
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/3FF258A0A52D11F19BAD66414111F970.roa
File: 3FF258A0A52D11F19BAD66414111F970.roa (raw, json)
Hash identifier: 0t1Sdb1SQgLtjY+XlCZMsjEGoAQiWqIadAsgDDchhx0=
Subject key identifier: 3F:76:CC:0C:BC:5B:22:64:BF:13:D8:92:76:41:F9:B6:71:AC:77:41
Certificate issuer: /CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505
Certificate serial: 1321
Authority key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/3FF258A0A52D11F19BAD66414111F970.roa
Signing time: Mon 31 Aug 2026 11:15:19 +0000
ROA not before: Mon 31 Aug 2026 11:15:19 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138482
IP address blocks: 103.124.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl
rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4897 (0x1321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161FF7, serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505
Validity
Not Before: Aug 31 11:15:19 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a956247-9e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:4d:4a:fd:ce:58:5b:49:9b:af:ee:f1:45:
ee:11:6c:a6:36:9f:7e:fc:a4:9e:ca:ea:5c:53:d1:
0a:1f:5a:19:ed:92:7c:59:ba:d7:7f:a3:c5:64:69:
9c:8c:ec:cd:a7:db:5b:24:52:ef:48:1f:b6:fd:04:
0d:f9:b7:03:4e:56:01:36:79:53:1f:14:9b:a1:b6:
ca:00:fd:8b:42:a7:63:04:ab:cf:a9:2b:08:9a:52:
36:71:d4:8b:44:c5:5d:8e:7e:53:00:d8:10:f2:f2:
7f:ac:92:f0:97:d1:d3:c2:5a:80:ed:76:c2:a5:c1:
f4:a6:90:93:ae:cd:65:92:0e:43:3d:80:47:ae:bc:
59:23:a4:d5:3b:30:56:4b:fb:95:4c:89:81:92:c7:
93:58:c8:78:08:e2:26:02:29:3b:6f:b9:d9:c3:59:
8c:a5:78:19:1f:1c:19:67:fb:63:ea:ed:d4:04:68:
7b:be:ff:2d:88:e5:06:2e:87:7d:d1:e6:4e:19:f7:
5a:da:d5:62:f0:f1:9c:5b:2b:42:79:56:c0:3b:c0:
d3:49:e7:b0:2b:ca:87:61:08:22:d6:d6:ce:f6:95:
5b:aa:da:49:c3:b3:42:aa:96:08:d9:78:2f:7e:a3:
2c:c8:ae:73:f6:b3:01:e6:e9:94:fe:ca:1d:9c:59:
8c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:76:CC:0C:BC:5B:22:64:BF:13:D8:92:76:41:F9:B6:71:AC:77:41
X509v3 Authority Key Identifier:
keyid:EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/3FF258A0A52D11F19BAD66414111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.124.181.0/24
Signature Algorithm: sha256WithRSAEncryption
ed:88:04:85:9b:46:da:bb:f8:8c:f1:2d:e3:95:30:be:fe:30:
a6:f0:e2:b0:e1:5a:43:ae:e8:59:ca:41:92:51:c0:8f:e4:e3:
4f:28:3f:15:aa:45:1b:01:7f:83:21:e4:1a:43:9a:32:58:6b:
fd:ab:d2:59:d9:38:90:93:66:33:4d:ca:49:7b:8e:dc:06:ae:
0c:f5:10:d6:33:fd:a0:2f:35:13:c8:c6:3d:39:66:4a:99:18:
08:5e:68:d8:db:21:e6:18:02:a3:22:5c:9b:9e:d5:b7:e8:66:
12:f2:52:90:33:ad:5f:d2:e3:1f:5f:f4:6d:b2:25:c5:0e:ea:
c0:80:4b:04:b3:00:03:59:18:d3:8d:64:6a:fa:4e:99:b1:99:
13:d6:c5:db:79:8a:47:47:69:fb:dc:22:19:27:4d:f8:93:2f:
5b:df:67:59:a6:35:46:c8:4e:e7:5f:30:3b:2f:72:8b:3c:43:
5a:2e:78:31:eb:c0:f5:fa:3f:30:d0:43:11:d8:2f:eb:40:84:
1c:d6:ec:1c:b9:d0:0c:8a:2a:6d:09:99:88:fd:ce:d9:08:7d:
df:f1:3b:42:7f:30:c8:e7:4a:85:62:ae:c5:53:e3:1c:ec:9c:
98:20:60:1f:0f:33:c7:b1:22:58:1b:82:d9:2e:6f:3a:ab:e9:
d1:43:f7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:18:59 2026 by rpki-client