
$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/3C3A98A4E71C11EC9128DF0BC4F9AE02.roa
File: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (raw, json)
Hash identifier: 8fpsH6/SqOFGmCMoUAvx02jdqLvAfY0Dq9WTxlxXP88=
Subject key identifier: D3:45:A7:7D:82:22:7E:AF:21:84:FA:32:3F:43:18:CC:DF:B8:73:50
Certificate issuer: /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42
Certificate serial: 039A
Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/3C3A98A4E71C11EC9128DF0BC4F9AE02.roa
Signing time: Sat 23 May 2026 01:31:22 +0000
ROA not before: Sat 23 May 2026 01:31:22 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 149819
IP address blocks: 103.187.12.0/23 maxlen: 23
103.187.12.0/24 maxlen: 24
103.187.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl
rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922 (0x39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91166D1, serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42
Validity
Not Before: May 23 01:31:22 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a11036a-0b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:20:23:b9:3b:88:e8:78:0a:c8:f5:32:d8:
97:f3:a7:10:1d:fa:63:c3:20:56:50:dc:96:a0:89:
fc:18:05:5c:da:74:02:72:76:a0:c5:56:7c:b4:a5:
fa:d3:3e:74:08:5f:7a:00:c3:f9:aa:de:f6:e1:81:
f5:7f:1a:2b:52:ab:d9:f3:2e:f7:5d:fb:c8:9d:75:
44:96:78:50:35:ff:96:fb:63:a5:66:ec:3a:64:bb:
10:89:3d:c2:c1:da:65:53:0b:e3:a4:3a:c2:07:a3:
6e:5d:0d:d7:88:e1:96:d6:c5:58:57:cb:5d:89:bc:
6d:f6:df:1c:02:19:e2:74:07:05:a3:f4:2c:4d:65:
2f:a1:31:54:db:28:c2:74:86:6b:d7:5d:0a:ad:5a:
24:46:9a:1e:8f:0e:1e:08:06:2c:f0:7c:ed:71:6b:
4c:f5:67:37:47:c6:c9:af:37:d0:6b:2f:16:57:cf:
46:c7:f9:1f:e9:90:af:0b:35:e8:af:b0:25:b2:a7:
50:20:77:57:32:29:8d:c7:1c:48:14:ea:54:b3:41:
b8:c1:f5:3f:60:2c:9a:9f:f4:fc:98:5e:68:70:61:
af:8a:fe:1a:f7:42:52:10:60:6d:49:02:8b:12:77:
85:af:cd:7b:9f:b8:39:f1:b2:12:a8:7c:0d:bd:9f:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:A7:7D:82:22:7E:AF:21:84:FA:32:3F:43:18:CC:DF:B8:73:50
X509v3 Authority Key Identifier:
keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/3C3A98A4E71C11EC9128DF0BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.187.12.0/23
Signature Algorithm: sha256WithRSAEncryption
64:9b:0e:a0:8e:e8:63:5f:ef:15:23:30:e4:40:0f:74:ae:02:
a5:df:f1:15:db:27:55:94:6e:3b:6e:43:1b:e4:08:77:3e:ac:
d3:aa:4e:e2:65:96:24:77:31:03:ac:7f:90:a3:78:10:74:35:
32:fd:46:b0:49:0c:12:e9:8c:43:e7:a3:52:68:bb:59:52:7d:
97:9b:b6:b4:e9:52:54:74:af:41:7b:5c:3d:09:c8:25:e5:dc:
31:70:83:48:b9:f7:b0:6c:19:0f:93:04:8a:fe:5d:95:52:a7:
6a:72:37:2f:4e:cc:39:44:57:15:11:72:6a:3d:8b:e9:00:d6:
07:f4:3a:55:1c:a6:43:c6:61:5c:7a:fa:9d:24:7a:01:1c:d4:
a7:52:15:a1:2d:d4:f2:23:47:99:8a:ee:60:51:92:aa:d7:38:
a4:53:e7:1d:ad:1a:7a:aa:c3:0d:63:6c:5f:1f:17:f7:b8:f4:
f2:df:f0:58:4a:4e:98:d3:19:b8:07:bc:1f:d7:5f:87:e1:1f:
93:f6:29:8c:d6:cc:36:27:b3:f4:9c:3e:2d:08:af:c6:b8:64:
80:98:08:94:f2:5e:e8:ff:cb:13:8b:f6:91:20:d6:0b:55:cf:
e5:a7:f1:8e:05:89:1a:0c:d5:a3:94:83:cf:db:2a:3a:4a:5b:
f1:cd:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:13 2026 by rpki-client