
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa
File: 1396BBE630E811EEAE1F1212C4F9AE02.roa (raw, json)
Hash identifier: CuU/s3UKS9k04hjKJm9gWDdp3yaB5Ydqq+bcVnMC/ag=
Subject key identifier: 3E:92:C0:81:21:54:7D:B4:8B:86:FB:96:9E:96:B4:82:CC:65:6F:34
Certificate issuer: /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Certificate serial: 073D
Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:12:33 +0000
ROA not before: Fri 30 Jan 2026 22:18:09 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 198584
IP address blocks: 103.161.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1853 (0x73d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Validity
Not Before: Jan 30 22:18:09 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a44950-20b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:82:35:ec:3c:d0:f1:f1:81:d6:21:d4:ce:
bb:08:23:a8:42:5a:aa:05:62:e6:b0:c9:1d:73:03:
8c:54:1c:f3:46:77:fe:1b:24:44:c4:bb:c8:34:da:
d7:66:13:34:4e:69:07:bf:57:57:c7:2c:76:c8:5a:
fb:22:4b:1c:4b:b7:b6:09:aa:54:c2:c7:22:9c:81:
40:36:19:5c:d1:00:64:8b:14:c7:18:20:2d:5c:ac:
b3:7c:5c:03:77:08:c7:aa:a5:93:d8:82:36:6a:51:
64:95:1a:17:ba:95:b4:54:83:a0:64:a7:9e:8e:78:
61:58:e6:4d:c1:4e:26:c2:f0:3c:98:5a:fc:c5:d2:
35:16:7d:a7:02:7d:ef:37:74:b1:7b:2b:d0:95:ef:
13:76:c0:a0:c3:19:a2:ad:ff:db:fd:d6:9f:d6:b4:
ef:c6:1e:7d:56:cc:b2:1c:10:65:ba:5f:80:e6:58:
20:93:0a:2f:93:18:44:4a:d2:cb:96:70:10:7f:0d:
15:b6:3c:bc:6a:7f:43:98:0e:06:4d:19:d7:c3:cd:
b9:4b:ba:d5:97:f9:37:14:42:3f:79:b0:a0:c1:25:
37:e1:d4:fc:5e:0e:58:7c:62:b6:7a:ce:91:b9:c1:
7b:ec:f8:e6:6e:7b:f6:b8:19:25:e1:db:41:c8:1d:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:92:C0:81:21:54:7D:B4:8B:86:FB:96:9E:96:B4:82:CC:65:6F:34
X509v3 Authority Key Identifier:
keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.161.34.0/23
Signature Algorithm: sha256WithRSAEncryption
01:c0:24:9f:c2:6b:ca:59:82:1b:5c:d3:8a:3f:64:fc:26:9e:
e9:88:c6:1b:cc:bf:4d:65:21:31:9f:0a:c9:f0:bf:4e:e0:dd:
97:35:60:08:80:d3:b0:90:a2:be:fc:27:2d:5c:13:e5:f4:f9:
6d:d0:ef:d8:55:e0:bd:cf:2d:14:43:0e:f7:96:29:e8:9f:e8:
88:09:6c:ce:c4:46:1c:36:1c:47:b3:6e:93:07:3a:8e:16:2e:
4b:b4:03:ed:d1:f2:65:70:c0:7d:3b:00:06:e6:ef:4d:92:97:
06:bf:ae:15:38:f3:02:28:87:d4:c1:31:be:84:ea:23:fa:12:
45:b6:84:3e:6d:e9:b1:7b:3c:e9:96:1a:ba:02:9e:02:58:4b:
6f:b4:a1:89:46:85:8e:1a:63:87:c8:42:d7:e5:db:a9:44:4c:
38:96:93:3f:12:7f:c9:16:fc:f3:01:25:f7:b3:4f:1a:82:74:
30:4c:cc:48:f5:49:e2:61:12:54:09:84:18:be:b1:c9:b9:d2:
0b:c7:27:7c:a9:95:f7:c3:93:5b:82:7c:02:9b:e9:f2:9c:8a:
41:26:1a:2a:a9:98:81:4c:40:e3:89:a9:42:26:e7:fa:ec:68:
d6:53:9a:ee:2d:5b:f6:c8:3e:03:55:0d:d5:02:f2:e5:f0:ce:
9f:b2:88:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:47:35 2026 by rpki-client