
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/3C70D06076D011EDBAECD665C4F9AE02.roa
File: 3C70D06076D011EDBAECD665C4F9AE02.roa (raw, json)
Hash identifier: 3wXttl5uajjTVlCGGjX/uN+/93T9v8dcsR8uUU/JFl8=
Subject key identifier: F6:46:9A:15:26:E4:26:BE:E7:F8:B4:3E:49:61:FF:49:2A:52:78:E8
Certificate issuer: /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial: 03F9
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/3C70D06076D011EDBAECD665C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:03:19 +0000
ROA not before: Tue 03 Jun 2025 01:54:53 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 38141
IP address blocks: 103.186.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1017 (0x3f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Validity
Not Before: Jun 3 01:54:53 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40ee7-0485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:5b:82:75:46:cd:43:f5:c6:62:2d:91:08:
6a:cb:a3:2c:a3:b8:0e:51:cd:fd:86:6e:7d:5e:38:
e9:6f:36:93:fd:fe:c1:54:87:0a:7b:71:b7:e2:f8:
c6:cb:5f:de:16:db:17:5d:63:73:46:70:ed:a2:bb:
89:55:5f:7c:c7:2a:8f:db:6a:0b:42:85:b3:d7:e7:
3b:b2:dc:97:68:c7:f2:d1:28:6f:60:89:1c:c6:10:
ff:4b:31:7f:ae:05:8b:31:c7:2e:62:65:e0:b9:9a:
86:29:5b:78:2d:ab:19:3b:d0:7e:b4:74:e5:fe:81:
1e:03:2b:89:01:0d:09:1e:08:ab:b3:f0:a3:85:3a:
69:a4:4d:57:e8:bf:ca:92:0d:30:44:91:e7:a6:e2:
b0:29:7e:3a:18:61:a6:9a:f7:24:72:97:92:cd:d5:
c7:9d:7f:1d:61:d5:eb:cb:e7:ab:95:98:77:31:81:
32:3f:5f:4e:33:1d:ae:28:f7:c3:03:b6:41:29:02:
62:1c:32:08:1f:12:2a:a5:41:cf:10:53:e1:4e:c3:
d3:68:00:35:9b:30:b1:42:48:13:36:33:ec:a5:dd:
d9:91:e4:1d:eb:66:75:64:f3:bc:44:9a:76:9e:3f:
d6:9e:56:d5:36:8e:d9:af:15:96:20:4d:a5:96:55:
ab:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:46:9A:15:26:E4:26:BE:E7:F8:B4:3E:49:61:FF:49:2A:52:78:E8
X509v3 Authority Key Identifier:
keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/3C70D06076D011EDBAECD665C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.56.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ac:8b:10:aa:7b:bd:d6:64:29:dd:aa:b1:cd:60:af:11:fb:
4c:61:b5:e6:76:51:62:79:b7:7b:94:b7:8d:52:97:fd:1d:b9:
88:45:c5:4e:d9:e2:80:c6:3a:2f:e1:5c:8f:de:5e:4e:9b:ad:
bc:48:a6:88:35:a6:3d:4d:33:c5:da:36:6a:93:12:1a:76:db:
02:f1:98:13:0d:14:cf:f6:4b:9b:a1:58:61:73:e3:4c:40:a2:
64:02:06:66:37:e6:5f:5b:53:85:63:02:8f:17:b2:d8:7e:02:
4c:40:f1:69:72:a5:89:db:97:3b:a5:c9:1f:f6:16:72:b0:56:
27:45:ce:86:b0:d2:b2:86:17:3c:26:f7:67:09:f5:df:db:4d:
10:84:76:eb:b8:5c:f0:c6:97:5c:cc:bf:6b:0a:55:78:ff:4a:
7f:1a:0a:e4:f5:98:08:f0:f9:e9:f1:94:17:7c:a7:07:42:15:
6a:10:4e:33:1b:26:3d:96:31:51:8c:af:d9:28:1b:8e:36:c9:
f8:16:e6:fb:ef:e8:1a:49:63:f2:df:84:40:8c:23:4d:53:18:
3c:84:ad:b2:22:f7:28:ac:87:1b:4a:be:d2:5c:8c:df:40:72:
42:a8:96:fc:28:29:37:83:43:4e:5a:e7:8a:3f:11:c3:8e:4c:
0d:46:a9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:24:35 2026 by rpki-client