
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3DF6459A772511EEA2E37420C4F9AE02.roa
File: 3DF6459A772511EEA2E37420C4F9AE02.roa (raw, json)
Hash identifier: bdS7OvbOuaz6iTgPtqEV9vUYbciEKGiVTIJ8MXVQT+k=
Subject key identifier: 78:31:36:7F:A0:D7:A6:35:21:D4:38:CF:E7:23:A1:D4:2E:76:27:CC
Certificate issuer: /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial: 01EA
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3DF6459A772511EEA2E37420C4F9AE02.roa
Signing time: Mon 27 Apr 2026 04:16:19 +0000
ROA not before: Mon 27 Apr 2026 04:16:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151049
IP address blocks: 103.121.64.0/23 maxlen: 23
103.121.64.0/24 maxlen: 24
103.121.65.0/24 maxlen: 24
2400:efa0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Validity
Not Before: Apr 27 04:16:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69eee313-86b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:93:60:c5:b4:1a:a0:ef:f7:3a:d0:9c:75:
51:a8:ff:a7:1b:01:a4:c5:e6:d3:e3:47:5c:f2:ec:
76:4d:72:f0:c1:07:13:e6:b1:a4:3e:0e:e9:d2:86:
f9:dd:7c:02:80:39:e8:9f:27:19:91:e5:e6:f4:f4:
09:a0:07:56:45:16:68:04:ee:11:a1:2f:fa:b3:f7:
37:78:c4:e0:d0:46:ca:e1:35:0d:cd:b9:83:91:98:
2a:cc:27:21:d5:89:d1:39:65:c0:d5:a4:85:b2:00:
70:68:93:7c:32:8b:58:d6:b7:a2:d7:a2:32:22:da:
51:9a:08:97:f0:3b:8f:68:c2:28:d7:96:ae:f5:42:
37:85:06:bd:c5:4f:45:a7:7e:d4:a6:83:2d:44:21:
67:8a:1c:e9:1a:f7:11:a3:98:64:c2:ad:6c:b3:7d:
24:91:9c:80:09:52:24:ef:4a:9e:a2:bd:bb:2e:a2:
7d:53:58:41:2f:7a:45:5a:91:89:1b:74:f4:66:e2:
73:17:cd:6c:dc:4e:59:ee:fd:40:70:6f:ef:cc:90:
8c:a7:98:94:db:3d:27:34:4e:0e:1a:9a:59:73:41:
cc:92:bf:4e:b2:43:78:cc:1d:38:c4:c2:65:3d:89:
8e:b4:38:d6:b2:d6:c3:0c:fa:f9:ca:4e:e4:81:71:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:36:7F:A0:D7:A6:35:21:D4:38:CF:E7:23:A1:D4:2E:76:27:CC
X509v3 Authority Key Identifier:
keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3DF6459A772511EEA2E37420C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.121.64.0/23
IPv6:
2400:efa0::/32
Signature Algorithm: sha256WithRSAEncryption
95:a6:02:c5:f4:a8:37:a4:6b:e4:48:d2:2f:8c:19:12:18:2c:
4b:78:56:63:3c:ce:62:55:03:68:b1:fd:b1:3d:46:0d:75:04:
a6:ef:20:3d:ef:cf:c5:36:e8:d3:ee:6c:d2:6e:cd:d4:59:3b:
90:7f:42:26:0c:28:e1:02:51:82:90:65:81:25:4f:c2:ab:24:
6f:38:0a:e3:a2:15:4d:3c:6a:26:d7:3a:1d:5c:1a:95:96:43:
86:bc:3b:3c:f5:93:c6:c2:73:ab:3d:e9:3d:57:31:7c:3c:17:
81:70:6c:26:da:58:13:b6:fb:b7:ea:f1:b4:e5:46:77:4b:79:
17:3b:78:32:1f:1d:b6:74:ed:4f:48:ad:2f:38:93:21:93:60:
83:90:13:42:e4:2b:4c:96:2e:73:1e:9a:37:f8:f3:1b:5b:5d:
92:f0:be:ae:83:dc:b6:b7:bd:5e:7b:09:a9:7b:fd:df:17:52:
80:ba:28:fd:84:f6:fe:30:ab:a9:50:50:6b:20:46:14:44:10:
2d:fa:bf:ec:50:f3:d0:d5:22:f9:70:ed:ea:88:10:d9:c1:7b:
0b:0c:b4:cc:96:44:21:a6:80:8e:19:80:dc:77:b6:05:9e:fc:
e1:f9:16:a8:ad:91:47:00:ea:d6:0b:b2:9f:53:65:71:bd:b0:
57:96:2a:0f
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC
QjZGMUVCRjEwHhcNMjYwNDI3MDQxNjE5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWVlZTMxMy04NmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4SaTYMW0GqDv9zrQnHVRqP+nGwGkxebT40dc8ux2TXLwwQcT5rGkPg7p0ob5
3XwCgDnonycZkeXm9PQJoAdWRRZoBO4RoS/6s/c3eMTg0EbK4TUNzbmDkZgqzCch
1YnROWXA1aSFsgBwaJN8MotY1rei16IyItpRmgiX8DuPaMIo15au9UI3hQa9xU9F
p37UpoMtRCFnihzpGvcRo5hkwq1ss30kkZyACVIk70qeor27LqJ9U1hBL3pFWpGJ
G3T0ZuJzF81s3E5Z7v1AcG/vzJCMp5iU2z0nNE4OGppZc0HMkr9OskN4zB04xMJl
PYmOtDjWstbDDPr5yk7kgXEdewIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHgxNn+g
16Y1IdQ4z+cjodQudifMMB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3
MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEE1NkEvMjZGQTE4MTg3NzI0MTFFRUExNjc0RTFGQzRGOUFFMDIvM0RGNjQ1OUE3
NzI1MTFFRUEyRTM3NDIwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ3lAMA0EAgACMAcDBQAkAO+gMA0GCSqGSIb3DQEBCwUAA4IBAQCV
pgLF9Kg3pGvkSNIvjBkSGCxLeFZjPM5iVQNosf2xPUYNdQSm7yA978/FNujT7mzS
bs3UWTuQf0ImDCjhAlGCkGWBJU/CqyRvOArjohVNPGom1zodXBqVlkOGvDs89ZPG
wnOrPek9VzF8PBeBcGwm2lgTtvu36vG05UZ3S3kXO3gyHx22dO1PSK0vOJMhk2CD
kBNC5CtMli5zHpo3+PMbW12S8L6ug9y2t71eewmpe/3fF1KAuij9hPb+MKupUFBr
IEYURBAt+r/sUPPQ1SL5cO3qiBDZwXsLDLTMlkQhpoCOGYDcd7YFnvzh+RaorZFH
AOrWC7KfU2VxvbBXlioP
-----END CERTIFICATE-----
Generated at Wed May 13 06:25:44 2026 by rpki-client