
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/3263B6905E7311EB8B143F3BC4F9AE02.roa
File: 3263B6905E7311EB8B143F3BC4F9AE02.roa (raw, json)
Hash identifier: QtOxsjWDqgNGgCTcsMTzCCptaAMNkGCIlXxZlBPaZcU=
Subject key identifier: 30:D8:3B:9E:D3:A3:FD:B8:10:6F:9A:1D:36:33:4A:A8:D6:8C:C2:2C
Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Certificate serial: 07BB
Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/3263B6905E7311EB8B143F3BC4F9AE02.roa
Signing time: Sun 26 Jul 2026 22:42:38 +0000
ROA not before: Sun 26 Jul 2026 22:42:38 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 136523
IP address blocks: 43.254.133.0/24 maxlen: 24
43.254.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1979 (0x7bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Validity
Not Before: Jul 26 22:42:38 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a668d5d-e8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:94:d8:86:1b:44:05:14:3f:2f:d1:c1:f2:
8f:90:43:e3:4c:45:43:1d:b8:e2:47:0d:b5:4b:e9:
7e:47:fd:aa:df:d6:c5:fe:3f:97:1f:3b:96:26:f5:
c9:97:b3:df:14:34:b8:14:64:ca:48:ab:71:77:59:
86:e3:ca:61:95:79:32:c6:6b:4a:f8:f2:82:e0:84:
8f:e3:a3:41:5c:40:ba:dd:63:f6:b3:33:40:16:22:
01:c9:7b:93:40:92:ae:38:18:c5:47:80:bf:98:2f:
be:ad:91:44:a9:77:98:77:b4:d4:d6:53:fb:9e:49:
a1:3d:da:d4:58:9d:3a:ab:f4:a8:7c:00:16:91:b9:
dc:d4:b5:44:61:01:d0:e2:a9:7e:c6:97:17:88:02:
67:0f:1d:6d:41:c4:c4:fc:fc:1a:47:47:d8:1f:54:
17:ea:83:fa:90:c9:97:e5:3a:fc:26:32:3d:62:07:
b8:cd:97:e7:bc:70:ed:c1:10:dc:8d:9e:68:cb:5f:
66:44:0d:3f:00:2e:e2:f2:56:86:46:a1:07:81:64:
e3:e3:1b:53:8a:e5:de:6d:0e:b0:af:31:47:bd:23:
9e:03:56:1c:95:91:f7:15:e9:b5:b1:e2:14:c0:73:
2f:e9:82:c6:45:97:6d:9d:88:0b:1c:a7:46:51:17:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D8:3B:9E:D3:A3:FD:B8:10:6F:9A:1D:36:33:4A:A8:D6:8C:C2:2C
X509v3 Authority Key Identifier:
keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/3263B6905E7311EB8B143F3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.254.133.0/24
43.254.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:73:d8:cd:be:c9:5c:c0:47:09:bd:d9:75:54:fb:37:b7:ae:
61:4f:4f:53:84:31:a9:45:83:81:49:e3:81:74:91:cc:15:a5:
ae:36:81:c4:da:74:99:d4:1e:0b:44:7d:ba:9d:1c:19:78:50:
85:00:e4:03:0a:28:ed:2a:02:2a:13:a0:cb:61:82:e8:61:2c:
b7:c5:69:37:dc:c3:f8:39:41:5d:a5:27:e4:17:d1:d0:16:1b:
df:7a:bb:5e:cd:69:0c:5f:40:ca:94:1b:82:75:75:bc:30:a5:
4a:f0:df:8d:5e:97:06:95:63:e2:46:f9:3d:1b:57:d6:c2:a0:
6e:cd:c6:09:3a:2c:a0:c2:e2:a1:8f:3e:17:d0:3a:9f:1b:87:
4e:3b:00:92:1b:6a:9d:26:58:69:15:bc:e5:43:85:1c:2f:c2:
44:ea:5a:36:7f:f9:e5:06:9d:18:aa:2b:bf:aa:ce:0d:3f:a5:
51:74:c2:47:ea:af:1a:85:23:14:0d:dc:d5:c7:a9:a3:62:5d:
77:bb:9a:e4:f2:56:bd:d7:ca:c6:19:90:d9:78:7a:e6:8f:22:
26:39:97:4c:b6:f4:ce:89:b6:32:68:8c:9a:c5:db:dc:74:28:
24:d4:81:3b:9f:c2:aa:96:09:06:8a:24:69:86:65:61:2f:8d:
c4:34:d5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:04:13 2026 by rpki-client