
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/3E0372C8D37611F1B2C9C866FD65CEF9.roa
File: 3E0372C8D37611F1B2C9C866FD65CEF9.roa (raw, json)
Hash identifier: Y0Y5Amq5pdqxZORl0g9ZbkgZIidt2qr9TG0eElNBqbY=
Subject key identifier: C8:4E:2A:41:6D:94:B8:23:20:DF:BF:5A:75:F8:0F:35:A3:F7:0F:EC
Certificate issuer: /CN=A9187BD8/serialNumber=9B38C6897BFF6EF1569D15B76DFC3F37DB60E481
Certificate serial: 0D
Authority key identifier: 9B:38:C6:89:7B:FF:6E:F1:56:9D:15:B7:6D:FC:3F:37:DB:60:E4:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzjGiXv_bvFWnRW3bfw_N9tg5IE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/3E0372C8D37611F1B2C9C866FD65CEF9.roa
Signing time: Thu 29 Oct 2026 08:53:43 +0000
ROA not before: Thu 29 Oct 2026 08:53:43 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 133199
IP address blocks: 103.167.54.0/24 maxlen: 24
103.167.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/mzjGiXv_bvFWnRW3bfw_N9tg5IE.crl
rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/mzjGiXv_bvFWnRW3bfw_N9tg5IE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzjGiXv_bvFWnRW3bfw_N9tg5IE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 10:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187BD8, serialNumber=9B38C6897BFF6EF1569D15B76DFC3F37DB60E481
Validity
Not Before: Oct 29 08:53:43 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6ae30996-268b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:84:2a:ac:41:e7:d7:c8:61:c1:5c:5d:9e:
e6:6d:ef:a4:ce:d2:b2:d3:12:1e:45:32:d5:ae:84:
40:4a:32:f6:7f:a6:c2:95:0f:eb:5d:e3:0a:4e:b1:
46:5a:dc:75:ed:ff:2a:8e:57:31:86:df:6a:d7:9c:
ca:4d:9c:6e:2e:fb:cb:03:15:9a:f3:86:dc:d8:55:
63:29:85:50:00:2e:af:cb:5b:7f:00:c7:c6:b5:87:
a5:30:1e:6c:c0:4a:6b:4e:ef:53:5e:a6:ae:cc:6c:
46:66:34:3c:76:fd:34:fa:5a:78:fc:17:97:30:27:
67:1b:a9:23:03:c3:11:ca:6d:d3:54:5b:a3:6e:96:
93:d0:18:7a:91:5c:ac:ac:f0:5c:db:47:51:f6:f1:
80:b2:27:ed:dd:8f:d4:77:54:04:b4:ac:d7:d4:0f:
0e:03:2e:82:58:8a:99:ee:1a:41:6b:66:ac:c0:46:
f2:e7:a6:bf:ab:5d:88:aa:43:1e:31:b3:40:14:03:
e8:47:9e:85:ea:db:b3:de:b5:52:54:5b:a7:e7:27:
f4:2e:fb:0a:56:e9:c1:06:5d:b6:6d:0e:ac:6d:b8:
3b:21:6f:e4:d6:f4:14:fd:94:4d:eb:92:fd:de:4b:
3f:94:12:2c:fc:eb:cb:6a:16:db:71:15:c8:22:0e:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4E:2A:41:6D:94:B8:23:20:DF:BF:5A:75:F8:0F:35:A3:F7:0F:EC
X509v3 Authority Key Identifier:
keyid:9B:38:C6:89:7B:FF:6E:F1:56:9D:15:B7:6D:FC:3F:37:DB:60:E4:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/mzjGiXv_bvFWnRW3bfw_N9tg5IE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzjGiXv_bvFWnRW3bfw_N9tg5IE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/3E0372C8D37611F1B2C9C866FD65CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.54.0/23
Signature Algorithm: sha256WithRSAEncryption
46:e4:25:a4:ad:e5:60:9f:83:31:8d:d7:d0:85:81:99:54:e5:
c5:62:00:87:63:83:06:f5:b1:65:0f:3c:9c:dc:6c:e2:0f:24:
7e:e8:18:69:be:48:48:f1:7d:f5:97:a5:67:00:2a:2e:95:f6:
69:77:17:f1:6c:4c:c8:ce:99:a8:1d:b8:d1:0b:14:7a:c8:61:
3f:ce:d2:7f:2a:a7:2f:f5:61:d0:7f:b7:ea:05:78:2a:7b:6e:
b4:5f:0e:44:0d:f6:6a:c0:4b:e8:6b:f3:6d:22:95:1a:2a:6c:
74:e2:ba:ac:d6:e7:9a:56:73:ee:98:23:e2:c1:0d:e3:ca:39:
39:9e:40:87:32:3d:83:ad:c9:b4:2e:b3:73:3c:3d:f2:40:47:
cb:a4:15:60:ea:ee:40:3e:88:eb:b1:15:3e:96:02:a9:65:4d:
6b:4d:8f:a8:e9:c8:91:fc:d7:f3:88:40:3d:25:dc:8f:43:66:
ec:d6:01:7c:af:f8:2e:8c:ec:c2:ae:4d:40:29:c3:c8:57:f8:
3e:ca:31:c3:fa:cc:59:78:97:7a:c2:ae:72:4c:3e:66:98:35:
15:c5:ee:40:22:6d:1c:67:54:79:93:41:1c:86:ce:ce:be:95:
88:56:86:e1:88:54:12:8e:d9:10:1c:9e:f9:6b:5b:ee:dd:81:
b7:4e:93:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 07:32:43 2026 by rpki-client