
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/3A6B56D0E03411EF9FB2E824C4F9AE02.roa
File: 3A6B56D0E03411EF9FB2E824C4F9AE02.roa (raw, json)
Hash identifier: v0/CEXlWXi0crMBA1tUEdN8IIRUJpRoMJCs1U/BmKCc=
Subject key identifier: E5:B8:C8:78:83:D7:06:89:23:F6:02:BC:58:A4:BC:A8:E8:CC:B8:10
Certificate issuer: /CN=A916D4BE/serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7
Certificate serial: 04CA
Authority key identifier: CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/3A6B56D0E03411EF9FB2E824C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:02:22 +0000
ROA not before: Sat 31 Jan 2026 00:20:15 +0000
ROA not after: Tue 02 Jun 2026 00:00:00 +0000
asID: 149312
IP address blocks: 103.178.188.0/23 maxlen: 23
103.178.188.0/24 maxlen: 24
103.178.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl
rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:12:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226 (0x4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D4BE, serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7
Validity
Not Before: Jan 31 00:20:15 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=69a454fe-a578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:8a:3b:ed:e7:08:d5:da:35:d5:3c:cf:33:
8f:05:8a:34:fb:71:02:72:7f:da:92:65:4d:48:16:
f4:65:3a:04:f0:f6:7d:c6:27:11:1b:1c:f0:d5:a4:
bd:3f:ae:50:70:58:5e:ca:65:c7:0a:a7:a2:66:e5:
5a:76:4b:82:62:b7:13:b5:7e:dc:c6:04:09:47:2b:
d4:3a:27:76:f4:7b:5a:68:7f:c4:e7:c6:db:1d:27:
b7:f0:76:87:5d:ea:c9:bc:ff:dd:c0:b9:fb:cc:73:
18:6c:c6:a9:b2:42:12:a8:db:19:25:1a:d7:e6:20:
9a:99:4f:36:9b:15:bb:34:6a:4c:37:f2:07:02:91:
8f:1a:5c:3c:d8:a1:a0:d0:23:d8:89:11:2b:1b:e8:
dd:79:9e:e5:a7:48:9b:cd:8f:90:87:e9:f2:04:ed:
d1:df:79:f1:96:6a:64:5e:1e:be:44:ec:fd:56:95:
66:95:ba:1b:3e:74:d3:73:2d:d0:46:b7:b8:30:6c:
39:73:9f:67:0c:7f:54:6a:8b:dc:25:7f:56:f6:eb:
63:98:89:0a:ee:49:9d:82:31:11:ab:9e:0f:7a:a8:
ae:64:fb:17:0b:ef:39:1c:ec:d4:51:84:c4:bf:a9:
fd:5b:84:fe:24:b0:7a:8a:ae:a4:59:4b:6c:7f:8c:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B8:C8:78:83:D7:06:89:23:F6:02:BC:58:A4:BC:A8:E8:CC:B8:10
X509v3 Authority Key Identifier:
keyid:CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/3A6B56D0E03411EF9FB2E824C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.178.188.0/23
Signature Algorithm: sha256WithRSAEncryption
75:31:36:94:5d:f8:d4:35:a0:f9:97:4b:8c:64:81:16:71:ce:
04:79:ab:b5:25:3b:2f:41:17:ae:7a:fe:14:cf:5f:ae:ff:d5:
8f:62:fb:e0:d5:f6:4c:fe:9b:58:89:54:20:70:e7:04:76:94:
a0:25:95:2a:2c:fd:3a:84:57:3a:ae:9f:b2:a3:f5:70:02:b4:
dd:25:26:2d:d6:25:94:c4:fc:70:21:14:38:a3:a4:36:cd:7d:
b8:dc:9b:69:cf:c4:c8:05:ae:a0:ca:d6:f5:ae:b2:a4:74:e2:
60:86:eb:9b:1a:fe:26:bc:60:8f:da:c5:15:ad:9d:a6:b8:59:
d0:e5:de:72:9e:dc:d7:e1:48:b4:a7:8a:8d:4c:0a:3b:33:34:
98:f7:81:11:84:23:a5:f9:b0:7b:71:dd:f2:b1:66:79:83:36:
25:c0:c6:20:38:e5:c6:05:ea:da:d8:f6:e0:fd:99:05:f0:af:
30:52:4e:29:a1:80:ca:0b:49:c8:73:65:e1:a6:53:a6:df:dc:
34:5b:10:8f:af:10:d9:b0:1c:7f:f8:a0:08:b3:7c:77:95:e9:
2d:0f:6b:18:0d:33:f5:5d:ec:68:4d:3a:c9:19:57:3a:4e:0e:
a2:e2:0f:8e:17:61:23:86:85:27:83:62:da:e5:f0:1c:1a:fa:
dc:e4:10:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:23 2026 by rpki-client