
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/3195F9E62C6711F0B5DEE20CC4F9AE02.roa
File: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (raw, json)
Hash identifier: eJNqSsgVwpcsQg2beMNYNXlFNiDiSYEYUWJ9Bn6L/vw=
Subject key identifier: 4A:C3:0B:9F:93:A6:3C:F3:17:1D:CD:78:1B:60:74:98:2F:89:34:15
Certificate issuer: /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
Certificate serial: 97
Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/3195F9E62C6711F0B5DEE20CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:04:48 +0000
ROA not before: Thu 08 May 2025 23:50:17 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 134090
IP address blocks: 165.99.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl
rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
Validity
Not Before: May 8 23:50:17 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3e510-78e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:8c:cc:17:3a:24:15:f4:35:7d:b2:ff:f0:
b9:27:2a:24:08:4a:9e:7c:51:21:c3:ff:5b:a2:85:
1d:18:3e:3a:b3:13:2e:8c:8e:21:cf:3c:3c:11:d7:
8e:f2:47:89:a8:3e:af:10:7e:d3:75:9d:a2:a7:27:
3a:2f:ef:a0:1a:9d:a9:2d:98:fa:a8:94:0e:f7:f1:
c9:18:0a:23:30:2d:21:a6:1a:c1:6b:70:5f:4d:8a:
0a:8d:0e:59:10:57:27:8a:25:77:68:84:52:66:3b:
1c:fc:33:04:2d:41:84:b5:42:46:b5:74:b0:98:92:
85:a1:05:52:dc:2f:22:32:3c:2a:8a:65:5e:44:5c:
92:e8:d5:37:37:37:36:22:da:a2:6c:bb:d7:b4:26:
25:d1:2d:ec:7e:f6:6f:49:4a:99:ec:91:7a:d6:27:
c9:fb:4f:e7:a0:0b:ed:fa:31:a2:dd:d5:25:09:2c:
2f:01:b6:01:6d:fe:31:01:6a:a5:89:c2:5a:ec:37:
b7:47:72:a7:61:57:50:d5:56:3d:c1:eb:2b:c1:22:
f3:cc:e9:24:b7:c3:14:8f:28:f4:db:ea:ab:2d:a7:
59:45:6b:a7:97:bf:47:f8:61:85:3f:78:bf:32:dd:
55:31:ac:99:09:f3:11:3c:f7:43:b3:91:19:22:d7:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C3:0B:9F:93:A6:3C:F3:17:1D:CD:78:1B:60:74:98:2F:89:34:15
X509v3 Authority Key Identifier:
keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/3195F9E62C6711F0B5DEE20CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.26.0/23
Signature Algorithm: sha256WithRSAEncryption
02:ab:66:98:79:bf:9a:70:12:5a:12:0e:23:aa:c3:85:52:fa:
62:20:b3:04:b5:0a:24:bf:61:9e:74:9c:fc:42:21:7c:19:d7:
3a:fd:7d:6e:10:79:89:74:7a:a8:f6:f2:e4:31:5f:a5:1b:b0:
97:d2:87:f4:32:61:34:7c:11:2f:28:63:11:55:44:e3:3b:ed:
a9:c4:48:2a:b0:58:9a:ef:25:95:2c:76:df:23:f7:9c:f3:80:
0c:8e:3e:fa:51:5e:b8:71:ec:42:a0:1e:e3:e9:37:41:43:aa:
82:fc:5c:28:8e:e8:ee:b2:8b:1a:fa:bc:03:f8:ba:d5:74:3e:
52:f1:d0:7a:8e:1b:69:24:32:f9:f7:81:7d:3c:11:ac:5f:6c:
bb:d6:ec:b2:d5:c7:54:f1:b5:3d:1d:fe:98:3c:d6:96:6c:0d:
32:f6:3b:8d:d0:1e:c4:32:5d:10:a7:5f:c5:2f:e8:da:86:2a:
1e:24:25:2d:85:b4:57:77:be:b1:64:4a:99:ac:cf:a3:51:e5:
53:34:05:f8:10:ca:e0:51:27:b1:f7:01:4e:c6:e4:6c:c0:13:
09:9b:4d:33:91:ff:a7:07:22:f3:2e:39:35:c0:04:2c:55:84:
79:21:15:50:69:e0:4c:78:b9:03:b6:9d:d2:77:b0:3b:ee:0b:
e5:54:e4:b9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcwNDkxMTAvBgNVBAUTKDgzM0JENzlDRjE3RTY2MDIzRjcwQTYyNTJENTE1OUM5
Q0Q3QTUwRTMwHhcNMjUwNTA4MjM1MDE3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZTUxMC03OGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuRKMzBc6JBX0NX2y//C5JyokCEqefFEhw/9booUdGD46sxMujI4hzzw8EdeO
8keJqD6vEH7TdZ2ipyc6L++gGp2pLZj6qJQO9/HJGAojMC0hphrBa3BfTYoKjQ5Z
EFcniiV3aIRSZjsc/DMELUGEtUJGtXSwmJKFoQVS3C8iMjwqimVeRFyS6NU3Nzc2
ItqibLvXtCYl0S3sfvZvSUqZ7JF61ifJ+0/noAvt+jGi3dUlCSwvAbYBbf4xAWql
icJa7De3R3KnYVdQ1VY9wesrwSLzzOkkt8MUjyj02+qrLadZRWunl79H+GGFP3i/
Mt1VMayZCfMRPPdDs5EZItfo5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFErDC5+T
pjzzFx3NeBtgdJgviTQVMB8GA1UdIwQYMBaAFIM715zxfmYCP3CmJS1RWcnNelDj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzA0OS9BODA0QTQ4RTJD
NjYxMUYwOURBNTZCMEJDNEY5QUUwMi9nenZYblBGLVpnSV9jS1lsTFZGWnljMTZV
T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2d6dlhuUEYtWmdJX2NLWWxMVkZaeWMxNlVPTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDcwNDkvQTgwNEE0OEUyQzY2MTFGMDlEQTU2QjBCQzRGOUFFMDIvMzE5NUY5RTYy
QzY3MTFGMEI1REVFMjBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWMaMA0GCSqGSIb3DQEBCwUAA4IBAQACq2aYeb+acBJaEg4jqsOF
UvpiILMEtQokv2GedJz8QiF8Gdc6/X1uEHmJdHqo9vLkMV+lG7CX0of0MmE0fBEv
KGMRVUTjO+2pxEgqsFia7yWVLHbfI/ec84AMjj76UV64cexCoB7j6TdBQ6qC/Fwo
jujusosa+rwD+LrVdD5S8dB6jhtpJDL594F9PBGsX2y71uyy1cdU8bU9Hf6YPNaW
bA0y9juN0B7EMl0Qp1/FL+jahioeJCUthbRXd76xZEqZrM+jUeVTNAX4EMrgUSex
9wFOxuRswBMJm00zkf+nByLzLjk1wAQsVYR5IRVQaeBMeLkDtp3Sd7A77gvlVOS5
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:34 2026 by rpki-client