
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3D8F78D8772511EEA2E37420C4F9AE02.roa
File: 3D8F78D8772511EEA2E37420C4F9AE02.roa (raw, json)
Hash identifier: Id9EizAfl9nJVp3oMA6sc8l7BIkn5L64mAeYKrGnlQ8=
Subject key identifier: F9:D4:57:79:BC:92:BF:7B:43:4F:3F:1A:1F:6D:CD:FB:32:8D:88:DA
Certificate issuer: /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial: 01C3
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3D8F78D8772511EEA2E37420C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:18:55 +0000
ROA not before: Fri 09 May 2025 04:24:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142271
IP address blocks: 103.121.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Validity
Not Before: May 9 04:24:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3f66f-5c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:a0:92:61:69:17:98:31:4a:6f:c0:8a:ac:
cb:78:90:2b:68:14:9b:2a:88:c1:25:45:0d:85:1c:
4b:9a:73:c8:b1:d5:34:2b:0c:ce:81:f4:fc:57:80:
97:5c:d9:06:01:f7:4c:d6:bf:33:3b:09:35:4d:0d:
e7:37:1e:18:cc:4a:e0:cf:ec:d3:49:ee:d5:81:9e:
08:11:7b:13:cb:7b:17:7c:0a:92:c1:ed:68:80:a7:
47:85:d4:66:b3:3a:30:01:15:02:bb:e8:a4:a4:15:
b4:a5:b8:4d:7c:2a:dc:1e:d8:a0:30:31:04:57:24:
e8:3c:a8:8e:d7:87:1e:e8:d4:3d:b6:aa:ab:8c:6d:
aa:d6:05:2b:eb:31:ae:cd:7c:ea:7a:e6:b9:e4:30:
90:59:5a:59:7a:fb:4f:82:0c:f3:34:27:f6:fa:4a:
44:76:a5:69:75:ce:e2:85:d3:fd:33:ed:c5:4f:b1:
f7:25:44:52:09:01:10:c2:5f:09:93:06:cf:2a:d4:
89:fd:d2:47:13:26:12:81:a9:c8:ea:b0:eb:17:dd:
d4:3d:97:a8:52:45:ef:f6:08:e5:62:89:1e:0b:e3:
8a:39:68:ca:b5:e2:46:b1:89:b6:46:05:1e:99:6e:
74:e5:e2:5d:f7:20:2e:2f:71:dd:86:67:b6:d9:3b:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D4:57:79:BC:92:BF:7B:43:4F:3F:1A:1F:6D:CD:FB:32:8D:88:DA
X509v3 Authority Key Identifier:
keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3D8F78D8772511EEA2E37420C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.121.64.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f3:f2:a2:00:53:57:d2:49:6d:ef:9d:69:b2:8e:4d:42:ee:
0c:5f:e8:bb:5f:04:2a:f9:48:da:d1:2a:ee:92:f4:9b:5e:6e:
fb:bc:fc:fb:0b:a0:eb:ba:4b:eb:4f:44:af:3a:15:4f:94:b3:
02:04:b7:eb:a5:10:14:b7:77:fa:08:17:cc:57:28:71:a6:4c:
cd:fd:18:e1:3b:97:56:a6:ab:07:18:ef:1a:c0:33:7d:56:a8:
bc:8b:c0:a6:a6:86:01:f2:a4:df:4b:1e:ee:3d:64:e5:82:03:
ab:bf:4c:53:ae:3b:0e:97:f9:de:5c:76:21:9a:db:56:bb:7c:
00:d4:9e:fe:e1:d1:76:0c:26:8b:ac:cd:e8:0f:65:78:74:2b:
06:ab:91:3a:d3:b2:a3:51:a1:13:1f:9c:bb:7f:0e:4a:5e:53:
36:27:79:0c:ac:7d:e0:a1:14:6a:79:1c:00:5e:55:ea:69:c7:
f1:bc:ab:de:3f:99:3f:0b:7d:80:89:33:99:f8:cb:f6:ce:d6:
ac:f3:7c:11:5e:54:55:dd:2d:6c:10:ee:71:49:5d:c4:c9:23:
0c:7d:79:11:d0:9c:d6:97:df:ed:75:62:7f:52:97:39:bc:a7:
c3:64:7a:ed:99:97:be:53:d2:f1:54:6b:91:ba:a8:1e:96:48:
94:e5:e3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:10 2026 by rpki-client