
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CD34C770739411EEB8BAE858C4F9AE02.roa
File: CD34C770739411EEB8BAE858C4F9AE02.roa (raw, json)
Hash identifier: eVVo4i8w9S86ym4XeGvHdcL3OB0X4iTyUgG3ihZswCE=
Subject key identifier: 34:0E:04:5C:11:69:0C:CB:54:82:52:90:F3:67:F2:6E:D8:10:C8:E8
Certificate issuer: /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial: 0226
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CD34C770739411EEB8BAE858C4F9AE02.roa
Signing time: Mon 31 Aug 2026 03:51:46 +0000
ROA not before: Mon 31 Aug 2026 03:51:46 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 45447
IP address blocks: 103.22.144.0/22 maxlen: 22
2401:3900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 03:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Validity
Not Before: Aug 31 03:51:46 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a94fa51-e7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:06:40:a7:79:38:eb:f1:59:cf:8c:ad:f2:
42:9f:40:d5:3a:75:a8:da:90:e6:61:87:3f:d2:d2:
1b:b5:3c:e4:62:47:08:2e:03:6b:fd:7f:64:cf:b9:
a1:85:99:2a:31:27:1b:e1:3e:e0:01:f6:6f:e0:e9:
0b:e3:66:e1:6d:ea:40:15:56:ab:50:25:98:d0:55:
7b:60:a0:00:8a:90:fa:66:4d:a6:e3:bd:eb:2e:00:
08:70:88:fe:7b:9c:a2:0c:30:a6:c0:a8:b2:37:d7:
67:16:51:1d:76:72:53:55:f5:e9:2c:61:6b:cc:29:
fa:73:22:78:92:01:8a:30:c4:ba:24:e3:a9:85:b9:
c2:00:ec:0f:ba:34:40:f0:25:35:84:32:01:05:e4:
c8:a6:6d:e3:f4:a2:a4:68:00:26:39:65:f3:fa:c5:
85:e9:62:98:97:ca:a1:c1:57:d6:8b:59:af:9d:7f:
1b:89:d5:ac:14:6a:42:93:cd:16:73:6a:43:7c:ec:
28:b7:0b:a3:19:a0:21:36:80:01:6d:bb:c0:15:a2:
fc:16:f6:d7:c1:5c:dd:1c:af:6c:c1:45:9f:7b:c3:
60:ac:7c:1d:e2:37:ad:9d:cf:15:37:92:93:de:cf:
06:e3:ea:1c:80:c9:97:2c:fe:0f:b3:d5:ae:a1:cc:
bb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0E:04:5C:11:69:0C:CB:54:82:52:90:F3:67:F2:6E:D8:10:C8:E8
X509v3 Authority Key Identifier:
keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CD34C770739411EEB8BAE858C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.22.144.0/22
IPv6:
2401:3900::/32
Signature Algorithm: sha256WithRSAEncryption
b4:94:86:df:3b:92:3d:2f:c7:8e:c6:ba:95:d8:67:60:96:1f:
e0:b1:1f:e7:23:96:8f:8e:d6:93:c1:f6:cb:30:ab:2a:8d:16:
f7:2a:a8:70:cc:ca:f8:48:e5:89:71:44:1f:2a:5f:b8:61:ae:
1f:0d:c7:95:3f:1b:34:ec:fe:f0:46:9e:a0:3d:8e:24:4a:96:
af:26:22:93:67:9d:74:03:20:4c:cd:76:d4:45:f7:aa:dc:f4:
f5:21:de:f2:26:e2:f6:b7:94:90:d3:2d:3d:36:d9:c6:e2:39:
b4:3e:78:92:61:43:42:70:ea:2b:51:31:d2:03:6a:1a:5c:b9:
4b:55:3d:b4:78:4d:46:49:18:9d:14:75:6e:6f:0d:26:30:34:
b2:92:c2:3a:b4:30:f7:e2:33:fc:d3:8a:57:45:01:c0:ef:28:
d2:b6:8b:1a:ac:9c:95:96:60:bc:b2:9b:35:e0:30:9b:c3:3c:
84:44:c8:85:82:7b:f0:3b:c2:71:33:2b:20:fa:8a:19:cd:55:
70:b8:8a:cf:a0:20:61:a7:23:cc:9f:94:3f:8e:a6:e0:d4:62:
de:f1:61:c4:0b:44:ef:bd:ab:d2:6b:63:55:69:68:4b:45:ba:
f4:4c:ee:95:1a:34:9e:5d:37:90:c3:a9:4e:91:d5:2c:d5:f6:
e0:09:a3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 13:36:15 2026 by rpki-client