
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/3BD3D78AD17B11EF8626DB84C4F9AE02.roa
File: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (raw, json)
Hash identifier: gYUYL+Jd8BqYDcq6w9aABSq0jEzKxGSrRN4Kct2Vn7c=
Subject key identifier: 8E:11:85:8A:74:F1:52:88:A8:AD:E2:23:9B:8B:B6:99:5F:8D:B1:C6
Certificate issuer: /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial: 10F4
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/3BD3D78AD17B11EF8626DB84C4F9AE02.roa
Signing time: Sun 31 May 2026 18:04:31 +0000
ROA not before: Sun 31 May 2026 18:04:31 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137875
IP address blocks: 203.159.78.0/24 maxlen: 24
2405:3340:e128::/48 maxlen: 48
2405:3340:e129::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4340 (0x10f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Validity
Not Before: May 31 18:04:31 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1c782f-dc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:50:23:80:71:b4:40:e3:82:57:62:1c:d0:
e1:21:34:29:13:a7:f0:da:1c:e0:e2:8d:c8:8f:dd:
5a:3b:4d:14:20:af:6d:5d:58:5a:8c:38:d8:ba:1d:
15:4c:79:ed:e8:13:60:21:57:10:10:91:1e:08:94:
a8:5a:a3:a3:a0:35:93:01:6a:e4:71:64:9a:1f:b1:
91:b9:ec:01:8d:20:7b:2c:39:aa:55:79:a4:99:c9:
63:18:c7:b0:bb:7f:39:18:b5:55:06:38:4d:4f:97:
8b:09:07:06:5c:ec:6a:71:79:5e:c2:79:73:ec:aa:
8b:e7:56:5f:9d:c5:ff:2e:e8:15:61:d6:f3:62:f2:
59:42:57:78:00:bf:85:51:22:15:29:e9:17:1f:ca:
b0:b4:50:86:1c:43:78:01:f5:56:2e:fb:ca:90:82:
bd:a5:28:a9:b3:e4:66:d6:06:8b:ec:3a:bb:74:1e:
1a:29:26:fa:6a:94:66:85:f1:ff:64:a9:3d:94:fe:
cf:48:ac:55:1d:d5:aa:c0:9b:24:e8:f9:90:cb:c5:
a7:eb:ed:84:09:3f:7d:4a:ba:0e:b6:89:13:ff:3f:
19:f6:78:c4:a7:7b:d1:b4:1d:2f:7e:a8:db:87:1b:
47:ce:01:e6:a7:7f:bd:9c:3f:23:b1:1d:44:a4:1d:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:11:85:8A:74:F1:52:88:A8:AD:E2:23:9B:8B:B6:99:5F:8D:B1:C6
X509v3 Authority Key Identifier:
keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/3BD3D78AD17B11EF8626DB84C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.159.78.0/24
IPv6:
2405:3340:e128::/47
Signature Algorithm: sha256WithRSAEncryption
58:12:7a:3e:ce:d1:bd:4a:8d:64:96:e6:72:84:1d:ce:76:fa:
75:72:61:8d:de:68:ce:d3:e5:52:b2:05:b6:cc:1d:61:ab:e5:
e0:b3:98:92:be:49:28:ff:7c:0e:36:c5:fe:3c:99:f4:94:83:
e4:12:ff:20:6d:57:9a:da:2f:b3:e3:6a:49:bb:1f:da:ef:da:
9d:82:b2:ff:64:25:b1:60:81:a0:ca:2e:a3:bb:d5:9e:38:86:
e4:19:a6:9b:81:fd:6b:3d:68:67:49:04:02:00:e3:c5:28:38:
21:a4:09:e3:3b:ee:b6:ee:f3:6c:ed:51:03:d0:7d:50:b7:a7:
52:0e:41:8a:5c:67:7e:dc:32:0b:28:f4:5b:13:1c:1d:38:9c:
02:cb:88:69:b8:1a:b4:6e:a5:d2:d6:7a:85:ea:8f:4c:46:12:
de:77:2b:b9:1c:88:0d:1c:5b:a1:66:11:88:40:4e:df:82:e9:
5e:3d:91:37:1a:f2:ce:b3:a5:1b:c6:40:a2:2a:53:82:18:53:
4c:48:6f:73:5e:c1:a2:e5:14:bf:2b:d7:99:60:9f:4f:76:7b:
ac:12:51:f6:22:e7:78:17:01:a1:55:4e:9e:f7:f1:98:27:a0:
15:5e:88:3e:a5:a2:5d:00:67:32:de:e1:cc:8c:9f:f0:ac:a2:
3f:61:88:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:29 2026 by rpki-client