f3:75:77:f5:19:77:61:3a:95:28:8c:
c2:27:5f:f1:af:e0:2c:61:57:fd:d8:f5:5f:14:27:
b1:e5:95:f0:3c:dd:29:47:d6:0b:04:c0:43:4b:10:
37:0a:69:13:f4:f8:0d:fe:6d:63:18:22:35:27:eb:
71:c8:5c:dc:16:87:19:52:7b:02:f4:2a:46:d3:24:
6c:62:27:a8:0f:49:dd:df:06:2d:d1:41:aa:e0:4f:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BA:93:16:33:5B:D8:3D:71:D9:FC:D2:6C:43:C1:E4:16:8E:E9:C2
X509v3 Authority Key Identifier:
keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/3C70D06076D011EDBAECD665C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.56.0/24
Signature Algorithm: sha256WithRSAEncryption
40:be:7a:06:3d:62:4c:a4:44:58:8c:08:e8:0d:12:11:29:93:
c3:26:73:2c:5e:76:1d:94:b5:2e:ad:86:0c:89:cc:6f:7e:8b:
9e:5e:27:29:db:01:d8:e7:20:14:ad:d4:32:ae:73:55:51:2e:
96:5f:d4:fc:fe:08:10:59:f0:b8:9c:13:b7:9d:3c:3c:ed:b8:
ae:dd:00:53:4f:fb:e7:e1:94:33:31:09:a9:53:df:b8:5a:aa:
df:9b:46:a1:9c:0f:f5:72:cc:44:1d:56:f6:a0:b3:2d:66:ce:
92:3f:cb:a4:ae:9d:ff:79:69:71:f0:cf:d6:ca:d7:74:55:5f:
56:73:fb:60:ad:49:58:2a:7b:58:4d:69:91:af:d2:f8:03:a5:
1f:b0:68:71:6c:12:98:8a:c2:be:dd:d9:54:34:d1:88:99:71:
dc:8c:dd:88:63:f2:cf:23:96:a3:be:0e:7c:56:f3:42:1d:03:
61:29:03:08:6e:49:4b:e8:11:c6:b6:2a:23:b5:c0:35:ff:16:
1a:4b:50:ec:ad:70:b5:7a:b4:d5:bf:0f:8a:dc:a7:8b:b7:95:
66:bb:47:18:22:1b:c4:55:67:8f:7b:36:c5:67:c9:50:aa:46:
e5:10:e5:89:9c:2a:20:12:9e:2d:88:40:04:37:7a:f7:3e:41:
8e:f6:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:14:27 2026 by rpki-client