
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/3E251228F81711ECBF85A038C4F9AE02.roa
File: 3E251228F81711ECBF85A038C4F9AE02.roa (raw, json)
Hash identifier: mdgcsJqfFBbU3Wf9cZji1VyOa6xoyHrYaTw0bNFNEAU=
Subject key identifier: 2D:07:34:5A:23:99:01:34:34:EC:56:51:49:ED:34:9D:9B:A3:FD:ED
Certificate issuer: /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Certificate serial: 03C3
Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/3E251228F81711ECBF85A038C4F9AE02.roa
Signing time: Fri 23 Oct 2026 00:48:30 +0000
ROA not before: Fri 23 Oct 2026 00:48:30 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 9336
IP address blocks: 103.99.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 00:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963 (0x3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Validity
Not Before: Oct 23 00:48:30 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6adaaede-516a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:df:e5:54:48:cc:18:12:c5:ef:0c:19:ab:
ff:e2:48:e3:27:73:6c:39:2d:b4:04:6f:d8:2e:eb:
00:89:14:c9:bf:0f:b6:ab:0a:9f:df:ee:6a:d3:a7:
11:43:e1:3e:e4:10:f1:6f:0e:69:5a:ba:3d:e2:e4:
95:53:9c:4d:8b:5c:52:cc:47:eb:97:16:5e:d8:d6:
f4:32:be:17:1c:4a:f0:a6:bb:bd:29:8d:75:5f:c4:
c7:30:94:17:a4:d7:4c:98:17:fa:9b:04:54:cd:3c:
29:70:f9:e2:53:52:a0:95:aa:49:d5:64:ea:f7:6b:
4e:77:c4:f1:ae:0c:86:6c:43:32:28:40:1d:87:84:
92:c3:ec:5d:5c:dc:b4:75:4e:ad:90:92:92:b0:ce:
0c:9b:d0:1f:67:f5:e0:dc:33:35:10:59:5b:8f:5a:
3d:6e:c3:7d:42:e6:6f:c3:a8:9b:e6:d0:91:fd:9e:
68:3a:b3:f0:14:9b:2a:76:b5:b6:f0:30:14:58:48:
2d:11:15:8d:ff:8c:d2:03:17:90:de:a8:49:d9:40:
64:87:ec:e0:50:4c:ff:2a:9a:4d:35:bc:95:66:12:
cd:bb:7a:a7:9a:91:86:49:97:9d:9b:6a:90:be:8d:
46:86:4d:db:14:25:00:e2:a1:15:a1:49:f7:f7:ff:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:07:34:5A:23:99:01:34:34:EC:56:51:49:ED:34:9D:9B:A3:FD:ED
X509v3 Authority Key Identifier:
keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/3E251228F81711ECBF85A038C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:04:72:80:db:cc:f5:87:a3:b2:fa:be:b5:79:09:df:67:b9:
be:49:89:79:0b:24:5f:fa:dc:10:2e:6d:ab:08:48:1c:19:73:
cd:61:33:d9:b5:df:e5:f9:f8:c8:ad:7a:d0:e5:26:05:14:89:
68:7a:46:86:90:a7:e7:7e:e5:dd:9b:91:2e:f2:2a:7d:58:20:
cc:70:ea:c5:e2:d6:99:b4:a4:0c:45:5e:eb:82:31:0b:52:06:
97:c9:b1:8e:d5:0f:52:22:58:63:97:6e:49:e8:95:cf:c6:2b:
29:50:f0:9b:62:c0:e5:b1:c9:3e:ee:f0:a5:d8:b0:bd:77:85:
2e:75:e2:8c:b5:ad:ce:1a:32:be:4c:a9:ce:76:9b:4a:26:4c:
4c:80:00:8b:c8:1c:c9:24:01:70:0c:58:6e:87:7c:ca:fa:59:
4c:01:02:8d:fe:24:09:41:46:e6:9f:17:da:fa:3b:a3:05:58:
b4:fe:73:c2:83:59:0e:88:78:bb:ec:74:fd:a9:bf:02:f0:04:
cd:66:f4:6d:b1:62:89:3f:3c:8c:ea:4f:ae:5e:c5:ad:36:0f:
3b:c4:d3:d9:5c:98:ec:ad:27:bb:12:28:1d:ea:a1:a9:c2:25:
81:13:9b:91:ea:26:af:57:8c:1e:88:c8:d3:d0:4b:d1:0e:44:
78:d6:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:49:23 2026 by rpki-client