
$ rpki-client -vvf rpki.apnic.net/member_repository/A912278E/2DB3AC083D2111F198D441CE95833773/3F1EB69E3D2211F181FD191E96833773.roa
File: 3F1EB69E3D2211F181FD191E96833773.roa (raw, json)
Hash identifier: fXmO8Tkn2lEnHpU28nM1cdYnRXbg8CqXPIgECtNRoS4=
Subject key identifier: EA:F7:33:87:BB:34:74:A6:BE:37:29:CA:3D:D3:8B:73:F8:95:4D:69
Certificate issuer: /CN=A912278E/serialNumber=8F93AA18944AC3AAA34F808E4D8F374D3B743B4E
Certificate serial: 02
Authority key identifier: 8F:93:AA:18:94:4A:C3:AA:A3:4F:80:8E:4D:8F:37:4D:3B:74:3B:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5OqGJRKw6qjT4COTY83TTt0O04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912278E/2DB3AC083D2111F198D441CE95833773/3F1EB69E3D2211F181FD191E96833773.roa
Signing time: Tue 21 Apr 2026 01:34:32 +0000
ROA not before: Tue 21 Apr 2026 01:34:32 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141167
IP address blocks: 2001:df7:7380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912278E/2DB3AC083D2111F198D441CE95833773/j5OqGJRKw6qjT4COTY83TTt0O04.crl
rsync://rpki.apnic.net/member_repository/A912278E/2DB3AC083D2111F198D441CE95833773/j5OqGJRKw6qjT4COTY83TTt0O04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5OqGJRKw6qjT4COTY83TTt0O04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 09:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912278E, serialNumber=8F93AA18944AC3AAA34F808E4D8F374D3B743B4E
Validity
Not Before: Apr 21 01:34:32 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69e6d428-1e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:5e:f9:9e:a9:1a:0f:1a:ce:c1:f6:a1:fd:
d9:19:79:4a:98:b3:35:79:25:0b:61:b8:b4:e1:d6:
b2:4c:4a:83:6e:38:bb:b3:ca:03:88:d2:2e:5c:04:
f7:3b:d9:91:2f:7e:23:53:4d:00:30:9d:48:f2:37:
2c:05:0c:05:ec:e5:c0:ad:36:fc:1f:1d:ea:1f:0c:
3a:5b:84:42:40:4b:bc:dc:6c:c2:9c:eb:9e:14:e2:
4b:a2:3f:6b:72:36:d6:d8:b8:80:a3:49:c0:39:8b:
ac:68:ae:a2:7c:5b:cb:db:58:13:e3:91:e5:92:3a:
30:04:2e:18:ad:01:7f:c1:d1:7c:e6:3d:db:5a:10:
f5:b8:e2:53:ac:29:1b:3b:27:42:46:09:41:70:8c:
31:2a:fb:cc:d6:03:67:4b:cb:fe:58:42:f9:65:3b:
1b:be:03:06:ae:b6:a4:9b:59:f1:62:26:22:b5:c0:
96:4d:a5:c6:36:d9:71:90:70:66:5e:ec:40:d4:54:
01:8e:41:00:b7:0a:9a:11:2e:be:96:a0:03:e1:7e:
83:c5:3b:5b:50:ca:68:56:14:a9:06:47:57:e6:bc:
cf:25:1a:f9:c0:a6:de:a9:d3:59:a3:e0:8d:17:44:
3c:3f:61:04:09:71:3c:29:69:8c:3c:91:ce:91:f7:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F7:33:87:BB:34:74:A6:BE:37:29:CA:3D:D3:8B:73:F8:95:4D:69
X509v3 Authority Key Identifier:
keyid:8F:93:AA:18:94:4A:C3:AA:A3:4F:80:8E:4D:8F:37:4D:3B:74:3B:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912278E/2DB3AC083D2111F198D441CE95833773/j5OqGJRKw6qjT4COTY83TTt0O04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5OqGJRKw6qjT4COTY83TTt0O04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912278E/2DB3AC083D2111F198D441CE95833773/3F1EB69E3D2211F181FD191E96833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:7380::/48
Signature Algorithm: sha256WithRSAEncryption
97:44:8d:0e:f7:4f:e7:33:d2:02:32:99:b6:17:5f:74:2f:a4:
57:6f:ee:de:3e:93:35:5c:bc:97:e0:b9:d0:cf:98:6c:e6:d6:
e8:35:36:5c:f1:2a:c7:a6:d4:1a:ef:ba:4a:17:d2:f7:c5:3c:
fa:65:92:11:3f:6d:db:3a:99:92:50:5d:40:0b:62:0b:dc:5d:
5e:92:3e:39:2f:d6:b8:6c:d7:9d:e7:cd:97:dd:de:69:5b:96:
18:e2:4b:58:4c:73:0f:22:6d:86:16:33:29:9b:83:78:67:47:
31:45:23:34:92:85:f7:3d:73:59:53:9a:69:32:41:93:13:f9:
ee:17:bf:b0:8b:a5:92:90:0f:a7:80:16:4e:cf:5f:07:a1:8d:
14:93:69:c6:b3:9e:4e:47:b7:72:7a:05:70:7b:e3:0e:ab:22:
26:77:4d:df:a4:a7:88:a1:a4:3d:3b:bf:66:49:35:35:23:8d:
aa:b1:a8:e4:cd:d0:23:07:27:48:7e:9b:7e:2e:07:79:6d:ce:
10:92:ae:e8:01:aa:78:0b:62:dd:39:e5:6b:e8:8a:0a:6d:05:
03:fe:1a:61:c8:11:fa:85:e4:5c:b6:de:bb:12:51:41:77:44:
81:09:1a:62:73:1e:c0:48:06:53:02:bc:0d:52:a7:77:76:df:
42:42:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:27:59 2026 by rpki-client