
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/3F6EE8E42D4211F09E0C422AC4F9AE02.roa
File: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (raw, json)
Hash identifier: 8QPHRn8irHtyPflJX7FXyll2eB+IKwt/6uDtxAHI16I=
Subject key identifier: 8B:9B:01:6E:70:FC:F2:88:2F:DA:86:92:20:6F:F0:55:20:DB:0E:8E
Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
Certificate serial: 0270
Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/3F6EE8E42D4211F09E0C422AC4F9AE02.roa
Signing time: Fri 03 Apr 2026 02:34:11 +0000
ROA not before: Fri 03 Apr 2026 02:34:11 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 150728
IP address blocks: 103.72.199.0/24 maxlen: 24
2001:df3:c740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl
rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
Validity
Not Before: Apr 3 02:34:11 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cf2723-af9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:1f:62:7e:50:19:50:af:16:21:09:f9:7b:
ed:3b:14:f4:57:89:1d:c8:a5:02:87:05:67:c7:6a:
50:58:48:bf:80:81:04:6c:10:93:69:8a:53:a6:50:
8c:8d:02:83:3b:82:81:54:78:da:33:39:19:1c:13:
83:f1:80:74:d3:37:2e:1d:05:f8:23:f4:35:ed:5d:
b8:84:3b:77:7d:d8:cd:c6:34:7d:fb:83:07:f9:8b:
95:bc:33:55:a0:17:46:5b:94:6f:f5:5f:48:f4:16:
64:ca:ce:1a:20:5d:f4:87:93:54:28:99:cf:fe:b2:
b5:c4:d1:d9:c2:d1:34:64:d6:9f:3c:28:e9:27:18:
62:a2:40:52:77:1c:8e:15:56:c0:38:1f:ea:35:c7:
15:4a:49:b4:fe:67:11:60:60:69:1a:8e:7a:32:c2:
bd:f6:79:0d:f3:33:f3:fb:24:85:73:e9:da:6c:ee:
ed:58:68:f9:e1:5e:53:3d:80:88:14:c8:9c:df:50:
a6:5d:c4:1c:73:62:60:4e:84:e0:56:71:6b:e2:07:
24:4b:17:70:9f:9c:b9:a7:cb:92:8e:f6:53:02:6a:
6f:36:7c:ba:73:03:48:e8:b7:d3:12:71:3c:5a:00:
1d:ef:ab:7b:a0:bc:c2:d5:ce:27:9b:2a:d4:29:84:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:01:6E:70:FC:F2:88:2F:DA:86:92:20:6F:F0:55:20:DB:0E:8E
X509v3 Authority Key Identifier:
keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/3F6EE8E42D4211F09E0C422AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.72.199.0/24
IPv6:
2001:df3:c740::/48
Signature Algorithm: sha256WithRSAEncryption
41:39:32:e5:1f:3f:1d:63:71:09:f7:63:5b:13:6d:19:01:87:
ce:f7:47:33:7a:78:23:df:f4:9b:3b:56:12:7a:1e:58:8f:1e:
75:c4:3f:d6:f2:2a:54:41:40:ba:52:2a:95:92:09:a1:a0:25:
7c:06:5c:8e:15:2d:3f:9f:76:25:33:c1:f2:87:28:a8:77:0d:
7c:82:de:b5:a5:5d:51:9a:5b:5c:42:4b:c4:20:2b:5e:fa:64:
7b:27:86:00:5e:14:31:73:47:78:1b:bc:96:63:e2:a7:3a:c7:
97:6b:64:b9:7c:b1:b4:74:b4:ee:a0:3c:fa:3d:22:74:43:59:
f1:11:5b:20:23:26:61:25:3b:7d:0c:99:a3:6a:f0:6e:75:b2:
18:1d:7b:37:e6:7b:45:72:2e:63:69:2f:17:2e:72:9a:b5:48:
8a:6d:73:f1:f3:a3:1e:f2:0f:e4:83:d3:82:f0:38:67:ab:ae:
69:71:18:c3:ec:6e:1b:40:f1:41:2b:33:54:85:5a:37:ed:e5:
ef:e6:3e:6d:1f:75:2f:2d:e0:32:c4:db:72:91:96:65:27:0b:
a3:fb:01:b4:11:f2:52:d3:d4:e1:c9:22:77:9c:bf:20:80:80:
88:4a:61:f5:be:d9:10:14:6e:0d:3c:ed:67:99:b3:8a:fb:82:
f3:c4:6e:d2
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw
NzA4MzBCNzEwHhcNMjYwNDAzMDIzNDExWhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNmMjcyMy1hZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJAfYn5QGVCvFiEJ+XvtOxT0V4kdyKUChwVnx2pQWEi/gIEEbBCTaYpTplCM
jQKDO4KBVHjaMzkZHBOD8YB00zcuHQX4I/Q17V24hDt3fdjNxjR9+4MH+YuVvDNV
oBdGW5Rv9V9I9BZkys4aIF30h5NUKJnP/rK1xNHZwtE0ZNafPCjpJxhiokBSdxyO
FVbAOB/qNccVSkm0/mcRYGBpGo56MsK99nkN8zPz+ySFc+nabO7tWGj54V5TPYCI
FMic31CmXcQcc2JgToTgVnFr4gckSxdwn5y5p8uSjvZTAmpvNny6cwNI6LfTEnE8
WgAd76t7oLzC1c4nmyrUKYR9NQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIubAW5w
/PKIL9qGkiBv8FUg2w6OMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB
M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD
M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzU1OTcvRTk3MDdEMUU5QTNBMTFFRDgxQjEyNzFEQzRGOUFFMDIvM0Y2RUU4RTQy
RDQyMTFGMDlFMEM0MjJBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ0jHMA8EAgACMAkDBwAgAQ3zx0AwDQYJKoZIhvcNAQELBQADggEB
AEE5MuUfPx1jcQn3Y1sTbRkBh873RzN6eCPf9Js7VhJ6HliPHnXEP9byKlRBQLpS
KpWSCaGgJXwGXI4VLT+fdiUzwfKHKKh3DXyC3rWlXVGaW1xCS8QgK176ZHsnhgBe
FDFzR3gbvJZj4qc6x5drZLl8sbR0tO6gPPo9InRDWfERWyAjJmElO30MmaNq8G51
shgdezfme0VyLmNpLxcucpq1SIptc/Hzox7yD+SD04LwOGerrmlxGMPsbhtA8UEr
M1SFWjft5e/mPm0fdS8t4DLE23KRlmUnC6P7AbQR8lLT1OHJInecvyCAgIhKYfW+
2RAUbg087WeZs4r7gvPEbtI=
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:24 2026 by rpki-client