
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/3A549A1EB00211F0A3A86535C4F9AE02.roa
File: 3A549A1EB00211F0A3A86535C4F9AE02.roa (raw, json)
Hash identifier: qarwsQJsRpCWHG6vFh1YjS9Lj8uPb2xBWzU12A9C+KA=
Subject key identifier: 17:A5:9D:F0:CF:1E:33:CC:96:82:76:E7:B2:90:2C:87:77:6B:E8:E1
Certificate issuer: /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial: 0622
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/3A549A1EB00211F0A3A86535C4F9AE02.roa
Signing time: Wed 26 Aug 2026 23:44:47 +0000
ROA not before: Wed 26 Aug 2026 23:44:47 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4788
IP address blocks: 103.168.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 23:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1570 (0x622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Validity
Not Before: Aug 26 23:44:47 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a8f7a6f-55a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:45:be:d4:3b:67:98:83:9b:5e:c5:52:1f:
8e:7b:04:22:d3:da:c9:e9:8f:f9:f4:c6:4c:7b:e8:
1b:2c:3a:df:8f:e1:f6:be:c7:df:24:c2:f6:40:39:
13:b7:96:aa:fb:11:ab:97:fa:a1:14:2b:00:9c:f1:
7b:d8:30:41:a3:d2:a2:9d:94:84:39:0b:b6:e8:54:
69:89:91:df:fa:30:26:ae:66:c4:09:fe:15:cf:58:
2c:c2:be:70:7b:99:38:ca:44:c1:17:f8:91:cc:21:
16:e8:21:29:ae:9d:6d:04:67:83:2e:81:18:5c:28:
ac:1a:90:b5:0f:a8:7a:f5:1b:1b:fb:ff:3c:9d:d8:
3b:eb:71:e0:16:b3:57:c6:57:2e:93:be:7b:20:91:
80:3f:a1:f3:48:26:86:b4:16:ae:51:f5:9c:bd:86:
11:e1:07:6b:cd:d9:7b:5c:49:b0:ba:3b:7b:15:3b:
89:66:a4:dd:f4:2d:19:f5:f5:06:ca:fe:1c:6e:69:
3d:34:32:bc:91:c1:5d:a6:cd:0a:85:9b:74:f2:1c:
4c:f7:ee:19:59:bb:a3:5a:aa:1f:ad:f7:be:5d:5d:
2d:39:69:71:a6:00:c7:c6:7b:67:cf:1e:82:0d:9b:
26:6c:ca:1c:bb:9c:8d:4c:f6:2e:c1:01:c9:9c:71:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A5:9D:F0:CF:1E:33:CC:96:82:76:E7:B2:90:2C:87:77:6B:E8:E1
X509v3 Authority Key Identifier:
keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/3A549A1EB00211F0A3A86535C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.104.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1a:e0:6d:c5:4e:9b:89:08:20:db:33:6d:ad:92:ef:c3:68:
70:cf:5e:50:63:a0:42:42:a7:cc:e9:c7:c4:18:e2:86:20:76:
61:78:02:60:ea:0a:4e:81:1e:59:2d:d4:7b:ab:15:89:33:db:
a2:e7:4c:b7:8d:36:6a:94:b8:f1:38:68:c2:0e:1b:1e:6c:eb:
8a:e3:3e:26:1c:e1:26:fb:f7:6d:3c:5b:1d:65:0f:56:5a:be:
a3:8d:39:e5:ad:9e:c4:02:55:a7:04:8f:9c:ac:4b:79:b5:75:
ad:7e:a3:7d:6a:94:75:57:41:05:e1:c1:75:a8:0e:05:6d:3d:
d5:fe:f1:78:af:00:68:6f:b2:cd:2a:9d:a5:7e:98:95:24:d8:
d2:3d:25:af:ac:8e:83:ae:ab:10:e6:1a:a0:f3:f4:15:89:7a:
61:c5:96:43:cb:d0:82:c0:ff:0a:80:6b:29:ab:2d:a4:d0:b4:
00:9f:74:0c:72:6b:f9:49:02:3c:15:f5:bf:c2:58:00:38:d7:
d7:2d:6a:6c:f8:b7:f8:f1:8d:fd:0d:35:51:71:02:28:e6:ac:
06:08:45:5a:6a:99:66:67:a3:8e:b6:8d:4e:46:d1:06:09:f5:
f8:17:1c:a9:79:71:86:70:f1:4b:7b:a2:9a:79:16:ab:c5:bd:
c3:0d:0d:a3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5
QTUzOUFDRTEwHhcNMjYwODI2MjM0NDQ3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThmN2E2Zi01NWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAg2ZFvtQ7Z5iDm17FUh+OewQi09rJ6Y/59MZMe+gbLDrfj+H2vsffJML2QDkT
t5aq+xGrl/qhFCsAnPF72DBBo9KinZSEOQu26FRpiZHf+jAmrmbECf4Vz1gswr5w
e5k4ykTBF/iRzCEW6CEprp1tBGeDLoEYXCisGpC1D6h69Rsb+/88ndg763HgFrNX
xlcuk757IJGAP6HzSCaGtBauUfWcvYYR4Qdrzdl7XEmwujt7FTuJZqTd9C0Z9fUG
yv4cbmk9NDK8kcFdps0KhZt08hxM9+4ZWbujWqofrfe+XV0tOWlxpgDHxntnzx6C
DZsmbMocu5yNTPYuwQHJnHF3HQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBelnfDP
HjPMloJ257KQLId3a+jhMB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx
N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkQ5QkUvQjA5QzNDRTIxMTdCMTFFQzgwRTQyMTQzQzRGOUFFMDIvM0E1NDlBMUVC
MDAyMTFGMEEzQTg2NTM1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6hoMA0GCSqGSIb3DQEBCwUAA4IBAQAuGuBtxU6biQgg2zNtrZLv
w2hwz15QY6BCQqfM6cfEGOKGIHZheAJg6gpOgR5ZLdR7qxWJM9ui50y3jTZqlLjx
OGjCDhsebOuK4z4mHOEm+/dtPFsdZQ9WWr6jjTnlrZ7EAlWnBI+crEt5tXWtfqN9
apR1V0EF4cF1qA4FbT3V/vF4rwBob7LNKp2lfpiVJNjSPSWvrI6DrqsQ5hqg8/QV
iXphxZZDy9CCwP8KgGspqy2k0LQAn3QMcmv5SQI8FfW/wlgAONfXLWps+Lf48Y39
DTVRcQIo5qwGCEVaaplmZ6OOto1ORtEGCfX4FxypeXGGcPFLe6KaeRarxb3DDQ2j
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:45 2026 by rpki-client