
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/3B2D313236D811F184E25C7A99EE528E.roa
File: 3B2D313236D811F184E25C7A99EE528E.roa (raw, json)
Hash identifier: BNyeCuHZz1o8T4+VjjbDRUxlgC1hCW1lIapp52qA60Q=
Subject key identifier: AA:CC:58:88:EF:D7:31:FC:50:E5:55:C7:BD:17:55:DC:2B:3B:F5:02
Certificate issuer: /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial: 05F5
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/3B2D313236D811F184E25C7A99EE528E.roa
Signing time: Mon 13 Apr 2026 01:29:36 +0000
ROA not before: Mon 13 Apr 2026 01:29:36 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136248
IP address blocks: 103.84.252.0/23 maxlen: 23
103.84.252.0/24 maxlen: 24
103.84.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 22:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525 (0x5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180161, serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Validity
Not Before: Apr 13 01:29:36 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69dc4700-c49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:97:b9:4e:cc:dc:c0:12:10:91:88:23:a7:
d5:76:67:3e:5d:46:9b:5a:d9:1f:32:b0:9a:f9:59:
de:3e:cc:46:0e:f0:37:60:99:11:9b:04:f1:86:1c:
1b:35:94:e2:9b:3f:df:a9:df:17:d4:93:aa:81:09:
4f:bb:91:93:22:a5:0b:be:99:4a:a3:f6:de:8f:0d:
30:fa:70:b7:93:34:25:43:39:f8:71:3e:6b:a3:ef:
09:66:e4:b3:69:88:44:7c:35:1c:f0:93:bc:17:d5:
7f:32:21:34:df:96:7f:9f:15:ee:35:ac:f8:ce:76:
ab:e2:cb:be:1c:71:10:d3:8e:9a:59:9b:f6:fd:1f:
26:f8:08:9c:9d:a4:3b:ee:b3:90:c7:fd:13:1a:0d:
96:dd:ea:3a:70:74:34:c9:3a:7f:16:b3:69:d8:69:
43:0f:9a:3a:db:49:db:32:27:fd:8b:41:29:6d:f8:
67:d3:3f:1d:db:46:f0:d4:aa:a9:e6:da:85:a2:03:
fd:cf:48:c0:8e:f6:f7:98:ef:94:df:69:d7:86:96:
0e:00:3a:ba:42:c2:f5:7b:ef:96:77:3e:30:33:2a:
7e:fc:7e:a5:f1:ac:ca:8d:9d:30:c8:a9:d6:2e:f7:
2f:2c:73:11:58:85:8d:d2:41:31:6b:2d:61:58:75:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CC:58:88:EF:D7:31:FC:50:E5:55:C7:BD:17:55:DC:2B:3B:F5:02
X509v3 Authority Key Identifier:
keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/3B2D313236D811F184E25C7A99EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.252.0/23
Signature Algorithm: sha256WithRSAEncryption
84:91:a4:9c:aa:d7:cb:71:6e:83:57:9d:52:63:76:24:66:4f:
1a:ab:20:82:23:ec:fb:af:3d:31:8c:ce:78:40:8e:00:92:4a:
eb:45:71:c7:95:57:d4:41:78:45:ef:9e:cf:9b:dc:b9:cf:10:
6e:a3:a2:a3:28:a4:2f:5a:c0:5c:6a:0a:de:45:f2:c7:31:f2:
60:f5:28:83:59:ef:4e:4e:43:2d:25:ae:60:a6:eb:ca:67:42:
73:b0:3a:e6:22:1e:68:75:28:21:2b:20:2b:35:51:80:44:3b:
a7:a0:85:80:cc:c7:08:f7:01:9b:cf:66:97:c8:36:56:3a:d1:
d7:e3:e5:0d:ea:42:0b:cd:98:86:ad:fc:b5:5c:1a:3e:02:75:
95:c6:72:ed:10:a0:f6:ed:1c:c7:f0:a8:7d:69:bd:6a:39:13:
24:01:cf:1d:9d:5c:c1:21:98:fe:c1:6a:57:4c:9f:7e:33:3f:
c1:ed:38:8f:e4:46:3d:3e:5b:8f:60:f2:de:51:0c:88:0c:d5:
95:a3:f1:88:72:19:75:c0:9c:da:19:d1:b9:83:73:ec:aa:61:
fa:0c:1d:59:fb:64:59:5f:a7:86:f5:5b:1a:4b:b1:a4:18:76:
7a:56:a6:1e:b2:46:ae:86:ea:87:cd:a8:4e:bf:eb:a8:7f:7b:
bc:7d:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:48 2026 by rpki-client