
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/3B62C20EFF3911EDBCDB5046C4F9AE02.roa
File: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (raw, json)
Hash identifier: YnCZAx6Vfk4uiVS1odGK66l07BTuJZ1PvvCIcb6IGxU=
Subject key identifier: 20:F4:BB:AC:08:4D:0F:FD:61:7B:7F:79:03:72:19:B4:1F:EA:C9:F4
Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial: 0442
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/3B62C20EFF3911EDBCDB5046C4F9AE02.roa
Signing time: Sat 09 May 2026 00:31:25 +0000
ROA not before: Sat 09 May 2026 00:31:25 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 18041
IP address blocks: 103.186.118.0/23 maxlen: 24
2400:70e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1090 (0x442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Validity
Not Before: May 9 00:31:25 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69fe805d-d020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:37:b4:33:af:b7:74:c3:24:fa:6e:ad:2f:
20:39:2e:40:47:3f:c7:61:80:72:2e:c2:41:7b:11:
b4:0a:b7:19:a2:4e:be:14:49:fa:14:7c:8c:42:c1:
04:5b:ad:54:11:e7:e9:3d:40:09:c4:a1:a5:3e:e8:
9e:38:bc:11:00:70:a1:88:38:a7:d8:c0:2b:85:b3:
cb:56:b4:f4:c1:b2:d8:52:43:82:da:e5:ae:f9:f0:
d1:c6:89:96:fe:ac:ce:b1:49:53:f3:5b:dc:51:1d:
db:cf:03:44:e5:19:29:d5:c1:29:be:0d:26:e9:3c:
8f:ad:39:c7:72:02:61:d6:28:7f:50:a2:8d:78:f5:
ed:36:ee:6d:09:04:3f:c3:82:10:ce:fb:fa:3a:16:
62:39:ed:8b:ad:c4:37:a6:25:86:68:62:38:fb:6b:
29:a5:77:c4:38:c1:e1:f7:60:35:08:e2:95:d7:29:
41:20:a7:89:b7:9c:bf:73:f4:a3:2a:39:4f:89:0c:
76:7c:12:1c:3b:fc:39:dd:9b:37:22:be:2c:4e:01:
43:f4:aa:de:33:6b:64:31:75:0c:ff:cf:4a:57:b8:
0b:34:86:46:4e:dc:d7:22:2a:23:67:81:93:ff:12:
2f:07:a6:66:f6:d9:2e:df:a5:67:d9:fd:13:f1:a7:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F4:BB:AC:08:4D:0F:FD:61:7B:7F:79:03:72:19:B4:1F:EA:C9:F4
X509v3 Authority Key Identifier:
keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/3B62C20EFF3911EDBCDB5046C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.118.0/23
IPv6:
2400:70e0::/32
Signature Algorithm: sha256WithRSAEncryption
32:d8:5a:ea:e2:92:66:f7:65:d5:8c:83:ef:4a:9a:d6:5a:7d:
d0:21:6b:59:e2:f2:4a:dd:c9:02:8a:4d:dc:4e:f5:35:50:6e:
52:5c:c2:0b:0b:a5:09:4d:1f:c2:3e:77:a2:de:e2:cf:83:13:
42:d3:4c:db:f8:e8:80:74:3f:a0:94:94:c7:1f:a1:61:25:cf:
b9:96:0e:e2:92:aa:d7:3a:35:fd:6f:3b:66:d6:f8:da:1e:b4:
78:9e:7e:4a:9a:19:ec:32:59:ea:0d:2a:b4:a2:0f:96:72:1d:
80:34:bb:b5:17:1a:e4:3e:02:bf:a3:4d:ed:7e:a5:4c:0c:c8:
45:b3:c4:9b:01:9d:cb:19:0e:5d:dc:a4:08:a8:7c:dc:b1:c8:
31:56:52:1c:71:02:ab:93:a0:0a:90:15:54:1f:86:28:31:30:
e9:c3:a7:a7:ca:bb:6b:a5:a0:63:76:63:3e:09:67:34:fa:9e:
50:fe:b1:72:cf:b1:71:fe:5e:54:44:a9:7d:b8:57:d8:69:cf:
74:61:ea:9f:62:f9:09:af:a1:35:18:68:15:4a:99:e1:92:bc:
bf:c2:e0:0c:8a:53:3c:8f:b9:48:3d:65:10:9e:ae:89:a9:f0:
d3:db:1a:3e:0c:dd:77:fc:5a:3a:87:78:16:43:39:c3:9b:2c:
e2:d2:fb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:26:56 2026 by rpki-client