
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/37DA9614245E11F1A1D0CE16C5833773.roa
File: 37DA9614245E11F1A1D0CE16C5833773.roa (raw, json)
Hash identifier: lMRR/zqNW58wSBmGf5f2NfJ6o9i7EWhZV///FsnpLQs=
Subject key identifier: D4:E8:7A:63:80:43:15:B3:C3:C5:6B:E3:80:B6:6A:A5:38:73:88:E7
Certificate issuer: /CN=A9174CBE/serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Certificate serial: 02
Authority key identifier: A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/37DA9614245E11F1A1D0CE16C5833773.roa
Signing time: Fri 20 Mar 2026 13:10:51 +0000
ROA not before: Fri 20 Mar 2026 13:10:51 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 133139
IP address blocks: 103.242.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174CBE, serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Validity
Not Before: Mar 20 13:10:51 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69bd475b-a20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:4d:95:9e:a2:3a:d2:35:92:73:c5:cf:2d:
c8:6e:d1:c9:2d:69:1e:5a:84:b0:dc:bf:e6:6e:14:
ec:2e:7e:07:41:56:46:f9:3e:a8:d4:3e:bb:6e:d6:
e7:61:c0:aa:79:07:6d:ed:c9:4d:a6:6b:28:d7:75:
d1:42:ae:8d:bc:f9:9a:e3:e4:90:1e:a1:7c:97:c3:
57:96:9b:99:1f:55:e1:69:cf:ad:16:6a:cf:83:12:
de:73:bc:b1:2d:87:9d:6c:53:31:7a:43:c7:f4:c4:
58:5b:a1:48:9a:42:4c:dc:63:3b:3c:22:de:3c:11:
3a:fa:86:f2:62:21:a4:ca:3e:0c:d2:5f:9a:a1:70:
d5:a4:6d:f2:13:6e:04:47:32:8c:b2:5c:62:67:70:
db:90:4f:1a:45:74:05:6a:6d:12:61:04:e7:3d:d3:
a9:c3:17:2d:36:8c:d1:cd:d8:16:d8:ec:9b:5a:48:
fb:68:7b:48:a5:d0:ff:09:46:89:8e:4a:6d:91:43:
d5:ba:81:68:d3:f0:38:a8:00:a5:4e:40:f2:83:db:
35:53:07:de:3e:8f:2c:1a:93:bb:bf:05:03:be:ba:
ce:f6:41:b7:bb:f7:a7:52:34:f0:dc:10:e4:fa:09:
50:d6:8d:83:7c:b5:00:dd:7b:85:98:09:1f:b7:c8:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E8:7A:63:80:43:15:B3:C3:C5:6B:E3:80:B6:6A:A5:38:73:88:E7
X509v3 Authority Key Identifier:
keyid:A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/37DA9614245E11F1A1D0CE16C5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.242.144.0/22
Signature Algorithm: sha256WithRSAEncryption
81:f9:a3:14:f0:f7:d2:ac:63:a1:80:1c:82:03:9a:ca:11:d8:
f4:4f:11:61:46:6b:b6:5e:52:66:4d:2e:43:aa:a7:d9:90:15:
59:5e:0e:19:28:90:6c:44:4e:43:17:af:35:03:09:ee:77:3b:
66:2c:05:34:18:2e:cc:da:98:b3:3a:02:af:93:e6:74:93:55:
d3:bd:13:39:f5:a4:bf:b6:34:df:5d:3f:cd:ac:24:60:91:cb:
c7:c8:fa:b1:b0:23:16:95:49:86:3b:cb:8f:76:93:45:c7:7b:
c1:9e:1b:a5:12:db:ba:63:86:55:71:d1:2c:b9:35:dc:d5:68:
5f:23:17:69:a4:ab:16:4f:eb:05:21:23:1a:eb:4e:9a:86:67:
65:6a:5e:4e:71:08:36:94:7e:ac:76:32:b0:fc:88:21:d1:3f:
88:4d:99:8f:15:d6:a2:c9:84:d1:ff:eb:ab:f5:20:30:b5:33:
8c:b8:48:7a:4d:c3:59:22:80:ce:c2:f6:7a:8e:2b:42:92:90:
58:a8:db:52:f7:41:c9:0f:8a:a3:ec:d9:ed:bf:fe:9e:c5:8e:
13:a4:5b:fd:c8:ca:e6:f5:ed:9f:a7:da:fa:18:ed:a6:ad:22:
16:d3:cb:30:30:6c:80:58:29:04:7d:a9:1d:e2:63:d5:60:60:
31:5d:4e:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:55:35 2026 by rpki-client