
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/3CF4087AD90611ED890F5D5FC4F9AE02.roa
File: 3CF4087AD90611ED890F5D5FC4F9AE02.roa (raw, json)
Hash identifier: k3L9ab3H7uJFNdeYK351f5Lnmo8/ODL7JzSCj0/h8ho=
Subject key identifier: 46:AF:59:C4:B0:C4:1D:7C:8E:42:13:7A:02:8A:E9:02:30:3F:F8:A9
Certificate issuer: /CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Certificate serial: 0228
Authority key identifier: 6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/3CF4087AD90611ED890F5D5FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:34:12 +0000
ROA not before: Sun 25 May 2025 03:22:01 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 151184
IP address blocks: 103.131.58.0/23 maxlen: 23
103.131.58.0/24 maxlen: 24
103.131.59.0/24 maxlen: 24
2001:df2:4140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186392, serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Validity
Not Before: May 25 03:22:01 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3dde4-44c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:92:84:b5:83:05:e1:41:91:77:a0:b3:da:
f0:1b:0f:ad:18:4b:a4:4b:d8:9a:35:b3:f9:c5:8d:
48:c5:f7:bd:7d:ad:3e:f1:89:ab:8e:62:3c:ca:74:
fb:44:52:7f:08:40:b3:ed:7c:4c:98:f8:d4:df:af:
5d:92:e2:ef:94:9c:7e:5e:14:9c:13:af:05:ee:76:
fa:bd:10:56:b0:e2:65:02:73:df:18:4b:4e:1a:93:
30:9a:08:61:d4:cf:e2:a7:ed:4b:fd:7c:72:c9:ae:
fa:84:bd:30:22:b0:b4:d2:1b:f0:5b:67:d2:71:8a:
41:01:f8:14:ef:a3:00:41:27:ad:c5:6a:a9:68:1b:
50:ce:e9:78:9d:ca:65:9c:ed:90:12:91:0f:c2:3c:
8a:8a:bd:45:f9:ba:7b:c3:2b:e5:fd:e1:08:cc:ec:
51:4c:14:c0:58:a8:9f:11:43:b4:44:cc:c0:b7:4a:
81:53:f7:6e:47:fd:e0:0a:5c:62:8d:f1:88:d8:9a:
c8:26:4a:63:90:ae:ce:24:b4:a4:49:d9:55:30:e1:
2a:98:27:a6:ff:25:55:16:83:8c:a5:2c:5b:6f:e7:
55:45:c5:a0:6f:4b:be:9a:01:e0:6c:d8:49:60:8f:
56:8b:c6:02:fd:a4:75:0e:76:8e:c4:12:7a:5f:04:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AF:59:C4:B0:C4:1D:7C:8E:42:13:7A:02:8A:E9:02:30:3F:F8:A9
X509v3 Authority Key Identifier:
keyid:6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/3CF4087AD90611ED890F5D5FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.58.0/23
IPv6:
2001:df2:4140::/48
Signature Algorithm: sha256WithRSAEncryption
86:c2:7f:e1:47:73:5b:dd:bc:8f:78:69:e0:7b:79:9e:6c:6f:
b3:39:40:57:4b:09:83:1d:94:99:f4:d9:aa:62:eb:88:10:83:
60:da:a5:46:e3:57:10:67:b1:43:3d:2b:43:bf:0b:61:72:08:
7d:9c:4f:ce:ad:81:1b:b7:45:bd:eb:56:85:bc:23:95:13:d4:
15:da:d5:5d:ab:ab:a9:0a:ff:cd:46:e1:c9:4e:d1:be:2d:23:
8c:26:a8:e1:ca:c0:34:4a:d4:b8:e7:b1:ce:2f:63:c7:e5:67:
32:19:6b:de:27:c6:b7:31:ec:79:49:32:78:ac:19:55:15:a9:
98:1d:8e:a4:87:61:dd:be:20:73:f1:c6:80:27:f0:d1:53:68:
4d:8e:fe:6b:18:9a:b1:db:6c:c1:fe:27:21:fe:f8:5b:a6:3e:
cb:de:99:67:e1:67:94:65:d4:7a:fa:e2:e5:83:10:a4:01:3b:
67:2e:ad:77:c6:af:5a:e0:c5:14:0c:2a:fe:0d:a8:02:02:98:
a9:f9:64:71:1a:dc:cf:96:0c:78:5f:30:5b:ac:be:22:1b:f9:
42:e2:33:24:cc:f9:4d:65:cf:7e:b5:8d:b8:e8:3a:81:a5:c5:
6b:6e:ef:62:7e:3b:6b:9c:95:23:37:b9:40:83:3a:92:d0:49:
a1:40:33:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:44 2026 by rpki-client