
$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/3BC16A0C5B4811F182614DE994833773.roa
File: 3BC16A0C5B4811F182614DE994833773.roa (raw, json)
Hash identifier: j1ZHgprZt5D6ye8dPtuzBjBeTD9Ha7NH8jbgaxgrm7s=
Subject key identifier: 92:89:3F:F3:93:5F:47:29:53:30:C1:65:2A:9B:A4:25:DD:29:49:75
Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Certificate serial: 19C2
Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/3BC16A0C5B4811F182614DE994833773.roa
Signing time: Fri 29 May 2026 10:22:02 +0000
ROA not before: Fri 29 May 2026 10:22:02 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 45139
IP address blocks: 2401:b640:17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 16:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6594 (0x19c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Validity
Not Before: May 29 10:22:02 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a1968ca-9e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:63:91:10:49:49:12:dc:9d:79:b5:cf:79:
1c:bc:1d:2a:d4:4e:ca:40:7a:90:d7:cd:50:af:c9:
e0:8d:50:6c:55:cd:c6:13:f9:4c:bb:5f:54:c0:4f:
49:3c:c0:cc:cf:a3:ad:a4:c9:9b:b9:e8:95:22:73:
ab:53:fa:5f:01:55:aa:8d:86:c1:5d:48:51:30:1e:
0c:33:8e:83:a0:ea:d5:e4:f6:8d:ba:3f:24:49:ef:
c7:5c:80:0b:62:f4:d0:f7:08:ea:b3:d1:8d:c9:c9:
a4:b1:df:40:63:99:9e:b0:f9:5c:36:4d:58:94:c5:
94:1a:ce:cd:37:ee:31:a2:21:8a:5b:6d:10:8c:82:
4b:31:8d:7e:41:b8:5d:10:24:13:67:a0:0b:35:8c:
78:60:e1:9f:52:2c:c3:83:cc:8a:e7:0f:c0:ea:25:
8e:0f:98:df:0b:98:1b:b6:ff:dc:01:5f:c1:b9:55:
6b:7b:b9:b3:32:3a:55:04:31:ea:2b:d1:3e:3a:0f:
9b:cc:12:1e:4c:5e:3f:76:47:c9:eb:7c:5a:60:98:
ea:0b:5f:d1:fd:69:50:82:1b:51:69:1e:c1:60:4d:
9c:bf:67:48:87:a1:02:77:e0:1f:37:a8:62:09:fb:
39:09:94:79:4c:95:43:d7:75:be:7d:d1:98:32:bd:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:89:3F:F3:93:5F:47:29:53:30:C1:65:2A:9B:A4:25:DD:29:49:75
X509v3 Authority Key Identifier:
keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/3BC16A0C5B4811F182614DE994833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b640:17::/48
Signature Algorithm: sha256WithRSAEncryption
5c:a3:34:52:c4:35:53:04:e3:fb:28:a6:b1:5d:e6:3d:d7:d9:
32:96:1d:8e:08:7d:d4:f1:d0:34:5f:be:88:9c:0b:43:66:93:
7a:dc:b7:a5:ea:8f:92:64:02:82:20:82:70:10:5b:e6:f6:f4:
27:e5:2d:df:3b:66:c4:6d:c8:b3:00:e7:7c:62:69:41:3a:fd:
60:06:1c:7c:e1:ae:f9:6f:3e:4b:6a:88:81:c7:b8:45:d2:9b:
d4:67:f1:96:25:6c:01:54:0e:dc:67:d0:3a:93:61:2b:3a:48:
ab:5b:68:a5:86:75:0a:49:fd:fa:b5:bb:b4:d9:3f:5d:de:7e:
35:3a:94:44:dd:3b:fe:a7:fd:7d:86:b2:0a:6f:9e:d3:ad:a2:
1b:60:96:19:02:9c:19:84:3c:6b:89:f6:c7:dc:c3:28:d7:d2:
8f:0d:b6:89:bc:20:c4:95:1f:a1:ba:44:9b:72:f7:4c:c2:98:
57:c1:3f:77:fe:f3:00:5b:92:8f:a9:d3:0d:35:ce:19:d5:54:
96:d4:06:cf:b1:01:ab:f7:a6:d6:c9:06:27:9a:14:5b:47:64:
bf:3e:10:ec:18:ae:e7:b3:e6:4b:46:54:8c:43:a7:e7:4c:e9:
d2:56:e3:ae:cf:df:a9:ab:e7:0e:c1:51:d7:2c:4c:81:2e:93:
3c:da:b4:7a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICGcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF
NTdGNTFDNTIwHhcNMjYwNTI5MTAyMjAyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE5NjhjYS05ZTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqWxjkRBJSRLcnXm1z3kcvB0q1E7KQHqQ181Qr8ngjVBsVc3GE/lMu19UwE9J
PMDMz6OtpMmbueiVInOrU/pfAVWqjYbBXUhRMB4MM46DoOrV5PaNuj8kSe/HXIAL
YvTQ9wjqs9GNycmksd9AY5mesPlcNk1YlMWUGs7NN+4xoiGKW20QjIJLMY1+Qbhd
ECQTZ6ALNYx4YOGfUizDg8yK5w/A6iWOD5jfC5gbtv/cAV/BuVVre7mzMjpVBDHq
K9E+Og+bzBIeTF4/dkfJ63xaYJjqC1/R/WlQghtRaR7BYE2cv2dIh6ECd+AfN6hi
Cfs5CZR5TJVD13W+fdGYMr3ApQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFJKJP/OT
X0cpUzDBZSqbpCXdKUl1MB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB
NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTkwRTMvREExOEIxODQ5QTQ5MTFFNzlBOUYzMDMwQzRGOUFFMDIvM0JDMTZBMEM1
QjQ4MTFGMTgyNjE0REU5OTQ4MzM3NzMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAG2QAAXMA0GCSqGSIb3DQEBCwUAA4IBAQBcozRSxDVTBOP7KKax
XeY919kylh2OCH3U8dA0X76InAtDZpN63Lel6o+SZAKCIIJwEFvm9vQn5S3fO2bE
bcizAOd8YmlBOv1gBhx84a75bz5LaoiBx7hF0pvUZ/GWJWwBVA7cZ9A6k2ErOkir
W2ilhnUKSf36tbu02T9d3n41OpRE3Tv+p/19hrIKb57TraIbYJYZApwZhDxrifbH
3MMo19KPDbaJvCDElR+hukSbcvdMwphXwT93/vMAW5KPqdMNNc4Z1VSW1AbPsQGr
96bWyQYnmhRbR2S/PhDsGK7ns+ZLRlSMQ6fnTOnSVuOuz9+pq+cOwVHXLEyBLpM8
2rR6
-----END CERTIFICATE-----
Generated at Wed Jun 3 20:36:03 2026 by rpki-client