
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/334C06CE012C11EBA97D451DC4F9AE02.roa
File: 334C06CE012C11EBA97D451DC4F9AE02.roa (raw, json)
Hash identifier: wiNNIp1N5Vf545wsY29J1SdUAKb4DqH1PB6Uru7des4=
Subject key identifier: 9A:40:92:15:48:88:23:62:9D:50:C8:17:5F:47:6B:4B:43:51:27:B1
Certificate issuer: /CN=A9155374/serialNumber=9BF574DF5E7F99BD436BAA5052F8CA8CFB31A2B9
Certificate serial: 0847
Authority key identifier: 9B:F5:74:DF:5E:7F:99:BD:43:6B:AA:50:52:F8:CA:8C:FB:31:A2:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_V0315_mb1Da6pQUvjKjPsxork.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/334C06CE012C11EBA97D451DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:12:18 +0000
ROA not before: Wed 14 May 2025 21:48:44 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138973
IP address blocks: 103.137.245.0/24 maxlen: 24
103.157.98.0/24 maxlen: 24
2001:df0:2780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/m_V0315_mb1Da6pQUvjKjPsxork.crl
rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/m_V0315_mb1Da6pQUvjKjPsxork.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_V0315_mb1Da6pQUvjKjPsxork.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119 (0x847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155374, serialNumber=9BF574DF5E7F99BD436BAA5052F8CA8CFB31A2B9
Validity
Not Before: May 14 21:48:44 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a44942-630e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b3:37:08:78:9a:83:82:88:21:80:18:f8:1d:
41:a9:9e:ad:af:0e:3f:58:74:58:ba:62:9c:f4:27:
0e:31:0c:c7:eb:ad:31:ab:10:80:6d:52:6c:7b:fb:
f0:39:04:5b:51:12:f9:db:42:4b:26:1f:b7:dd:91:
78:da:25:48:02:bc:36:fa:57:75:3b:42:18:4e:7a:
59:3f:b8:9a:f6:a2:e8:fd:22:a2:17:a4:da:d7:2d:
27:54:88:3b:5a:f6:06:32:2f:6b:7c:eb:a7:ce:04:
22:24:26:29:2a:55:c2:b8:f4:d2:51:9c:84:a8:1f:
80:fb:81:04:f2:a3:42:04:af:a8:98:4a:b6:5b:a5:
b8:96:c5:70:88:15:ab:61:de:59:d5:2f:d9:b2:3b:
0b:de:d8:94:29:0a:af:d3:bd:47:0c:81:89:d8:fd:
7e:fb:50:8c:fe:6d:8e:39:c8:dc:4f:4f:83:28:b4:
0e:d1:04:a4:e7:32:a9:b1:77:ee:f5:94:c8:5d:f8:
ba:cd:74:1e:89:32:12:94:10:d7:cf:55:a7:b5:23:
9b:f7:26:ab:b6:47:28:4e:bd:c2:f0:c0:81:cc:f9:
84:9b:61:00:d9:88:b7:11:f0:af:75:d7:b5:4d:bd:
12:73:1c:71:fc:bc:90:94:0c:9e:7c:88:33:e3:c8:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:40:92:15:48:88:23:62:9D:50:C8:17:5F:47:6B:4B:43:51:27:B1
X509v3 Authority Key Identifier:
keyid:9B:F5:74:DF:5E:7F:99:BD:43:6B:AA:50:52:F8:CA:8C:FB:31:A2:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/m_V0315_mb1Da6pQUvjKjPsxork.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_V0315_mb1Da6pQUvjKjPsxork.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/334C06CE012C11EBA97D451DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.245.0/24
103.157.98.0/24
IPv6:
2001:df0:2780::/48
Signature Algorithm: sha256WithRSAEncryption
6e:93:d3:17:ca:b5:25:fb:82:aa:d4:53:dd:21:63:bb:c4:d9:
1d:20:34:e8:51:d2:f4:5e:b6:a7:57:ba:7f:d8:fe:54:c9:12:
e0:a1:f3:2a:7e:7c:3b:6f:e1:df:51:a8:da:b5:a9:75:e3:0f:
79:59:9b:7f:da:a5:ba:27:1c:33:18:94:8f:b6:07:3f:3e:a1:
21:bf:cd:79:46:d3:e7:33:b1:cd:c7:37:3a:a7:e3:41:2e:78:
d2:33:0a:9d:8e:35:fc:c6:a7:d2:b2:8e:0b:a8:33:1a:3d:9c:
0e:7a:b5:d6:15:b4:75:c6:7d:47:de:e3:2d:ea:0c:d5:d4:82:
33:b9:da:c3:09:c5:cc:d3:a7:c2:fa:af:d9:09:c6:55:d5:53:
e6:7d:a5:33:55:86:ad:f2:5d:53:c3:f1:c8:dc:17:1e:34:02:
12:39:17:a9:8c:60:07:4b:b7:67:c4:ef:93:87:e7:c5:5d:34:
9a:70:52:96:ec:3d:9c:8f:d8:a6:aa:1b:ee:e8:78:d6:90:25:
d2:d6:18:8d:bf:d5:19:5c:95:da:68:e7:eb:79:cc:83:7d:58:
b9:ec:d7:fd:c1:d1:cd:da:43:47:4e:c3:21:93:e5:2b:d8:f4:
50:b3:cb:5f:bb:c2:82:6d:b0:65:99:bb:af:d9:85:b6:d3:b6:
80:83:71:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:37 2026 by rpki-client