
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/3ADF4748836D11EBAD2CDC13C4F9AE02.roa
File: 3ADF4748836D11EBAD2CDC13C4F9AE02.roa (raw, json)
Hash identifier: mf/eyMAzYh+uLV+PBLzqiCT6bfTXditreoKEp6tkGqo=
Subject key identifier: E4:DC:99:77:51:4A:16:15:29:D9:33:0F:09:4C:26:34:3A:AF:A7:A5
Certificate issuer: /CN=A9136B8D/serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A
Certificate serial: 06E2
Authority key identifier: EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/3ADF4748836D11EBAD2CDC13C4F9AE02.roa
Signing time: Sun 18 Jan 2026 22:18:20 +0000
ROA not before: Sun 18 Jan 2026 22:18:20 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 141997
IP address blocks: 103.164.50.0/23 maxlen: 23
103.164.50.0/24 maxlen: 24
103.164.51.0/24 maxlen: 24
2001:df6:3d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl
rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1762 (0x6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136B8D, serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A
Validity
Not Before: Jan 18 22:18:20 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=696d5c2c-76ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:e1:3e:e5:ae:ad:95:7a:95:06:f7:69:39:
f2:d7:3e:bc:c0:59:da:21:34:9a:ec:e2:13:41:9a:
95:5f:f4:da:7d:19:41:cf:46:d0:42:92:6a:2e:c2:
d7:b6:8d:2a:5d:fd:97:97:49:de:40:8a:89:f6:c0:
2d:08:b5:78:ef:fe:46:15:e3:95:ef:65:58:f1:ae:
d3:13:aa:2d:57:8c:c1:5c:92:3a:20:34:73:be:73:
41:5d:b5:c0:fe:81:fc:03:b3:f7:e1:9c:8f:e4:ea:
d0:d8:b5:29:b5:19:ff:b4:d5:46:a0:ae:fc:a0:3d:
68:f1:07:cd:e5:39:dd:37:08:b5:a6:64:80:0b:16:
4d:92:a7:f4:c7:b0:f2:0c:5b:1a:68:d1:70:4f:13:
4f:f9:60:df:5f:5c:19:c4:91:22:b1:42:f0:54:77:
67:49:af:c7:78:c1:2d:c9:3f:78:04:3e:25:dd:7b:
ca:c0:bd:6a:33:b1:d3:96:cd:fa:fd:d6:9a:9b:f0:
cb:55:7e:9a:a7:1a:65:1a:d8:6c:fb:3b:61:9a:fd:
1d:5a:62:fb:b8:8d:6a:74:89:c8:a8:ad:f7:49:22:
c6:79:67:6b:b6:95:47:67:04:d5:30:70:3b:4a:c5:
f1:b2:0a:41:22:a1:d0:36:ae:82:ce:99:1e:10:69:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DC:99:77:51:4A:16:15:29:D9:33:0F:09:4C:26:34:3A:AF:A7:A5
X509v3 Authority Key Identifier:
keyid:EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/3ADF4748836D11EBAD2CDC13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.164.50.0/23
IPv6:
2001:df6:3d80::/48
Signature Algorithm: sha256WithRSAEncryption
83:51:6a:eb:08:5e:41:96:6a:50:ad:07:7c:9d:50:d8:6f:e4:
43:97:b5:43:e7:32:66:a6:0d:96:a8:54:45:54:d9:d8:c2:d0:
06:43:a1:95:24:b0:9c:41:66:fb:4d:48:68:c5:ae:6a:1b:58:
6d:c2:61:3e:1d:3e:b5:3b:23:3f:db:fd:90:16:21:4a:1e:2d:
fb:ce:af:7e:4e:ba:20:f5:07:49:c6:d8:21:75:0a:14:7c:1e:
ac:fe:73:25:0f:f3:35:14:5f:92:0d:30:a6:1f:22:f3:31:d9:
a0:83:6e:d8:8f:0e:79:44:b2:4f:36:1d:41:ed:23:73:01:79:
43:46:92:fa:1b:f0:53:22:eb:ff:69:0f:84:bc:e9:82:f0:a8:
ee:6c:93:4c:6f:46:45:ea:94:39:87:6e:de:89:3a:dc:96:06:
c0:d0:72:6d:56:59:ae:c4:50:32:a9:cf:8f:98:7c:1d:f1:02:
53:64:4e:8a:74:d8:b2:86:a3:2a:71:05:51:88:88:7e:66:ad:
cb:ac:f3:1e:e0:a2:2e:95:a6:0e:c8:f7:31:1a:f1:a5:de:db:
36:2f:fc:74:f2:43:1c:29:24:69:86:2a:56:9e:17:57:87:60:
97:ef:0a:6b:70:bd:8d:13:38:37:9b:52:25:0b:ef:a5:a5:fa:
35:b9:83:70
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MzZCOEQxMTAvBgNVBAUTKEVGQkZGMTZCM0E5RjZFNDREQTFFNzU4RTkzOTVEMUM1
QjcxNDQ3NUEwHhcNMjYwMTE4MjIxODIwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZkNWMyYy03NmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0uThPuWurZV6lQb3aTny1z68wFnaITSa7OITQZqVX/TafRlBz0bQQpJqLsLX
to0qXf2Xl0neQIqJ9sAtCLV47/5GFeOV72VY8a7TE6otV4zBXJI6IDRzvnNBXbXA
/oH8A7P34ZyP5OrQ2LUptRn/tNVGoK78oD1o8QfN5TndNwi1pmSACxZNkqf0x7Dy
DFsaaNFwTxNP+WDfX1wZxJEisULwVHdnSa/HeMEtyT94BD4l3XvKwL1qM7HTls36
/daam/DLVX6apxplGths+zthmv0dWmL7uI1qdInIqK33SSLGeWdrtpVHZwTVMHA7
SsXxsgpBIqHQNq6CzpkeEGltEwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOTcmXdR
ShYVKdkzDwlMJjQ6r6elMB8GA1UdIwQYMBaAFO+/8Ws6n25E2h51jpOV0cW3FEda
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkI4RC8wREI4OTNFQzgz
NkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJrVGFIbldPazVYUnhiY1VS
MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzc3X3hhenFmYmtUYUhuV09rNVhSeGJjVVIxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzZCOEQvMERCODkzRUM4MzZDMTFFQjhDMUE5ODEzQzRGOUFFMDIvM0FERjQ3NDg4
MzZEMTFFQkFEMkNEQzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnpDIwDwQCAAIwCQMHACABDfY9gDANBgkqhkiG9w0BAQsF
AAOCAQEAg1Fq6wheQZZqUK0HfJ1Q2G/kQ5e1Q+cyZqYNlqhURVTZ2MLQBkOhlSSw
nEFm+01IaMWuahtYbcJhPh0+tTsjP9v9kBYhSh4t+86vfk66IPUHScbYIXUKFHwe
rP5zJQ/zNRRfkg0wph8i8zHZoINu2I8OeUSyTzYdQe0jcwF5Q0aS+hvwUyLr/2kP
hLzpgvCo7myTTG9GReqUOYdu3ok63JYGwNBybVZZrsRQMqnPj5h8HfECU2ROinTY
soajKnEFUYiIfmaty6zzHuCiLpWmDsj3MRrxpd7bNi/8dPJDHCkkaYYqVp4XV4dg
l+8Ka3C9jRM4N5tSJQvvpaX6NbmDcA==
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:28:26 2026 by rpki-client