
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/3E122AE0876011ED84335D46C4F9AE02.roa
File: 3E122AE0876011ED84335D46C4F9AE02.roa (raw, json)
Hash identifier: lMy4Wa3bZNfZogKIHMCZaFATHLOtC1FrGFIRZTmFan8=
Subject key identifier: 91:D8:47:E4:1F:F0:30:41:BB:E6:E5:69:DE:FC:7F:5D:63:54:D4:E3
Certificate issuer: /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED
Certificate serial: 0257
Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/3E122AE0876011ED84335D46C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:06:28 +0000
ROA not before: Fri 09 Jan 2026 01:21:25 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 1221
IP address blocks: 203.24.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl
rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 01:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F1D, serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED
Validity
Not Before: Jan 9 01:21:25 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a40fa4-5903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:71:31:eb:07:6f:0f:1f:df:d0:71:b0:9f:
62:f7:59:be:48:35:b4:64:24:e4:d2:84:85:33:4b:
3e:8b:37:c5:66:f3:c5:95:ba:19:a5:15:54:4f:44:
4b:f9:90:7e:9f:b1:7c:ce:2a:f5:a8:86:4d:8d:ab:
b4:8d:d6:89:32:b1:c2:ed:7c:06:e4:3f:f3:55:ee:
44:f6:73:20:11:9a:3a:3a:9a:5c:5a:f4:ed:72:85:
fa:13:fe:8e:43:4d:14:af:35:c0:f8:f7:57:20:55:
13:70:73:51:88:6e:26:60:f7:88:26:d8:38:a9:45:
dd:19:c5:67:a3:6e:12:da:e2:07:b6:ec:d7:78:a3:
a2:e9:5c:c7:51:b3:6b:10:be:ac:7b:4a:c3:7c:a5:
39:61:65:53:75:c1:8e:35:8d:8f:23:a0:65:ce:d1:
5d:79:d5:c7:6e:92:b0:ad:65:87:4f:af:07:cb:70:
d3:3e:61:c0:5e:c7:b6:48:96:74:63:b6:99:8a:cd:
83:75:e2:0b:3b:05:2e:57:60:b7:08:9b:7d:7d:87:
9a:f5:d2:83:d6:ef:c5:a4:0e:f1:5d:1b:4f:07:88:
92:9d:9b:e5:53:c2:54:38:1b:dd:0c:be:b9:7d:7e:
29:db:90:ff:20:c6:9f:de:e4:07:57:13:43:09:a3:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D8:47:E4:1F:F0:30:41:BB:E6:E5:69:DE:FC:7F:5D:63:54:D4:E3
X509v3 Authority Key Identifier:
keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/3E122AE0876011ED84335D46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.24.210.0/24
Signature Algorithm: sha256WithRSAEncryption
45:51:34:ed:43:25:8e:b6:01:41:f8:17:8d:ac:39:b1:41:22:
de:50:3a:32:da:b3:54:a5:2b:47:b5:09:42:2f:16:db:04:57:
2c:5a:0a:dd:46:2c:2c:9a:68:94:6a:64:0b:9f:2d:a6:e8:ef:
8f:93:f3:6b:6b:0b:6d:de:81:6e:c9:71:7b:b0:f7:16:09:96:
32:6b:fc:23:f6:f2:20:8f:ab:96:01:7c:d7:1a:ec:93:cc:e4:
d2:04:f2:7e:13:04:cb:af:95:8a:95:86:42:74:fb:68:74:cd:
a5:8a:1e:5d:31:87:3a:3e:0f:b2:29:ef:b2:8f:d4:0c:77:f4:
33:93:b6:60:4a:85:6d:23:7e:e6:2f:fb:33:f1:98:14:fa:a3:
8b:0b:62:02:48:4a:14:f8:8f:c2:60:ad:3e:ec:71:2f:71:7f:
a1:c6:27:13:88:9d:9e:4a:40:f4:19:eb:d1:a0:66:d2:41:09:
d8:30:cc:b0:a4:1c:04:7d:2a:98:94:70:80:3c:9e:15:49:88:
c8:fe:a2:05:36:f7:82:53:ef:56:84:b1:94:ef:ce:06:1c:93:
35:ba:85:0d:e6:84:6f:f3:d6:43:ec:bb:d0:bd:75:ee:45:8a:
4b:66:c5:96:5f:4d:4a:45:45:d7:12:30:69:34:d9:f5:cd:39:
8d:1a:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:21:59 2026 by rpki-client