
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F9678DA78E811E79F549F43C4F9AE02.roa
File: 3F9678DA78E811E79F549F43C4F9AE02.roa (raw, json)
Hash identifier: IAECYW5Wd7edCXmA3YKOJXrVx2OU+SNOm7TwCgYIdVI=
Subject key identifier: F6:BC:A4:1C:5C:FA:A8:C7:43:C4:B2:8D:FB:2B:19:84:A6:8D:CA:90
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3B7D
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F9678DA78E811E79F549F43C4F9AE02.roa
Signing time: Thu 20 Aug 2026 16:22:55 +0000
ROA not before: Thu 20 Aug 2026 16:22:55 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 133339
IP address blocks: 103.225.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15229 (0x3b7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Aug 20 16:22:55 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a8729df-a9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a9:43:a8:2a:84:e1:e0:cf:e4:87:21:c2:6e:
65:fd:a2:54:21:a8:c8:e3:95:07:ee:26:47:25:e6:
8e:fe:0a:34:fa:0e:03:8d:ae:3a:54:e6:9a:ff:a5:
84:70:10:6e:88:4b:9a:a3:7e:69:d4:21:26:71:04:
cb:42:52:78:a2:f6:64:02:66:b1:92:6c:a7:98:c9:
cb:a1:bf:aa:5f:45:0b:3c:74:36:ff:c0:98:18:97:
60:79:e4:38:93:5c:4a:b5:b9:9e:67:8e:0f:3b:b5:
29:8d:11:6b:c9:92:11:5b:ad:88:cd:0b:b3:e5:4f:
8e:a4:85:44:bf:e4:b7:25:af:63:40:c5:45:4e:46:
96:54:66:90:18:4e:51:e6:49:87:2b:3e:2e:71:58:
12:13:bb:f8:1b:50:24:0b:53:84:ca:1c:db:0b:81:
ab:86:27:8e:9c:e3:65:20:1e:e1:c0:c4:b5:6e:fd:
9e:44:35:40:3f:97:1a:aa:c9:fd:88:f3:0d:d9:63:
04:1f:95:6c:09:a5:c1:f6:c0:c2:71:b6:27:da:e4:
5a:89:2a:88:00:58:9b:2d:78:3d:dd:dc:31:4e:44:
0e:85:8f:12:07:78:ad:a8:f4:4f:84:c1:2b:c9:73:
70:2d:8f:66:f0:98:6b:17:a6:eb:0b:9c:e6:07:89:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BC:A4:1C:5C:FA:A8:C7:43:C4:B2:8D:FB:2B:19:84:A6:8D:CA:90
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F9678DA78E811E79F549F43C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.225.171.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:42:21:45:b2:e2:bb:03:c9:c3:5d:cc:63:c8:36:3f:b5:65:
b9:69:61:50:a8:b3:1f:9a:e9:04:81:1d:cf:41:61:49:50:2a:
6f:fb:bc:bf:63:b1:97:a6:40:35:4f:7c:a6:a3:f7:5d:0e:9f:
a7:19:5b:26:00:1b:d3:f6:3a:19:e4:71:72:5e:d3:b0:53:54:
ba:ce:2e:6b:47:93:ac:10:aa:c7:c3:2b:40:be:5e:ed:6e:70:
cc:ab:8e:27:01:37:30:9b:42:7f:91:41:e0:80:ab:85:79:f6:
9c:82:de:72:56:a9:a1:e8:54:5c:21:dc:fd:99:8e:37:aa:6b:
59:98:d3:fe:4d:e8:5e:cd:4b:80:eb:bc:75:cf:e8:5b:99:a0:
e4:91:3a:7a:db:a5:7f:d2:16:c2:b5:4b:66:b6:a2:09:e0:4b:
80:01:58:73:5c:d2:04:61:b8:c3:92:2d:16:03:e8:f8:a9:73:
0c:2b:6e:ef:d2:28:c7:27:cd:f3:82:a7:82:de:8a:35:92:7f:
02:7a:08:f3:bf:ed:8e:49:fd:08:29:f4:5d:48:c4:c4:ce:75:
aa:b5:be:fc:0c:48:de:81:1d:c6:cf:39:dc:d9:29:15:77:ef:
99:e7:4a:36:40:5e:e5:2b:b0:0f:4d:0d:b6:f0:f0:dc:21:ea:
5b:cf:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:10 2026 by rpki-client