
$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/3217A18E809711EFB1A3805FC4F9AE02.roa
File: 3217A18E809711EFB1A3805FC4F9AE02.roa (raw, json)
Hash identifier: auSN852h6GKZGfnGT0WksuI9Fj9DYVbRwz9rqojMuu4=
Subject key identifier: 28:4B:41:57:3B:F0:A9:DC:AC:2F:C2:92:DA:1E:62:ED:F0:FF:58:C1
Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
Certificate serial: 36A0
Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/3217A18E809711EFB1A3805FC4F9AE02.roa
Signing time: Fri 10 Jul 2026 15:10:25 +0000
ROA not before: Fri 10 Jul 2026 15:10:25 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 133062
IP address blocks: 2001:448a:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl
rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 14:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13984 (0x36a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
Validity
Not Before: Jul 10 15:10:25 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a510b60-12e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:01:2f:c2:fc:0d:46:1c:24:c8:67:8b:09:
1c:b3:7b:67:90:af:00:66:5c:49:34:d3:88:2e:9e:
2a:93:22:ef:62:87:00:eb:82:cc:d5:bf:28:c6:7a:
74:fa:d8:07:4d:07:24:95:d8:ff:df:b7:4d:0f:48:
0c:b0:bc:3a:ec:fd:63:94:2a:ca:29:3b:86:49:d2:
81:4c:35:16:12:68:4d:b4:f5:c8:03:f4:06:37:d1:
64:c0:88:1b:73:f4:fb:9a:06:4f:e1:b0:e3:1b:16:
81:a4:7d:89:b2:10:e3:db:fa:4e:cb:f2:66:b2:e7:
76:8e:45:58:ec:05:ce:30:be:0d:29:2e:74:36:fc:
e6:a3:b1:9e:55:75:aa:70:a7:fb:38:22:80:55:71:
1a:16:10:6e:90:0d:f2:a2:da:7c:e8:e1:54:db:4a:
99:d8:9d:de:49:07:9b:14:68:13:03:75:97:9f:81:
14:1e:9d:94:91:ee:66:24:2c:d0:56:0f:f8:f9:cd:
2c:6e:58:47:ad:66:04:4e:51:29:1b:f8:9a:79:02:
46:92:55:9b:09:85:3c:30:5a:76:88:05:67:c8:3b:
b4:82:d4:61:8f:ce:4b:9d:22:e0:85:d8:58:58:24:
c4:2a:ee:b5:4d:ef:ba:8e:af:76:ac:af:c4:a7:1f:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4B:41:57:3B:F0:A9:DC:AC:2F:C2:92:DA:1E:62:ED:F0:FF:58:C1
X509v3 Authority Key Identifier:
keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/3217A18E809711EFB1A3805FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:448a:f000::/48
Signature Algorithm: sha256WithRSAEncryption
93:e2:11:4e:6d:d9:ff:19:0d:9a:fe:71:52:07:90:d8:2f:33:
c7:56:24:26:48:8f:d2:12:1e:39:61:44:7b:b5:88:cf:6d:71:
67:44:3c:49:bf:cc:23:aa:a9:b5:ac:ee:9f:47:fb:0b:93:97:
23:a8:49:48:17:de:9c:e1:b9:18:bf:05:20:75:6e:0c:f8:5f:
fa:b7:2d:0a:46:a0:99:89:6e:82:de:58:6d:b1:ac:46:98:35:
20:69:64:6e:8b:85:96:67:81:dd:4e:22:dc:df:28:2d:57:ea:
01:f7:06:28:2c:b0:30:62:30:9d:8e:17:fc:90:60:fc:62:8b:
f1:54:00:5f:9a:d4:95:9f:c3:28:97:0b:a3:72:14:be:7f:73:
5c:1d:90:78:45:5a:fb:22:e9:1b:8e:a3:d7:66:35:b6:50:ac:
64:15:06:2c:41:c6:88:de:61:f5:7d:da:f0:51:26:32:ea:9c:
74:b0:95:87:5d:f3:3c:f0:ba:e3:f9:61:6d:0d:d1:64:1d:81:
30:7e:99:66:2b:db:b3:b2:a2:b8:92:c1:f7:74:87:28:b3:e3:
6f:8d:45:a2:cb:e4:ce:9b:fd:88:01:ba:70:f2:dc:09:f2:13:
3b:d9:58:16:9e:a7:ba:09:3d:df:24:1e:f7:cd:7e:05:0e:04:
c9:9b:ea:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:20:22 2026 by rpki-client