
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/37EF9AB2B73E11E9BCAF574AC4F9AE02.roa
File: 37EF9AB2B73E11E9BCAF574AC4F9AE02.roa (raw, json)
Hash identifier: o+taEjJ0aBsqWb6q9LrnUn/LHKLJcn/W3PrK/LTV6cA=
Subject key identifier: F1:06:E2:2E:42:20:8A:A0:C7:4A:48:C1:AE:95:F1:DC:31:DA:F5:65
Certificate issuer: /CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0
Certificate serial: 0E61
Authority key identifier: F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/37EF9AB2B73E11E9BCAF574AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:21:30 +0000
ROA not before: Tue 04 Mar 2025 18:35:59 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 133169
IP address blocks: 103.86.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl
rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3681 (0xe61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165226, serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0
Validity
Not Before: Mar 4 18:35:59 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4051a-8a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:f4:56:36:4c:9e:40:44:c1:1a:41:44:1a:
58:42:9f:fd:b1:fe:61:e0:04:1a:75:9c:b4:d4:0d:
ae:db:a3:5a:db:35:4a:46:ed:a4:3c:e0:e8:58:16:
e3:47:aa:4a:64:8e:1d:97:4f:3e:a0:62:67:8c:47:
cf:15:75:ac:c0:5e:a6:65:f3:3e:af:93:63:3f:97:
55:70:8d:63:eb:70:c3:70:74:28:ec:05:83:32:c6:
b3:c6:80:79:93:03:b0:a3:10:5f:b9:02:42:92:98:
17:29:4d:b8:ff:bb:bd:d4:57:ad:00:0f:02:59:67:
14:31:84:ee:b8:d2:a7:1b:ab:8f:0b:20:3d:41:e8:
8e:77:04:1c:6e:94:31:55:ad:ea:08:1f:0d:d0:29:
3e:07:f2:b3:28:36:f7:f1:12:40:71:e5:a6:21:26:
f7:90:90:54:f4:d8:2c:b2:39:27:4b:a8:04:71:83:
e0:82:52:95:70:0c:57:53:f7:2a:6f:82:42:2a:35:
37:f2:2f:0f:66:29:08:70:3c:d4:32:9e:3e:dd:49:
8d:86:d1:66:ec:eb:48:38:e4:96:8a:a0:35:36:0b:
7a:9d:37:ab:43:ac:9f:c8:c9:82:fc:62:4d:5a:b9:
5d:84:9d:df:08:f1:a8:95:96:56:b0:2d:da:66:4c:
d4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:06:E2:2E:42:20:8A:A0:C7:4A:48:C1:AE:95:F1:DC:31:DA:F5:65
X509v3 Authority Key Identifier:
keyid:F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/37EF9AB2B73E11E9BCAF574AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.130.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:d8:71:fd:b6:83:68:72:06:0b:64:41:47:4b:e2:3c:6c:31:
71:af:00:ca:3a:b1:6b:d1:33:19:78:26:e9:92:21:97:2d:24:
23:1f:0d:12:6a:29:7f:94:b2:56:08:17:4d:7c:1e:41:85:cd:
7d:33:ac:e3:d2:fa:66:78:6f:8d:a5:25:c2:ee:0f:d7:1e:02:
98:8e:6a:60:31:74:85:aa:c4:99:1e:b8:05:72:30:74:61:82:
f5:ce:e5:1b:4b:b4:c6:f3:2e:55:37:a6:a5:04:79:89:8e:6d:
e9:22:e8:81:60:a5:9a:4c:61:be:e2:90:f5:cf:d2:79:5f:38:
34:50:d7:33:48:c0:45:c1:d7:e4:f9:a7:a7:bf:b3:b7:0f:cd:
6f:2c:96:30:e0:ef:07:64:b8:c5:e9:16:4d:d3:bf:92:76:b7:
81:cb:24:d5:bd:42:13:3a:b1:90:c4:b5:f2:80:20:b0:31:c2:
e9:13:c5:48:ea:5a:5c:52:72:28:bc:69:e8:27:23:b0:c9:46:
84:a5:11:ae:a9:7e:15:c8:5e:83:50:d6:6e:51:6f:97:46:26:
21:23:86:8c:30:82:6f:1a:ca:b6:44:09:de:8f:7d:4b:01:c9:
d1:14:20:f5:2c:56:5b:3e:99:df:31:87:36:bd:3f:f0:01:5a:
fc:f0:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:48 2026 by rpki-client