
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/D3E69766027B11F0ACFB0B53C4F9AE02.roa
File: D3E69766027B11F0ACFB0B53C4F9AE02.roa (raw, json)
Hash identifier: KwucprH89zI40KlMGp9yYI7Eo1rslTO1XAG7Mp4YGYs=
Subject key identifier: F3:A4:86:C1:F3:14:19:70:FA:DD:A4:BF:C7:9E:73:9C:9D:08:AB:89
Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial: BD
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/D3E69766027B11F0ACFB0B53C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:33:24 +0000
ROA not before: Sat 25 Oct 2025 10:50:27 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 150315
IP address blocks: 103.172.26.0/24 maxlen: 24
103.172.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 05:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Validity
Not Before: Oct 25 10:50:27 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a591a4-8a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:52:d5:10:47:d8:df:fd:91:98:fd:26:af:
8e:41:86:21:f6:97:28:93:27:b1:44:0e:14:08:fd:
4b:4c:be:ee:e6:a6:67:f5:f8:60:62:45:a4:6d:b4:
17:62:08:2f:57:9f:5c:52:54:c1:2e:b7:e9:fe:e3:
f8:d6:9f:e0:54:30:6e:88:b7:96:73:6a:42:00:9e:
48:c6:8a:93:51:ba:b1:77:72:ad:7c:d4:43:11:d9:
ce:03:de:04:87:82:b1:07:7c:de:83:bf:92:92:0f:
48:cc:49:3b:cf:b9:6b:f5:d6:db:2f:86:fe:04:64:
97:10:38:d1:7f:82:5c:57:04:8c:b6:40:21:d7:7d:
b1:18:5f:38:34:e3:93:64:03:6f:09:bf:62:92:88:
d8:e3:42:8a:65:73:e0:a9:a9:ee:71:c3:5f:d2:34:
04:61:86:0c:ce:84:e3:9b:94:e2:48:63:3a:96:b7:
f9:d0:e0:f1:db:81:70:24:e0:b3:55:52:f0:d9:c2:
0b:ed:4d:9d:43:21:5e:c7:ad:f8:a6:48:e0:da:46:
84:28:4a:b5:49:0e:53:77:99:f0:18:a8:76:fa:c9:
dd:df:6c:18:04:d9:f2:6b:6d:36:df:31:ab:a0:9f:
12:36:62:c3:f0:20:4a:94:0f:4a:6b:af:b2:c0:26:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A4:86:C1:F3:14:19:70:FA:DD:A4:BF:C7:9E:73:9C:9D:08:AB:89
X509v3 Authority Key Identifier:
keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/D3E69766027B11F0ACFB0B53C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.26.0/23
Signature Algorithm: sha256WithRSAEncryption
50:6b:9c:52:fe:d8:91:58:f7:b3:e2:49:a8:b8:8b:f5:bf:33:
50:92:d6:2b:b6:4a:70:90:7a:de:2f:44:95:3d:f6:14:9e:a2:
35:76:0c:fc:5a:60:c6:74:18:59:38:ee:6b:bf:e9:2c:5f:9a:
7c:d2:19:ef:ef:08:6a:b3:53:ba:65:56:1e:bb:78:e6:6b:73:
74:93:62:c3:67:93:a6:b4:1d:f8:2b:9c:d0:54:2b:ea:cf:1e:
92:dc:1e:97:f5:d6:32:21:08:35:01:83:9c:55:54:c3:26:18:
57:22:e7:a4:70:b8:5d:aa:60:62:42:66:79:50:62:fc:f6:a5:
9b:50:30:e7:77:16:be:fe:e5:ee:35:b6:94:f5:0b:8b:ed:a9:
06:53:eb:2c:19:e7:99:ea:58:ec:ce:22:a1:77:2d:32:07:fd:
ae:b9:24:3d:93:04:05:12:f5:11:4f:e6:f0:ee:93:d7:0f:38:
b2:ae:23:e0:f7:ea:4c:1f:7e:4d:c4:4d:f6:a4:40:01:7f:60:
3e:4a:c4:c7:02:ea:dd:66:0a:1a:a1:8a:d7:d3:46:e7:6c:3a:
aa:f3:09:95:90:a1:5a:9c:81:f4:d5:5b:e7:1e:82:26:31:0c:
dd:4a:24:61:7c:16:33:4a:7e:d7:fc:56:3d:75:17:a3:8c:b4:
f7:68:ab:cf
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTYyODUxMTAvBgNVBAUTKDJFMDM3RjIyMUM5QThENUZEQ0M4OEM0M0NBOEIyNUQ0
NDM2QkIwMzkwHhcNMjUxMDI1MTA1MDI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTFhNC04YTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv5pS1RBH2N/9kZj9Jq+OQYYh9pcokyexRA4UCP1LTL7u5qZn9fhgYkWkbbQX
YggvV59cUlTBLrfp/uP41p/gVDBuiLeWc2pCAJ5IxoqTUbqxd3KtfNRDEdnOA94E
h4KxB3zeg7+Skg9IzEk7z7lr9dbbL4b+BGSXEDjRf4JcVwSMtkAh132xGF84NOOT
ZANvCb9ikojY40KKZXPgqanuccNf0jQEYYYMzoTjm5TiSGM6lrf50ODx24FwJOCz
VVLw2cIL7U2dQyFex634pkjg2kaEKEq1SQ5Td5nwGKh2+snd32wYBNnya2023zGr
oJ8SNmLD8CBKlA9Ka6+ywCaLRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPOkhsHz
FBlw+t2kv8eec5ydCKuJMB8GA1UdIwQYMBaAFC4DfyIcmo1f3MiMQ8qLJdRDa7A5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjI4NS84QzI1OEIxMjAy
N0IxMUYwQTk0NkVEMzRDNEY5QUUwMi9MZ05fSWh5YWpWX2N5SXhEeW9zbDFFTnJz
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xnTl9JaHlhalZfY3lJeER5b3NsMUVOcnNEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTYyODUvOEMyNThCMTIwMjdCMTFGMEE5NDZFRDM0QzRGOUFFMDIvRDNFNjk3NjYw
MjdCMTFGMEFDRkIwQjUzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6waMA0GCSqGSIb3DQEBCwUAA4IBAQBQa5xS/tiRWPez4kmouIv1
vzNQktYrtkpwkHreL0SVPfYUnqI1dgz8WmDGdBhZOO5rv+ksX5p80hnv7whqs1O6
ZVYeu3jma3N0k2LDZ5OmtB34K5zQVCvqzx6S3B6X9dYyIQg1AYOcVVTDJhhXIuek
cLhdqmBiQmZ5UGL89qWbUDDndxa+/uXuNbaU9QuL7akGU+ssGeeZ6ljsziKhdy0y
B/2uuSQ9kwQFEvURT+bw7pPXDziyriPg9+pMH35NxE32pEABf2A+SsTHAurdZgoa
oYrX00bnbDqq8wmVkKFanIH01VvnHoImMQzdSiRhfBYzSn7X/FY9dRejjLT3aKvP
-----END CERTIFICATE-----
Generated at Fri Mar 13 19:36:17 2026 by rpki-client