
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/B3F895D691A211EDA6B67334C4F9AE02.roa
File: B3F895D691A211EDA6B67334C4F9AE02.roa (raw, json)
Hash identifier: 8Xdi8ir9IzionCTHsxTwuX8olpBr+epxWoFk8JYRHpY=
Subject key identifier: 0A:9B:CF:85:95:F1:46:F5:DD:7D:AB:FB:7A:EB:77:A7:DF:F2:41:B8
Certificate issuer: /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Certificate serial: 0254
Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/B3F895D691A211EDA6B67334C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:57:21 +0000
ROA not before: Sun 23 Nov 2025 00:47:48 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 134450
IP address blocks: 103.174.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 01:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 596 (0x254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194590, serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Validity
Not Before: Nov 23 00:47:48 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a437b1-167b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b5:f4:d0:1a:60:ae:ca:c7:7a:27:31:17:89:
e0:2c:60:35:1c:fc:9c:8a:c9:7d:e8:2d:d4:f9:26:
fd:ea:9d:6d:fb:0b:30:b0:14:70:b6:20:5c:a7:57:
80:f9:30:f8:c3:10:0b:21:44:72:96:89:58:fc:7d:
8d:c4:90:a2:9b:e4:ad:bf:b6:d2:6b:d8:fb:32:bc:
28:7d:97:31:ba:c9:a4:66:49:d7:5f:89:c1:8a:46:
e3:08:73:97:57:6a:4f:6f:39:cc:40:ef:4b:de:e3:
28:42:cf:7a:15:6b:46:e7:af:6f:c3:a4:c1:75:ca:
ff:2b:59:cc:8c:3e:da:3f:96:1d:15:c3:a6:59:0a:
ba:65:02:0e:be:c2:1c:a6:f2:51:33:f7:9f:5c:7c:
53:9d:1e:f8:17:27:22:38:b3:6f:e8:62:f4:e7:2f:
42:c2:ee:8f:1f:f5:4a:e6:72:09:9d:cf:31:01:b9:
a3:a7:56:a2:34:ce:3d:94:9d:73:bb:70:d8:f4:ea:
9d:d3:9c:a7:8f:76:cf:f8:56:17:78:b0:f9:f9:4e:
1f:b7:55:93:1c:f6:9d:7c:91:c4:30:74:5e:08:b0:
66:5f:e5:38:5e:77:14:b4:72:59:9d:22:e5:6c:16:
e9:50:93:5f:4c:58:cf:7e:be:4f:05:84:74:dc:e4:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9B:CF:85:95:F1:46:F5:DD:7D:AB:FB:7A:EB:77:A7:DF:F2:41:B8
X509v3 Authority Key Identifier:
keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/B3F895D691A211EDA6B67334C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.202.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:e9:d6:70:04:e1:7b:e6:54:aa:0b:85:0f:e1:60:1a:0a:1e:
9e:c7:24:82:04:c5:f3:8c:4a:f1:4a:39:4c:c5:51:87:64:47:
a0:92:ac:be:ec:89:3b:bf:78:85:fa:ad:45:ab:91:51:fe:d8:
79:d2:42:b0:cd:98:27:6f:e4:6d:87:e8:5e:00:02:86:90:89:
87:3f:06:a9:76:b8:24:4e:1d:e8:e8:81:7a:71:ed:91:22:33:
62:a7:ca:2d:df:a9:64:c5:5a:06:e9:60:d1:30:53:0a:17:42:
5b:ad:99:7a:c1:9e:b1:a1:23:4d:9e:24:d5:fa:e3:b9:c7:a4:
61:8a:74:aa:0c:c8:2e:e9:4b:41:e1:27:b3:99:e3:0d:a9:44:
13:73:0a:07:15:93:14:94:75:22:b3:ea:94:46:8a:98:30:8b:
f2:6b:5d:72:bb:e1:77:03:cd:1a:04:44:4f:f1:78:dd:f5:64:
c0:bd:9d:78:e4:f7:c4:18:b2:0c:e1:f4:3f:0f:6d:6b:57:4c:
af:bf:0f:36:9a:00:56:fb:66:2b:63:5c:2d:37:02:f9:45:f8:
cc:55:35:ed:25:23:68:2a:d9:5c:4a:27:b9:b4:20:f4:d6:76:
a6:c9:33:5d:5b:54:15:8d:54:57:e1:51:ea:2d:80:b6:dd:3f:
56:cc:fa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:31:24 2026 by rpki-client