
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F3A41ADEC0E411EFA19F644CC4F9AE02.roa
File: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (raw, json)
Hash identifier: vhVJuPrt2WMbeuT1nfT4sHOscgQloynHYGoOSaZ4llM=
Subject key identifier: 6B:E6:F2:28:0E:6E:A9:21:C9:F4:CB:D8:FF:CE:70:0D:D7:AC:D5:30
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 3700
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F3A41ADEC0E411EFA19F644CC4F9AE02.roa
Signing time: Thu 30 Jul 2026 15:11:19 +0000
ROA not before: Thu 30 Jul 2026 15:11:19 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 45800
IP address blocks: 58.181.147.0/24 maxlen: 24
203.155.54.0/24 maxlen: 24
203.209.82.0/24 maxlen: 24
203.209.99.0/24 maxlen: 24
2405:a000:17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Aug 2026 14:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14080 (0x3700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Validity
Not Before: Jul 30 15:11:19 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a6b6997-131a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:22:f5:93:ae:f6:e2:f2:04:da:0e:9a:ec:
98:3b:25:4d:ec:11:5b:cd:37:d5:ca:b4:6a:99:97:
0a:06:b8:07:f8:8e:7f:67:61:6a:db:61:e4:6d:ef:
5d:69:4e:88:a8:57:69:5b:9a:88:87:9c:34:cc:7e:
a0:f9:f4:a8:34:bb:bf:51:f5:8d:ef:15:bb:f0:5c:
ee:8f:52:16:a8:d6:32:f8:1d:b0:1b:7a:90:69:8a:
71:d4:22:09:2d:2d:ea:e1:b3:c5:de:5d:1c:33:70:
30:de:26:69:5a:5c:21:1c:a9:cf:8f:fe:9d:be:35:
13:37:61:1c:2f:c2:3e:08:9c:77:ef:2d:27:59:29:
0b:15:91:20:06:6e:37:d7:f3:22:d4:7b:34:9c:60:
95:1b:c0:ea:30:80:66:82:7c:57:11:ce:ce:9e:05:
61:63:8c:0c:a5:f0:5a:85:0a:0c:0f:b3:f9:85:c0:
cb:e0:0d:bf:d9:9d:e6:c3:2a:e7:dc:bb:0d:23:95:
8e:ad:b9:6e:01:05:07:cf:e3:15:20:db:3f:eb:c9:
4a:99:4d:fe:c8:9c:cd:53:ed:ba:f0:a3:23:f7:f1:
46:df:98:a5:2b:c1:49:2e:85:b8:4a:ef:fe:3d:f2:
f3:2c:9c:d9:14:ad:10:8e:02:d3:5c:29:9f:fd:a3:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E6:F2:28:0E:6E:A9:21:C9:F4:CB:D8:FF:CE:70:0D:D7:AC:D5:30
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F3A41ADEC0E411EFA19F644CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.181.147.0/24
203.155.54.0/24
203.209.82.0/24
203.209.99.0/24
IPv6:
2405:a000:17::/48
Signature Algorithm: sha256WithRSAEncryption
11:8b:53:c3:7b:8a:47:f1:f9:a5:8d:86:a2:6f:ff:84:5e:2c:
62:47:c0:a8:94:80:ad:04:af:05:65:fc:a0:14:33:c3:a3:ac:
64:e0:6c:7a:78:16:70:5f:b8:a8:08:16:d3:7c:3a:ca:4a:84:
ff:bc:eb:0f:c2:36:cc:cf:76:1c:35:8c:ca:12:3e:e6:c3:4a:
59:a0:ca:73:b6:68:ce:37:d2:ea:3b:18:b7:98:b0:fb:40:eb:
c0:d9:ff:31:8b:13:59:bf:bb:f3:c8:9e:50:1e:ed:3c:aa:3d:
a1:c9:bc:c7:4b:4e:92:f4:29:8a:02:83:56:7a:53:4d:54:22:
75:06:29:df:bb:a1:c9:60:fd:5b:88:19:ae:e8:25:f3:91:7b:
3c:c9:4e:27:8f:a8:3e:f9:71:33:ee:da:15:3b:92:30:83:35:
71:7a:ea:b1:c3:cb:cc:a8:12:78:b1:73:51:b8:40:63:91:2a:
01:8a:a9:8e:5c:71:e7:40:e2:6d:61:9e:c6:e6:b3:e0:8d:c1:
bf:41:88:57:65:4b:34:57:f8:c0:42:99:ed:50:5d:a2:e6:d7:
d6:50:9e:fd:61:9c:66:79:d0:c1:19:3d:6a:42:ca:63:f6:ce:
32:c0:bc:2a:d0:89:d6:33:10:c7:3c:89:8b:b0:82:60:62:f3:
39:c2:96:b5
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgICNwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw
OTU2QTk4MkEwHhcNMjYwNzMwMTUxMTE5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZiNjk5Ny0xMzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmjMi9ZOu9uLyBNoOmuyYOyVN7BFbzTfVyrRqmZcKBrgH+I5/Z2Fq22Hkbe9d
aU6IqFdpW5qIh5w0zH6g+fSoNLu/UfWN7xW78Fzuj1IWqNYy+B2wG3qQaYpx1CIJ
LS3q4bPF3l0cM3Aw3iZpWlwhHKnPj/6dvjUTN2EcL8I+CJx37y0nWSkLFZEgBm43
1/Mi1Hs0nGCVG8DqMIBmgnxXEc7OngVhY4wMpfBahQoMD7P5hcDL4A2/2Z3mwyrn
3LsNI5WOrbluAQUHz+MVINs/68lKmU3+yJzNU+268KMj9/FG35ilK8FJLoW4Su/+
PfLzLJzZFK0QjgLTXCmf/aP24QIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFGvm8igO
bqkhyfTL2P/OcA3XrNUwMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE
ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvRjNBNDFBREVD
MEU0MTFFRkExOUY2NDRDQzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAe
BAIAATAYAwQAOrWTAwQAy5s2AwQAy9FSAwQAy9FjMA8EAgACMAkDBwAkBaAAABcw
DQYJKoZIhvcNAQELBQADggEBABGLU8N7ikfx+aWNhqJv/4ReLGJHwKiUgK0ErwVl
/KAUM8OjrGTgbHp4FnBfuKgIFtN8OspKhP+86w/CNszPdhw1jMoSPubDSlmgynO2
aM430uo7GLeYsPtA68DZ/zGLE1m/u/PInlAe7TyqPaHJvMdLTpL0KYoCg1Z6U01U
InUGKd+7oclg/VuIGa7oJfORezzJTiePqD75cTPu2hU7kjCDNXF66rHDy8yoEnix
c1G4QGORKgGKqY5ccedA4m1hnsbms+CNwb9BiFdlSzRX+MBCme1QXaLm19ZQnv1h
nGZ50MEZPWpCymP2zjLAvCrQidYzEMc8iYuwgmBi8znClrU=
-----END CERTIFICATE-----
Generated at Tue Aug 4 17:34:15 2026 by rpki-client