
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B3682FEC21D711EB9CFAC46EC4F9AE02.roa
File: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (raw, json)
Hash identifier: FMxmnJD1FXOVdBqe3Z4UNVeqTWvxDWlAMcRI0DJm40o=
Subject key identifier: 0A:69:82:E8:03:16:64:6B:2D:07:BC:EC:FD:EB:9D:90:40:8B:9A:A4
Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial: 103E
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B3682FEC21D711EB9CFAC46EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:39:24 +0000
ROA not before: Thu 26 Feb 2026 17:15:43 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 18013
IP address blocks: 103.133.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4158 (0x103e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Validity
Not Before: Feb 26 17:15:43 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a479cc-f2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e2:8d:ac:a5:fd:f3:3d:e7:01:73:28:6e:d0:
02:f2:95:d6:7a:11:56:ae:6c:38:32:c0:70:ee:5d:
cd:87:a3:3d:4e:19:b9:aa:a8:39:b7:c9:50:51:8d:
6a:9e:5d:ad:52:9f:44:09:11:7e:c4:38:1f:6e:16:
d0:fb:fa:f1:98:7e:8a:c6:4f:74:63:7f:0d:3b:8b:
9b:91:de:cf:a1:ad:82:4e:da:50:3b:0e:e8:f4:17:
5d:cf:3f:fd:b5:e9:3a:d7:80:1e:42:77:cc:d4:0a:
c7:95:bf:23:36:a8:30:19:a5:ba:d2:f8:b5:25:7d:
33:ed:39:cf:1d:60:e6:6a:23:56:ea:8f:9d:56:94:
11:53:91:2d:12:aa:e0:b0:2d:da:29:9f:b7:36:29:
49:f8:61:5a:06:ea:43:c0:5a:14:d9:e9:34:47:8b:
15:02:86:50:5b:5c:cb:19:6e:e3:1f:6d:25:bb:0b:
16:90:d7:10:e9:d2:a6:a1:b3:df:02:ad:04:23:18:
67:4a:4a:7f:76:8d:83:d1:65:8a:89:f0:94:c3:53:
47:5d:75:46:bd:e9:43:f3:47:74:4b:76:64:8b:09:
7c:74:6f:2a:9f:52:fd:09:0b:09:d7:ce:aa:46:d6:
d3:08:26:30:64:9a:ed:ce:f1:73:ee:ab:dc:a8:bc:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:69:82:E8:03:16:64:6B:2D:07:BC:EC:FD:EB:9D:90:40:8B:9A:A4
X509v3 Authority Key Identifier:
keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B3682FEC21D711EB9CFAC46EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:f3:b9:5d:b3:fe:72:da:dc:c2:9d:78:dd:40:4d:9f:84:c5:
17:5f:56:08:b8:ff:70:26:5e:dc:84:22:0d:f6:91:49:80:3b:
16:17:bc:4a:e9:2a:05:6c:8c:b9:8f:ee:01:83:a8:72:96:5f:
45:ee:00:b2:83:d5:95:70:e4:16:e0:1d:e9:ec:b4:f6:e2:91:
63:d5:90:91:fb:51:00:06:0b:00:da:ce:49:d0:55:2b:25:c3:
73:ef:39:0c:b1:20:b7:08:38:68:61:a4:c3:48:f1:0b:29:f3:
4e:07:41:bb:4e:e9:74:fc:55:4f:1f:2d:60:9a:3a:4c:54:c8:
00:56:ee:36:09:2e:69:f1:45:73:2c:89:d3:6f:38:0a:c1:31:
0d:b5:ce:0d:d4:cc:31:68:9d:83:17:68:3e:63:af:d7:8b:5d:
46:06:27:54:21:4e:94:e0:b0:ac:9b:35:49:dc:8a:ea:fe:90:
59:42:cc:ff:59:b7:4e:e6:6d:b1:e2:a9:4c:b0:e5:88:ee:bd:
b8:7a:a7:5f:7a:c3:a8:a5:2d:6f:1e:ec:3f:bb:2f:ce:7a:d7:
2f:62:ff:57:fe:74:6e:25:fa:2d:7c:96:87:f6:04:d0:56:fb:
bb:2b:77:fc:57:75:30:49:c5:f1:9d:1d:f1:e3:3a:b1:a7:d4:
e0:3e:e7:e4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICED4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD
RDM0MEFCMjgwHhcNMjYwMjI2MTcxNTQzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzljYy1mMmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlOKNrKX98z3nAXMobtAC8pXWehFWrmw4MsBw7l3Nh6M9Thm5qqg5t8lQUY1q
nl2tUp9ECRF+xDgfbhbQ+/rxmH6Kxk90Y38NO4ubkd7Poa2CTtpQOw7o9Bddzz/9
tek614AeQnfM1ArHlb8jNqgwGaW60vi1JX0z7TnPHWDmaiNW6o+dVpQRU5EtEqrg
sC3aKZ+3NilJ+GFaBupDwFoU2ek0R4sVAoZQW1zLGW7jH20luwsWkNcQ6dKmobPf
Aq0EIxhnSkp/do2D0WWKifCUw1NHXXVGvelD80d0S3Zkiwl8dG8qn1L9CQsJ186q
RtbTCCYwZJrtzvFz7qvcqLzfdQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAppgugD
FmRrLQe87P3rnZBAi5qkMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz
RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx
eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzE2OTAvMTVCNDFCODg2M0YzMTFFOUEwODU0QzQ3QzRGOUFFMDIvQjM2ODJGRUMy
MUQ3MTFFQjlDRkFDNDZFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ4WwMA0GCSqGSIb3DQEBCwUAA4IBAQC587lds/5y2tzCnXjdQE2f
hMUXX1YIuP9wJl7chCIN9pFJgDsWF7xK6SoFbIy5j+4Bg6hyll9F7gCyg9WVcOQW
4B3p7LT24pFj1ZCR+1EABgsA2s5J0FUrJcNz7zkMsSC3CDhoYaTDSPELKfNOB0G7
Tul0/FVPHy1gmjpMVMgAVu42CS5p8UVzLInTbzgKwTENtc4N1MwxaJ2DF2g+Y6/X
i11GBidUIU6U4LCsmzVJ3Irq/pBZQsz/WbdO5m2x4qlMsOWI7r24eqdfesOopS1v
Huw/uy/OetcvYv9X/nRuJfotfJaH9gTQVvu7K3f8V3UwScXxnR3x4zqxp9TgPufk
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:36 2026 by rpki-client