
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/3CD5799CA81411F1ACF783166C11F970.roa
File: 3CD5799CA81411F1ACF783166C11F970.roa (raw, json)
Hash identifier: k73Ngvm1ezkdKpCRSRtbpY3GE9dGVk7FjtJUuQJyN5Y=
Subject key identifier: EF:57:D0:F6:CD:38:DF:75:7A:D2:AF:02:22:02:16:91:BC:09:34:5B
Certificate issuer: /CN=A9125AAB/serialNumber=480CD040CE90B9C10DAB84E9A47D0177B7C43BCC
Certificate serial: 03
Authority key identifier: 48:0C:D0:40:CE:90:B9:C1:0D:AB:84:E9:A4:7D:01:77:B7:C4:3B:CC
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/3CD5799CA81411F1ACF783166C11F970.roa
Signing time: Fri 04 Sep 2026 03:53:50 +0000
ROA not before: Fri 04 Sep 2026 03:53:50 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 2497
IP address blocks: 80.47.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.crl
rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125AAB, serialNumber=480CD040CE90B9C10DAB84E9A47D0177B7C43BCC
Validity
Not Before: Sep 4 03:53:50 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6a9a40ce-01ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:fe:40:89:71:e5:11:48:ce:ce:7e:be:1a:
39:fe:e0:68:e1:8e:a1:3a:f8:c6:bc:9a:da:cb:9c:
6e:3a:27:00:79:b2:6e:b0:39:fc:43:d0:7a:57:a1:
cd:ec:88:0b:82:f4:30:f3:d3:89:b1:47:aa:80:af:
f9:18:6e:f4:37:6f:aa:d4:b6:67:65:82:19:ef:bd:
d1:07:7b:d6:44:ae:27:b0:15:08:88:9b:42:98:6c:
a8:34:bf:9e:1b:70:b7:e8:18:cc:c2:c8:53:90:ea:
f8:38:fb:9e:63:57:d5:ea:84:05:1f:07:3c:82:15:
fc:dd:5f:ba:2b:90:c3:07:4a:23:1c:65:6f:61:6e:
dc:1d:70:de:80:cb:77:0d:7c:f7:bf:1c:22:3c:98:
01:8e:6b:dc:a8:e1:83:6f:05:df:b4:10:f0:54:e9:
13:3a:fa:0d:43:e4:a8:69:8c:c9:cd:0b:97:2f:e2:
43:34:2c:6a:57:ae:ed:fb:b7:ad:05:60:31:5a:6e:
55:c5:e6:1a:a9:88:d5:2e:11:2e:94:4a:e8:89:5e:
f0:a5:a3:64:0d:b7:b0:29:96:01:dd:e4:89:97:93:
76:41:93:f0:56:2b:df:cd:49:11:c6:f3:93:62:57:
45:a2:05:ec:53:b3:d3:bb:da:9b:ad:10:73:5c:7e:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:57:D0:F6:CD:38:DF:75:7A:D2:AF:02:22:02:16:91:BC:09:34:5B
X509v3 Authority Key Identifier:
keyid:48:0C:D0:40:CE:90:B9:C1:0D:AB:84:E9:A4:7D:01:77:B7:C4:3B:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/3CD5799CA81411F1ACF783166C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
80.47.64.0/19
Signature Algorithm: sha256WithRSAEncryption
41:dc:48:2e:41:89:82:fe:c4:7b:8f:13:7e:d8:d2:10:8a:3f:
e7:7d:e9:17:8a:a9:4b:8e:18:ae:ce:a8:dc:bc:70:64:a2:67:
41:3b:34:91:be:07:ab:36:84:01:5e:50:48:0e:2f:93:3c:70:
50:a9:a3:55:14:4e:4a:83:80:6a:03:e5:8c:87:30:57:ed:1f:
8a:9b:e5:e4:25:66:00:97:98:ed:01:1a:a9:c4:09:88:5a:d4:
77:cd:af:31:fa:7e:d8:da:c2:e7:23:5f:39:1f:b0:92:5d:51:
5a:2a:9e:57:ac:18:a9:31:00:49:f4:67:ef:1e:6c:55:fe:be:
23:64:96:2d:fc:28:35:f6:31:1f:28:50:c2:8c:65:4e:2f:48:
e2:58:c3:1b:e5:16:53:1e:9d:ef:1a:77:8c:c9:b4:26:f1:e5:
2a:0d:a3:b2:01:c3:24:70:84:20:7f:10:bf:e6:48:ca:8f:97:
39:03:59:cd:da:4f:77:f4:e6:65:aa:3b:57:28:11:2a:5e:45:
41:34:93:3e:da:97:d6:15:c8:10:dd:a1:0d:d9:4f:ef:aa:b9:
9e:9c:31:cd:f2:d2:96:4b:e3:7f:4d:c9:d0:67:ed:d3:b9:b9:
b4:6e:25:81:ca:74:0b:86:2d:a9:46:f4:0b:de:e3:8b:bc:fd:
29:d5:3d:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:11 2026 by rpki-client