
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/3C09B1A2640F11ECBC536111C4F9AE02.roa
File: 3C09B1A2640F11ECBC536111C4F9AE02.roa (raw, json)
Hash identifier: 0nH+hJmdQg+dXDI9GR9IsbqvDX01ufb4T3K76L+VbGs=
Subject key identifier: 3D:FA:41:C2:BC:7A:FA:CE:EE:D9:31:C3:2D:A3:F1:57:98:EF:33:DB
Certificate issuer: /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D
Certificate serial: 04C1
Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/3C09B1A2640F11ECBC536111C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:48:08 +0000
ROA not before: Wed 26 Nov 2025 22:46:55 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149005
IP address blocks: 103.176.14.0/24 maxlen: 24
2001:df0:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl
rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1217 (0x4c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112AD5, serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D
Validity
Not Before: Nov 26 22:46:55 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a43588-2759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:13:8b:d8:3d:60:c5:75:e4:40:f5:81:95:
4b:31:45:04:b8:d3:d5:c0:91:84:e5:4f:dc:6f:b2:
e5:29:60:77:2f:48:38:ad:e3:af:5e:1b:c1:9b:45:
25:3c:7b:3f:1d:55:b4:3b:b6:0a:17:81:c3:e4:9a:
d0:b8:81:6a:1a:8c:d3:d2:3b:e6:f2:93:41:45:e2:
fc:8f:fe:b7:fd:d4:a3:74:55:20:bb:5d:c0:cb:db:
8d:26:14:7a:2c:ba:c1:4b:5a:29:51:fb:55:b5:ae:
65:d5:10:13:49:06:c5:ec:a2:83:d2:b5:3d:a3:23:
dd:41:48:13:c9:d0:4c:0f:23:63:73:11:49:d5:96:
5a:78:65:02:53:aa:0b:cc:be:63:e3:ab:3a:3d:72:
ac:0d:11:b7:04:9e:01:60:bc:6c:46:0f:35:9c:4c:
10:12:c4:10:7a:82:b7:62:88:93:cd:d7:80:c1:c3:
53:f1:ac:91:2d:12:0c:96:97:49:b1:2a:9b:fb:7b:
97:a1:eb:dc:44:dd:6a:0c:48:19:a1:c5:2b:ca:8f:
be:13:f5:5b:8a:49:dd:0c:98:20:bc:c3:37:c9:a3:
10:71:54:a7:50:93:94:3a:5c:95:85:64:a2:be:94:
60:08:b0:89:ef:95:5c:b4:c5:d3:b4:a0:7d:65:eb:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FA:41:C2:BC:7A:FA:CE:EE:D9:31:C3:2D:A3:F1:57:98:EF:33:DB
X509v3 Authority Key Identifier:
keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/3C09B1A2640F11ECBC536111C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.176.14.0/24
IPv6:
2001:df0:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
89:70:76:9f:1f:ad:51:86:b0:38:af:12:6e:85:42:fc:97:39:
b8:27:cd:5b:90:0e:5d:f4:29:11:62:f0:b6:62:7c:3d:ba:f7:
1c:11:4d:94:89:51:65:63:c9:6e:4f:16:f6:b2:e4:2e:63:17:
e3:7d:00:5c:a1:2c:5f:d7:cb:cf:83:5b:ec:bc:c0:49:fa:5e:
ce:9c:20:8e:5a:69:53:1f:9a:05:b3:6a:59:0c:f8:be:22:80:
de:bb:fc:f6:aa:30:41:98:43:4e:5c:63:da:7e:b9:0d:cb:18:
cb:1c:30:98:aa:95:b3:74:f8:f5:a8:f2:a5:af:6c:b9:93:66:
50:e8:58:d6:0f:81:49:34:05:db:1e:98:ce:54:24:52:6b:6e:
7d:d3:9c:cd:41:c0:b5:59:f3:51:fa:27:95:1d:1c:cf:25:31:
3b:41:fe:f1:c7:e5:6f:d4:91:12:ef:2a:dd:4a:0d:1c:fe:21:
b1:06:da:f2:4a:c9:02:41:4f:58:77:94:51:62:db:30:c5:20:
87:30:bd:6e:4a:42:f5:bb:03:d2:b3:92:d0:d3:1d:4a:b1:33:
9c:62:c5:66:fd:0c:30:9a:0f:11:d8:5b:c2:08:68:e9:31:1f:
29:27:05:cb:99:5e:f3:ce:fc:f5:bc:b7:5b:25:0c:dd:a4:9d:
af:af:82:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:09 2026 by rpki-client