
$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa
File: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (raw, json)
Hash identifier: ASLcGOFlsvlbTp70XDJXTvOFiMW1KSwHYScfbVyL818=
Subject key identifier: 34:56:F0:F3:1C:EA:F7:A5:AA:D0:2A:AC:75:F6:26:D1:03:C1:EF:F2
Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188
Certificate serial: 0184
Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa
Signing time: Fri 30 Jan 2026 09:36:44 +0000
ROA not before: Fri 30 Jan 2026 09:36:44 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 151484
IP address blocks: 103.230.244.0/24 maxlen: 24
103.230.245.0/24 maxlen: 24
2001:df2:a340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl
rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188
Validity
Not Before: Jan 30 09:36:44 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697c7bac-e938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:d9:62:a6:5b:0e:4e:35:29:3a:67:d1:22:
74:ee:b4:4b:53:c6:90:7d:87:df:7c:f0:e0:3e:d1:
08:92:51:28:c8:40:1c:42:b9:47:a2:1d:b8:74:c8:
b5:2b:08:50:4b:bd:18:31:a3:7e:d1:8b:25:36:c2:
b9:af:ca:eb:01:bb:6f:4f:40:eb:f9:71:c9:ea:b2:
3a:35:ff:b0:0a:5d:27:e0:e9:33:fe:5c:f2:17:5b:
c5:07:f0:d7:46:81:08:8d:5f:8d:8a:64:e2:d8:a4:
a2:70:81:a1:7e:7e:f9:7b:bb:f2:97:46:a6:7d:b6:
0f:e4:b7:b2:a9:f3:e9:6d:05:fd:06:13:74:02:b0:
fe:c3:1a:74:37:c1:07:58:b5:bd:7a:79:a8:79:3c:
72:5e:d7:78:68:af:20:1d:c6:8c:66:0e:66:00:5a:
66:e2:73:6b:53:09:3a:95:fb:52:bd:d2:e9:4e:35:
14:19:f6:48:6c:fd:57:28:4e:fb:77:e9:f5:1f:ad:
8e:de:03:c1:3f:49:21:e6:de:43:12:14:ca:a1:ee:
64:50:82:c7:6e:af:d8:b1:e9:a4:65:3b:8b:a1:fd:
10:da:f6:97:9c:f3:fd:5b:36:76:38:0e:0e:08:3c:
c0:c4:d1:53:33:94:89:47:19:a0:09:25:f1:dd:3f:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:56:F0:F3:1C:EA:F7:A5:AA:D0:2A:AC:75:F6:26:D1:03:C1:EF:F2
X509v3 Authority Key Identifier:
keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.244.0/23
IPv6:
2001:df2:a340::/48
Signature Algorithm: sha256WithRSAEncryption
01:37:76:47:28:20:8a:ed:8c:4d:79:67:04:2f:8e:87:e4:a8:
2e:ae:16:a7:59:c8:37:43:5f:63:bf:73:61:cd:1d:55:ea:ca:
2a:f9:44:ae:b8:7b:5e:ea:6b:95:6a:b4:e4:f3:dd:89:88:9a:
7a:db:68:6a:b9:72:cb:8e:e3:f1:60:4f:5e:73:7d:25:fa:c9:
61:e4:bd:e1:ff:bc:b1:45:bf:56:81:6f:71:08:67:f9:f6:97:
b1:5b:74:fd:f4:2d:b5:82:32:c9:e8:3d:9e:77:c9:d1:50:d3:
e1:ff:c1:85:72:dc:42:c0:ee:5b:b0:7e:6c:52:ec:c1:51:d3:
af:f4:5d:ba:2d:7e:2e:b7:12:4a:b2:4e:c0:aa:5f:92:0f:95:
1e:e7:59:eb:d6:4e:dd:ac:54:ea:31:e0:fe:0c:f6:c6:7b:0a:
87:b0:58:b6:ba:15:e7:23:db:cc:13:41:3d:05:1e:d0:98:2b:
cd:33:bd:ca:fd:14:3c:9b:d9:8b:bd:28:c6:03:0d:c4:d0:09:
44:e7:1f:66:31:af:26:6e:19:0a:36:f5:5d:51:ad:52:a5:f9:
02:11:c2:a2:da:b4:84:c6:a0:a3:8c:3e:7d:a8:e7:3c:3d:8f:
ce:0b:63:0f:ba:02:33:01:13:da:db:47:39:22:cf:90:12:8c:
9b:e0:13:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:24:37 2026 by rpki-client