
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa
File: 3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (raw, json)
Hash identifier: yo3O97PNauOrZmquHkge2qdtQQu3vWjMLnfcOcMqiR0=
Subject key identifier: CD:52:5D:A0:46:78:34:0B:76:7D:17:A9:13:04:99:7F:98:EF:17:6E
Certificate issuer: /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129
Certificate serial: 0D38
Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa
Signing time: Thu 20 Aug 2026 18:35:50 +0000
ROA not before: Thu 20 Aug 2026 18:35:50 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 139467
IP address blocks: 103.141.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl
rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3384 (0xd38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146A02, serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129
Validity
Not Before: Aug 20 18:35:50 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a874906-2920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ac:2f:5c:8b:14:f2:f6:78:53:6a:9c:dc:b6:
0f:71:f8:01:c2:e4:17:d3:86:cf:a3:87:52:76:f5:
14:90:61:ab:a2:ce:9e:a1:77:03:57:e6:60:d7:f2:
28:b8:51:de:a4:02:6e:bb:58:04:45:b5:7d:3e:dd:
a9:6f:81:19:51:4c:d4:8b:b0:fd:b4:d0:f7:f5:e8:
8c:5c:f2:c4:f1:ed:8f:27:a5:21:c1:30:39:96:6c:
ed:c1:f4:07:e0:e6:41:91:fc:f8:da:88:90:37:4d:
8d:16:23:48:ed:f5:34:33:b8:45:6a:cd:a3:1d:fe:
92:2f:7d:1e:af:73:1f:df:c9:0c:b9:a3:ba:9c:7d:
f4:fb:8c:0f:8d:54:e5:ec:e0:fd:5d:2c:f9:7b:1e:
c5:3b:94:32:ac:80:e6:c5:68:ea:2c:d7:ae:ac:09:
44:4b:49:a7:e1:6a:c3:9f:b4:2b:d4:de:2f:ab:52:
3c:d0:b5:c9:f5:03:44:e4:ac:0f:94:ca:e7:1f:33:
9e:b8:d4:ae:36:e6:52:37:ec:4c:56:40:34:47:ed:
f6:c2:2f:e6:55:91:b5:9e:ee:64:1c:64:1a:e0:54:
5c:51:3b:15:0e:42:32:67:c7:59:6f:56:76:3c:78:
31:09:f6:69:54:d0:4d:07:b5:c2:36:fd:bb:2c:88:
e7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:52:5D:A0:46:78:34:0B:76:7D:17:A9:13:04:99:7F:98:EF:17:6E
X509v3 Authority Key Identifier:
keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.204.0/23
Signature Algorithm: sha256WithRSAEncryption
74:ad:7c:1e:ea:9e:ef:37:ab:09:9b:63:68:65:ff:0b:da:61:
0b:80:33:3e:c6:56:c8:bf:a9:10:a0:8e:39:11:5f:b6:69:a2:
50:60:ee:d8:4d:d9:45:9e:71:be:7d:0d:28:e1:b0:c0:3f:f9:
4b:41:48:bc:98:5d:59:9c:e1:29:a2:c6:47:28:63:91:65:03:
cb:cc:a6:cc:df:18:f0:6e:ac:4a:17:78:3a:d5:89:56:55:80:
4c:49:f5:4d:09:93:7a:34:5a:a6:b1:24:d3:10:33:c6:7e:4f:
aa:fc:23:21:39:19:b3:d8:79:56:c7:cb:20:d2:9f:50:98:bd:
4a:4a:51:ff:73:8e:b1:02:d8:fd:45:e0:4a:ca:83:e3:49:67:
1d:43:4b:1e:96:bc:5c:4d:00:91:63:30:4a:e7:94:9d:b5:f1:
06:e3:6d:82:35:00:ea:f7:2e:c4:d8:81:3a:9f:e8:e2:6b:d3:
6a:8b:5b:83:d4:ee:4b:81:6c:e8:51:62:15:72:89:74:b9:34:
dc:de:60:e8:33:9d:f3:d2:15:f5:ea:1f:71:67:9b:d8:2d:f4:
6b:61:e7:a9:cb:25:31:52:cd:84:51:1b:6f:e9:2b:74:ec:9b:
d9:cc:16:b4:e5:7b:01:04:4f:87:bd:12:5a:9e:12:ef:a5:cd:
af:44:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:58:32 2026 by rpki-client