
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/3A173FE4DE1C11ED8935D41DC4F9AE02.roa
File: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (raw, json)
Hash identifier: 7FMFrX0Xi2B0+fD25UfLuQbjzYJ8bpG2QcEFzbPEZL4=
Subject key identifier: 39:3B:14:20:AF:33:C5:50:23:30:CF:DB:82:F3:02:86:5B:42:80:F8
Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Certificate serial: 0224
Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/3A173FE4DE1C11ED8935D41DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:59:31 +0000
ROA not before: Wed 29 Oct 2025 02:46:57 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 7029
IP address blocks: 103.12.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Validity
Not Before: Oct 29 02:46:57 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a43833-1025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:45:3b:10:c9:f4:b5:f8:9e:45:1b:44:f3:
e6:23:78:6b:a6:0b:9d:6a:da:9f:3f:99:32:aa:f5:
8b:43:5c:9c:8a:2d:a9:dd:58:df:a6:ba:f9:48:3f:
d8:a6:c3:a3:96:5c:d3:5d:9c:65:15:b0:c0:f6:9d:
73:5a:fc:2d:5e:fb:c9:61:a0:40:b7:b6:ac:a5:c8:
6c:ef:31:bd:12:45:e3:19:47:54:f4:9d:60:36:b2:
7d:74:e9:c5:3e:30:89:d2:69:ec:38:2b:6d:08:e8:
40:30:0d:27:aa:3f:e7:75:a6:9c:b7:fa:01:6d:03:
4b:46:ad:ef:65:f6:e2:16:de:6b:81:68:17:e5:16:
f5:9c:2f:76:a3:4d:60:70:e0:62:1e:71:c3:49:c8:
56:05:79:d6:3b:fb:df:6f:51:9d:09:72:35:90:dd:
75:9d:62:0b:24:ed:16:9c:ed:cb:41:0e:ba:39:b8:
33:7a:19:5e:ff:c5:55:e3:64:60:b2:d0:ac:41:5e:
83:d2:e9:1c:be:9f:ec:6f:e9:6b:49:a9:95:d5:7a:
d9:13:fb:ab:a5:7d:fe:4b:22:24:3c:57:a6:7b:55:
14:3c:df:d3:4a:42:ff:06:68:55:a0:32:7b:fc:c1:
a9:e6:58:a2:19:dc:f9:ad:c2:b6:23:6c:d3:6e:e0:
d3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3B:14:20:AF:33:C5:50:23:30:CF:DB:82:F3:02:86:5B:42:80:F8
X509v3 Authority Key Identifier:
keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/3A173FE4DE1C11ED8935D41DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.180.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:56:ff:19:68:d4:85:85:f2:1d:e8:fc:2b:5a:d6:a1:d3:1c:
91:67:01:65:0d:da:e1:5e:33:29:90:6f:52:d0:0f:07:da:81:
ea:18:51:21:5f:16:22:48:1d:26:67:3d:29:c0:be:a7:6f:bd:
cc:aa:48:fb:90:22:4d:ef:40:0c:42:30:67:7c:b7:a5:98:1d:
8a:d7:5c:ca:7a:d5:df:67:d5:e8:da:e8:9f:bb:15:cc:f4:32:
e7:af:fa:f2:18:8e:1e:bb:64:43:50:51:3f:1d:be:4d:0a:1a:
7a:f1:10:5a:3a:6e:3b:f3:2d:96:31:d3:b3:e2:3b:c5:b6:96:
75:db:f3:f0:81:5a:47:bf:0b:71:68:76:18:ec:67:26:e3:6b:
1b:e6:7b:1a:d0:2f:bd:1e:5c:72:0e:d2:6b:ff:6d:40:b0:2d:
4d:f9:16:cc:35:5e:55:6e:11:2c:d8:e2:cb:6f:53:6a:03:fc:
91:ab:9a:99:11:33:01:ba:b9:a7:e1:d5:51:dc:84:88:9a:0b:
66:e8:d9:e9:3f:a0:b8:f9:a4:bf:3e:84:37:6d:bc:a2:1d:95:
ca:8e:59:b2:a6:1e:a4:47:82:47:1e:d3:76:20:5e:2c:9a:76:
3e:bb:14:1e:3b:cb:1f:97:24:d0:27:3d:e0:93:ed:b0:5e:71:
b2:6d:16:51
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDMkExMTAvBgNVBAUTKDlFMDU1RDM1Q0YzMjkyNTMzNUNDOTQwQ0M4ODI4QjYz
REQ2MDczMEIwHhcNMjUxMDI5MDI0NjU3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzgzMy0xMDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1PxFOxDJ9LX4nkUbRPPmI3hrpgudatqfP5kyqvWLQ1ycii2p3Vjfprr5SD/Y
psOjllzTXZxlFbDA9p1zWvwtXvvJYaBAt7aspchs7zG9EkXjGUdU9J1gNrJ9dOnF
PjCJ0mnsOCttCOhAMA0nqj/ndaact/oBbQNLRq3vZfbiFt5rgWgX5Rb1nC92o01g
cOBiHnHDSchWBXnWO/vfb1GdCXI1kN11nWILJO0WnO3LQQ66Obgzehle/8VV42Rg
stCsQV6D0ukcvp/sb+lrSamV1XrZE/urpX3+SyIkPFeme1UUPN/TSkL/BmhVoDJ7
/MGp5liiGdz5rcK2I2zTbuDTzQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDk7FCCv
M8VQIzDP24LzAoZbQoD4MB8GA1UdIwQYMBaAFJ4FXTXPMpJTNcyUDMiCi2PdYHML
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkMyQS9FRDlGOERCQURF
MTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWtsTTF6SlFNeUlLTFk5MWdj
d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25nVmROYzh5a2xNMXpKUU15SUtMWTkxZ2N3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUJDMkEvRUQ5RjhEQkFERTExMTFFRDg1RUMwQTQ5QzRGOUFFMDIvM0ExNzNGRTRE
RTFDMTFFRDg5MzVENDFEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZwy0MA0GCSqGSIb3DQEBCwUAA4IBAQAqVv8ZaNSFhfId6PwrWtah
0xyRZwFlDdrhXjMpkG9S0A8H2oHqGFEhXxYiSB0mZz0pwL6nb73Mqkj7kCJN70AM
QjBnfLelmB2K11zKetXfZ9Xo2uifuxXM9DLnr/ryGI4eu2RDUFE/Hb5NChp68RBa
Om478y2WMdOz4jvFtpZ12/PwgVpHvwtxaHYY7Gcm42sb5nsa0C+9HlxyDtJr/21A
sC1N+RbMNV5VbhEs2OLLb1NqA/yRq5qZETMBurmn4dVR3ISImgtm6NnpP6C4+aS/
PoQ3bbyiHZXKjlmyph6kR4JHHtN2IF4smnY+uxQeO8sflyTQJz3gk+2wXnGybRZR
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:46 2026 by rpki-client