
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/37FE0B120C0011EAA414FC4AC4F9AE02.roa
File: 37FE0B120C0011EAA414FC4AC4F9AE02.roa (raw, json)
Hash identifier: pMrtGOs7uT1vXLuw6dCiCU+QFLRT1Z3tUfJSisugmVg=
Subject key identifier: FC:3B:FD:32:83:5F:4E:E2:99:44:FC:3A:84:2A:19:DA:25:BB:DC:F8
Certificate issuer: /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Certificate serial: 0CFA
Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/37FE0B120C0011EAA414FC4AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:35:29 +0000
ROA not before: Wed 18 Jun 2025 18:22:50 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 40676
IP address blocks: 103.77.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl
rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3322 (0xcfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131ABD, serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Validity
Not Before: Jun 18 18:22:50 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a45cc1-a916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:c7:87:22:78:8b:6e:eb:96:53:ef:e6:26:
fc:47:ad:a8:40:8b:7d:ae:52:e0:9b:4d:8a:bf:15:
69:47:b1:72:2c:9c:92:50:bf:af:28:d9:dc:ef:16:
d2:c4:c8:f5:75:84:32:19:eb:1e:5d:61:2c:53:11:
74:9e:05:d1:f9:f0:df:87:92:5c:79:6b:96:17:72:
12:aa:95:f8:81:b8:35:81:71:43:b5:48:64:8b:9a:
22:f2:ec:dd:1e:02:9f:a5:c7:2c:40:db:4f:29:a7:
97:70:22:d2:93:92:7e:2d:7f:51:c0:58:a9:b5:ed:
75:a4:b8:1b:14:3a:2b:03:4c:82:39:7b:31:d2:cd:
ed:d5:98:46:d3:98:23:7b:bd:6d:be:67:51:82:33:
80:27:26:f1:42:52:d1:22:1a:c1:9c:ef:e1:61:47:
bc:67:2a:e0:80:27:84:77:19:10:bf:ed:2b:23:df:
2e:bd:72:e0:12:ce:83:8f:4d:fd:39:99:ed:f3:50:
59:2e:c5:16:26:67:8c:64:fa:4a:38:22:f7:14:26:
7a:cc:fe:2c:8f:56:5d:48:2d:d9:69:4e:97:aa:1b:
1b:ce:6f:47:b4:be:72:54:b7:02:b2:61:cc:d5:6b:
76:22:d9:5a:55:f0:09:87:d4:8a:be:af:a2:4d:b6:
00:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3B:FD:32:83:5F:4E:E2:99:44:FC:3A:84:2A:19:DA:25:BB:DC:F8
X509v3 Authority Key Identifier:
keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/37FE0B120C0011EAA414FC4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.77.224.0/24
Signature Algorithm: sha256WithRSAEncryption
29:69:e4:e5:16:69:9d:d4:90:0f:e0:4b:c8:6b:71:b8:8b:98:
13:29:93:d8:72:3c:b2:a9:6a:c8:97:9f:9c:ac:70:b4:fa:21:
fb:b1:65:0e:4b:ea:1e:07:d1:be:c8:39:88:af:15:1b:60:a9:
f7:32:96:82:61:2d:55:c3:0b:fa:ae:6d:a4:52:c1:50:32:cd:
7e:e5:2c:d0:0b:5f:27:19:36:89:87:a2:68:a6:5e:d9:f4:f2:
4d:55:c3:b3:fc:d2:27:c0:86:88:1a:7f:ef:57:f5:5c:e1:fc:
54:91:1b:56:1e:37:b8:b6:a7:26:45:d7:f1:c2:40:0b:24:a0:
d7:45:c6:37:6e:76:a8:58:1f:bc:0f:b9:03:71:e1:12:9b:61:
6f:57:55:8f:ff:27:58:0e:ba:ec:a5:40:60:8c:66:b0:07:39:
c8:92:14:82:d4:7d:39:1e:c9:90:af:c7:5f:a5:23:63:e4:ab:
3d:aa:92:79:27:cd:0b:81:6c:3e:48:25:c7:90:8e:7d:05:3f:
c5:c2:12:9d:46:21:10:ee:43:d3:13:3d:fe:2a:42:bb:37:23:
81:fb:c5:38:c5:e0:ef:b3:06:00:9c:91:8a:d3:b1:16:e1:52:
12:e3:f1:36:41:ef:bc:f8:f0:71:29:b0:19:a2:7f:4f:c6:32:
e6:97:35:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:41 2026 by rpki-client