
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3322FCF6B8B611F09EE22E11C4F9AE02.roa
File: 3322FCF6B8B611F09EE22E11C4F9AE02.roa (raw, json)
Hash identifier: vPw7xATzv0O2yNoJH3ofUOV61xAOAH8pdJ0rodOC4Lw=
Subject key identifier: 03:5C:CB:41:3B:F7:10:98:E2:53:94:81:17:5E:C8:A8:C2:9A:2C:6E
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1DE9
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3322FCF6B8B611F09EE22E11C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:06:24 +0000
ROA not before: Mon 03 Nov 2025 13:08:33 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 141450
IP address blocks: 2406:d00:160::/48 maxlen: 48
2406:d00:161::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 16:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7657 (0x1de9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Nov 3 13:08:33 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48020-d103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:9a:30:bd:4f:20:ab:d1:7e:f5:98:c1:c0:
bf:51:7c:97:d2:85:88:66:03:60:20:d9:48:50:16:
b2:37:90:c4:e8:4e:3f:0e:56:d6:3b:cd:e6:f1:ea:
5b:1b:11:5c:98:58:4a:92:99:f0:e9:b1:fb:59:cb:
cc:d1:d1:f3:34:3f:99:e3:fb:cd:a8:5a:9b:95:6f:
cc:86:cd:12:a4:1e:af:6e:f2:a7:6c:f8:99:16:04:
54:dc:e9:02:b8:de:87:49:ab:d4:4d:ff:30:a9:50:
2a:22:66:65:ae:96:30:f8:ae:ce:3e:75:09:8e:18:
30:bf:82:1d:20:db:0b:e3:6c:10:5f:fd:2c:c8:64:
81:66:17:bb:37:54:c0:ef:c2:08:bf:a2:65:0d:f5:
02:4d:87:e3:3e:44:9c:c5:27:c9:47:8f:87:ad:7c:
ec:d7:8f:b0:cb:e2:99:54:f9:68:9f:82:bd:73:95:
4a:35:ab:87:8f:c1:4a:a1:a1:d4:93:9d:dc:eb:b2:
c1:38:60:08:e6:ec:52:f2:0a:00:de:cc:d0:9e:73:
0f:42:52:8d:22:10:4c:6e:8c:5f:b8:27:2b:3c:8f:
5b:1e:c7:25:45:60:e2:47:ec:b2:4d:92:ec:4c:d1:
4d:98:c5:cc:81:8b:b3:f3:bb:a1:71:d6:79:1c:3d:
ef:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5C:CB:41:3B:F7:10:98:E2:53:94:81:17:5E:C8:A8:C2:9A:2C:6E
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3322FCF6B8B611F09EE22E11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:d00:160::/47
Signature Algorithm: sha256WithRSAEncryption
82:99:6f:d2:40:c3:ce:af:0c:7a:57:da:ca:2a:65:f7:01:b4:
81:5a:d2:4e:96:ce:ab:fb:cd:48:8e:7b:8e:f5:3e:b5:4c:ce:
23:46:13:85:ac:48:13:72:89:01:08:8f:cf:4b:7b:09:43:d3:
53:86:6c:5b:fa:53:60:c2:f2:1f:cd:e3:82:64:f0:c5:3f:2a:
b4:fd:64:96:7b:02:50:a6:d2:8b:08:f4:87:d4:15:e8:b7:89:
57:12:22:b7:23:34:51:68:cf:ac:d0:5d:d5:18:de:9f:37:35:
66:9f:e5:4c:70:85:aa:24:99:fd:be:e9:b5:55:c8:75:8c:c3:
8a:d3:b4:68:65:76:e7:7d:a6:c6:1e:68:36:98:33:13:cb:21:
fc:1b:85:66:97:c9:f9:00:26:0f:f2:0d:6d:19:eb:dc:44:e5:
03:83:c9:33:b5:0d:59:3b:5a:2f:ba:73:ee:24:ae:77:09:30:
dd:69:22:d7:6f:54:39:95:d7:e5:0c:72:35:e5:17:d2:45:4b:
49:c3:ab:e2:e0:bb:6c:8a:59:f9:26:35:5f:3c:aa:75:6c:3d:
00:10:a3:26:ef:26:a5:89:7e:2e:c2:51:5d:72:f4:de:05:94:
db:1a:3f:ba:a9:59:fa:de:cd:c3:65:f1:91:ac:7f:df:c2:bd:
3e:c2:a1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:49:12 2026 by rpki-client