
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/3B3D9AA4162211F0AE684383C4F9AE02.roa
File: 3B3D9AA4162211F0AE684383C4F9AE02.roa (raw, json)
Hash identifier: LS2aXUqDSrodZU9/xBaESQevShF52Za+AHwTZf/vPyU=
Subject key identifier: C0:FA:84:EF:05:63:82:BF:08:E3:04:0A:04:E5:C7:CC:2B:02:4A:98
Certificate issuer: /CN=A9178297/serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8
Certificate serial: 06FD
Authority key identifier: 9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/3B3D9AA4162211F0AE684383C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:44:31 +0000
ROA not before: Wed 16 Apr 2025 22:33:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153610
IP address blocks: 103.164.90.0/24 maxlen: 24
103.164.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl
rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1789 (0x6fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178297, serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8
Validity
Not Before: Apr 16 22:33:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3fc6f-a7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:08:5f:d6:ed:36:05:8c:0f:56:ca:0f:3f:
7c:9b:05:3b:cf:50:27:e0:0a:dc:30:19:9b:28:ef:
c3:ab:f7:2a:2b:93:35:0f:bc:91:ab:e2:38:99:c9:
7a:1e:25:d3:3a:dc:12:56:9e:f7:e1:ff:71:c0:e3:
8f:f0:79:90:5c:b2:98:c3:07:fb:b2:25:30:bd:d9:
ff:27:fd:b6:aa:9c:44:e1:6b:35:4f:e5:26:b7:e6:
71:18:ba:e1:a7:a6:20:93:cd:bc:22:f8:72:f7:73:
b1:3e:c5:23:30:18:61:3e:58:68:19:65:7d:cf:e3:
c6:22:45:70:22:0a:47:a3:e7:12:fa:b0:de:66:6b:
14:9a:8d:ee:94:ef:a2:89:4f:98:a2:72:a9:19:c7:
72:bd:2d:6e:e2:bc:7d:3f:0a:d2:db:77:2a:34:d3:
2e:b3:9d:2d:97:85:db:b7:99:e2:86:31:b4:a4:75:
fc:c3:2d:44:60:ac:b7:1d:86:20:1c:43:48:e2:2f:
d4:e8:f4:e0:75:88:88:2e:02:43:76:09:fa:4a:66:
90:60:a4:c4:9a:45:73:4a:33:ec:c6:5d:7a:85:a5:
89:54:da:a7:2d:7e:9f:0b:f9:73:c5:f4:8d:ee:74:
59:e2:27:cb:d8:37:ec:39:0f:ff:1f:4e:5d:83:7b:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FA:84:EF:05:63:82:BF:08:E3:04:0A:04:E5:C7:CC:2B:02:4A:98
X509v3 Authority Key Identifier:
keyid:9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/3B3D9AA4162211F0AE684383C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.164.90.0/23
Signature Algorithm: sha256WithRSAEncryption
33:f0:ed:a6:9a:a9:a3:49:40:8f:20:20:d0:dd:29:b7:26:6c:
eb:cf:fa:9a:de:71:c5:41:1d:02:35:fe:75:11:4c:5f:28:e7:
27:6e:c3:c3:49:47:43:47:5a:e1:cb:2e:29:ae:ae:a0:e2:1d:
b4:75:9b:1d:96:77:38:f5:49:39:75:fa:2a:c1:38:77:79:f7:
86:b8:75:c7:a0:6b:ba:c9:28:33:72:56:5a:36:d2:9f:a3:ca:
2c:80:27:27:b4:aa:e9:45:b1:96:16:8f:d7:b1:2e:20:e5:c8:
a9:4c:02:16:7f:ef:0a:3c:0b:08:c2:13:dc:9b:7d:0d:26:32:
db:43:16:9f:3a:1f:7c:3e:6b:fc:6f:d0:97:f0:36:c3:db:4d:
d2:b0:84:74:5d:05:35:40:1a:89:f3:4c:b8:5d:29:92:fe:2b:
26:9e:a5:6b:d7:f3:98:92:12:a5:55:a5:71:5a:e8:2e:f3:4b:
92:6a:34:d0:e0:af:86:62:ec:ee:7e:f3:46:c8:26:12:4a:0b:
33:ed:30:f6:3a:59:c0:b1:3e:86:f1:1a:38:6b:b8:86:b2:51:
90:9a:5b:52:52:d0:f1:1b:1f:51:72:d9:de:93:d1:0c:f1:26:
97:4c:0a:49:4c:16:c5:df:25:d5:35:1a:67:5d:60:25:f9:69:
65:8d:7a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:53:46 2026 by rpki-client