
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/37EF9AB2B73E11E9BCAF574AC4F9AE02.roa
File: 37EF9AB2B73E11E9BCAF574AC4F9AE02.roa (raw, json)
Hash identifier: LM+95GqjtsyvqLmUf+wU2Z1LJHVrYnuCnNyUrFH0YlA=
Subject key identifier: A3:BF:2D:71:56:FC:74:77:86:B9:3C:B4:BB:50:27:A1:69:A5:85:5A
Certificate issuer: /CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0
Certificate serial: 0E66
Authority key identifier: F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/37EF9AB2B73E11E9BCAF574AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 18:21:29 +0000
ROA not before: Mon 02 Mar 2026 18:21:29 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 133169
IP address blocks: 103.86.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl
rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 17:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3686 (0xe66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165226, serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0
Validity
Not Before: Mar 2 18:21:29 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a5d529-9e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:0b:b3:22:83:a4:3a:06:34:7c:51:2e:b3:
99:da:54:17:15:a3:4d:b7:cf:ea:25:c8:d5:6c:81:
8e:55:01:76:4c:4e:65:13:4a:71:8b:98:53:a4:1d:
08:fc:d0:c5:aa:9a:78:e1:f5:01:6d:ee:00:18:58:
cf:b9:51:63:05:ef:9a:56:ac:a1:cf:5b:4d:b3:55:
a8:42:d5:fd:88:44:09:51:46:c2:eb:93:09:f7:d3:
49:0c:77:58:b8:e1:bf:8a:f2:e7:10:37:24:c9:65:
f7:47:c6:16:f9:79:74:22:af:2f:c9:41:2a:47:ae:
eb:79:fd:aa:51:59:30:a4:2f:a0:17:db:2b:07:c9:
94:d7:c2:2d:96:6b:f3:df:bf:63:36:b3:50:32:76:
9d:52:0b:56:d1:ca:bb:b5:da:45:61:c5:c3:73:8a:
94:12:6e:5e:05:f4:54:97:a3:cf:cf:fb:7a:09:2c:
a2:19:7a:d9:ff:b9:34:f1:ea:9e:e5:52:7a:e8:c6:
1a:b0:f6:df:d2:99:cd:03:1b:68:50:47:85:89:2f:
19:54:5c:ae:81:e7:89:bb:d1:a7:2f:80:6a:44:a4:
3c:4c:0d:9d:fa:24:dc:ac:9f:c0:14:73:63:0d:41:
c8:bc:35:31:bc:c8:ca:35:c2:a7:e1:53:43:d7:a7:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BF:2D:71:56:FC:74:77:86:B9:3C:B4:BB:50:27:A1:69:A5:85:5A
X509v3 Authority Key Identifier:
keyid:F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/37EF9AB2B73E11E9BCAF574AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.130.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:68:a9:6c:a1:76:6e:e7:59:00:ef:9d:aa:a7:c8:c4:96:56:
ec:51:1b:93:00:85:c7:06:d0:de:b0:01:e0:c9:a3:0d:4b:6e:
34:25:68:34:6b:ca:ea:93:14:e1:4b:79:90:f5:61:7f:c0:c9:
0c:1f:41:3f:00:2a:ed:4b:5c:0d:f6:e4:c6:e6:c1:c4:45:20:
b3:66:88:13:0a:dc:a7:da:f2:f4:18:6e:7a:76:7c:0e:c9:f6:
c3:07:60:fc:d0:ea:e0:c0:95:af:86:ea:be:1a:44:c7:7d:66:
e3:e2:0f:0f:73:19:d4:c9:45:c4:88:4e:9d:72:9f:d0:a0:cc:
16:fd:09:4f:76:69:b1:1f:88:b0:59:31:c1:d1:cd:1e:47:ca:
9d:88:c2:a3:5c:83:df:34:21:9c:ea:e0:4c:63:3a:89:22:7f:
36:75:9a:00:89:85:7e:0e:3d:a5:bb:3a:5b:67:9c:01:bd:9c:
7a:23:b3:20:a4:d5:01:fd:0e:5a:c6:9e:bf:dd:73:78:75:b5:
d9:9a:14:5c:3b:1a:25:18:32:39:e5:cb:5f:a1:f0:d1:8b:ba:
95:e3:e9:97:e1:f0:36:ba:ae:33:0d:fa:90:7d:69:73:4d:73:
76:8a:3b:29:23:bc:d1:97:d2:c5:7b:f5:ef:b9:ba:26:80:c5:
51:f7:3e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:23:14 2026 by rpki-client