
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/3CF4087AD90611ED890F5D5FC4F9AE02.roa
File: 3CF4087AD90611ED890F5D5FC4F9AE02.roa (raw, json)
Hash identifier: 4ZmDz0huIaWm/DTwuUb93xnXK/d7kmZ8GktldPFPCz8=
Subject key identifier: F5:06:82:79:66:1E:5B:DA:41:4F:B2:4E:7F:EC:C8:B9:6B:5D:5D:89
Certificate issuer: /CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Certificate serial: 024E
Authority key identifier: 6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/3CF4087AD90611ED890F5D5FC4F9AE02.roa
Signing time: Thu 07 May 2026 02:33:59 +0000
ROA not before: Thu 07 May 2026 02:33:59 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 151184
IP address blocks: 103.131.58.0/23 maxlen: 23
103.131.58.0/24 maxlen: 24
103.131.59.0/24 maxlen: 24
2001:df2:4140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186392, serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Validity
Not Before: May 7 02:33:59 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69fbfa17-0d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:ef:5b:c7:24:6e:b5:52:f4:4c:04:c0:75:
7d:ff:8d:b3:dc:e1:fb:d7:18:8f:e4:18:15:88:b7:
f8:75:f6:16:aa:65:67:91:ff:c5:87:84:ed:21:5b:
f4:ce:a6:d9:2f:b3:cd:1b:a7:92:2b:8c:72:4c:02:
3d:ac:6d:f3:a9:3a:70:c8:8c:7c:2b:3b:69:51:f5:
2a:04:35:aa:cd:b0:80:1d:73:46:d5:11:d5:7b:4e:
7b:b1:af:e4:d8:9c:f8:90:3f:ef:ae:af:b5:f0:c5:
13:ca:a5:50:b4:0a:11:62:39:67:97:65:24:6d:a3:
8e:74:c1:ad:e9:bd:89:ad:39:93:98:c3:c0:b1:09:
1e:52:75:20:e8:e4:72:55:38:bf:85:6c:94:44:d7:
fa:de:d0:79:34:b6:cb:c6:d9:67:a3:e1:ad:eb:6e:
0d:b7:ef:4e:fb:f2:2a:0c:0b:d4:7e:2e:12:8e:8d:
d0:c4:37:9e:53:51:5d:e2:a7:f9:3b:75:43:e0:8e:
21:79:76:f8:93:12:03:db:82:45:33:3e:51:eb:51:
a9:88:4a:2e:70:c4:cc:f5:df:10:d9:3f:07:68:f0:
e2:0c:99:e1:55:29:a1:35:36:f6:b8:96:97:df:b9:
97:e1:94:e2:9e:97:86:e7:b7:ca:a1:cc:77:11:05:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:06:82:79:66:1E:5B:DA:41:4F:B2:4E:7F:EC:C8:B9:6B:5D:5D:89
X509v3 Authority Key Identifier:
keyid:6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/3CF4087AD90611ED890F5D5FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.58.0/23
IPv6:
2001:df2:4140::/48
Signature Algorithm: sha256WithRSAEncryption
b0:90:27:91:93:08:57:8d:6f:dd:cd:b3:ff:04:04:58:c0:22:
ca:67:ee:ee:60:e3:26:9c:5a:53:c7:cc:ff:04:a2:e6:54:77:
a6:ff:b8:19:9b:c7:89:07:77:0c:75:40:4c:38:67:9f:7a:6b:
fa:4d:0b:a8:8c:c7:7d:2e:9f:6c:e9:c6:17:8a:88:7b:ca:40:
c0:75:31:71:b5:4b:88:96:4d:e7:51:26:39:d3:84:cb:d3:0d:
c7:60:60:c2:4c:29:3d:19:d2:ab:3d:10:b3:bb:0c:36:6f:cc:
d6:0f:90:81:de:75:e8:58:7b:8e:d4:05:d3:1c:93:5a:20:43:
2b:4a:2b:e5:d3:86:91:c3:e4:c9:2c:11:e8:75:e0:23:21:6c:
d3:90:e3:46:52:49:f6:a6:b2:54:82:da:7d:db:31:75:c3:8d:
35:40:ab:57:b6:6b:e8:e7:00:71:08:73:75:b7:a4:d2:7a:d8:
e5:3b:96:31:80:a4:4b:65:5c:6c:af:47:79:99:5c:4d:75:ce:
99:cc:0b:75:cc:b2:b6:91:18:44:95:66:4f:56:59:f1:01:27:
70:0f:58:62:28:b6:94:3d:d9:e9:b5:72:31:58:af:9b:4c:e9:
da:37:0d:6c:bd:23:e5:b3:41:1c:25:e8:18:ef:ac:c2:3a:d5:
0e:0f:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:15 2026 by rpki-client