
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/A3813FFABD4011F1AC0189FF5611F970.roa
File: A3813FFABD4011F1AC0189FF5611F970.roa (raw, json)
Hash identifier: AUqdnykC4hyaR9PcetOX6/gKm7s2svEG8R4L75Fe4bo=
Subject key identifier: 54:3D:CF:69:36:DA:42:D5:F1:B0:CA:A3:1A:A3:10:80:51:17:6B:54
Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial: 01D0
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/A3813FFABD4011F1AC0189FF5611F970.roa
Signing time: Thu 01 Oct 2026 02:34:34 +0000
ROA not before: Thu 01 Oct 2026 02:34:34 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 153035
IP address blocks: 2402:6720::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Validity
Not Before: Oct 1 02:34:34 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6abdc6ba-6b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:26:09:b0:1c:df:c1:95:5b:85:89:93:3c:
3d:ba:25:3b:e0:7e:1b:37:77:9f:19:7d:08:60:41:
ea:09:41:58:d9:64:58:4b:2d:c8:48:d0:cb:c8:9c:
97:0a:8a:76:10:54:71:bd:4b:32:48:38:f5:63:3e:
48:63:e0:01:11:2f:8e:84:c0:3c:3e:f3:e9:38:d3:
65:79:d6:b6:da:c2:29:11:ae:70:a9:eb:98:6e:6e:
19:04:c8:a3:c0:2c:67:6d:34:65:42:71:21:df:a3:
00:63:42:b1:23:2f:82:0e:ad:e3:08:26:22:51:8a:
da:3d:60:3e:11:ba:78:fd:1f:55:4d:eb:ae:1c:84:
b2:67:3c:9d:b0:21:c5:ef:79:43:87:e4:a6:43:84:
a7:4c:26:e7:4b:88:d0:22:bf:57:88:b8:30:69:3b:
85:c4:bc:da:54:f9:dd:a5:b2:ab:c6:8d:3a:f1:93:
e3:37:91:e3:08:ac:89:bb:cd:81:0d:fc:19:9a:c3:
8e:85:4c:97:04:6c:c6:4c:1c:7c:89:f2:b5:ea:e0:
e4:bd:98:29:f5:bf:03:1e:86:f9:27:fc:18:76:a0:
be:3e:01:43:d1:ab:64:a4:3d:b9:7e:22:fb:d4:03:
09:2a:28:8c:c2:0b:80:74:35:36:67:4d:82:8b:5b:
1f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3D:CF:69:36:DA:42:D5:F1:B0:CA:A3:1A:A3:10:80:51:17:6B:54
X509v3 Authority Key Identifier:
keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/A3813FFABD4011F1AC0189FF5611F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:6720::/32
Signature Algorithm: sha256WithRSAEncryption
c8:c6:b8:ba:7b:b2:ac:58:1a:82:d6:01:3d:dc:58:ab:58:3e:
3d:04:68:32:91:88:bf:4a:94:bd:77:a6:f9:f8:81:b8:03:b9:
2a:a9:1d:f2:6a:d1:3a:65:8b:85:e0:d6:56:95:52:fe:41:7b:
eb:16:40:b3:cb:83:72:6c:29:a7:9c:12:fc:e9:6f:d7:91:a0:
c7:b0:c4:2e:ec:ea:a3:1b:45:72:1d:0a:02:40:ea:c9:1a:a6:
f2:7b:6a:cc:5f:af:18:17:15:bb:bc:f5:e6:de:f6:32:fc:0a:
61:84:09:20:23:82:73:87:14:e8:a3:4c:02:14:98:c6:6a:be:
68:e0:59:cf:1e:b9:6e:74:eb:39:3a:34:97:3b:4d:4e:3c:f9:
07:60:57:84:98:87:48:c9:b7:9d:ce:1e:a2:b8:d4:e5:e1:36:
a5:29:20:2f:3b:33:ed:8d:9c:ca:dd:98:9b:0d:1b:da:7e:dd:
6e:57:ef:ea:cc:8b:0e:8c:20:56:75:63:d5:6d:f0:5e:71:d8:
d7:a4:e8:21:66:9d:e1:f5:82:e4:86:0c:f4:25:ff:98:03:8a:
d1:57:b7:c9:b2:ca:a4:fc:05:bf:a5:2c:9d:bc:a5:32:0b:0b:
f1:cc:59:29:37:a9:6c:df:ac:57:cb:4c:a4:61:92:ef:34:f4:
8e:b9:8a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:16:55 2026 by rpki-client