
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/3BE03ECC7D4D11EE93D62E30C4F9AE02.roa
File: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (raw, json)
Hash identifier: HisRiW5EWGfUY7tpMgN5Z0zrlCM3EcURz9NoUEQR3wA=
Subject key identifier: 72:0E:51:64:C0:1C:EF:DE:62:52:0E:7F:51:4E:B6:15:31:85:30:A4
Certificate issuer: /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial: 01C0
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/3BE03ECC7D4D11EE93D62E30C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:01:12 +0000
ROA not before: Thu 19 Jun 2025 04:02:43 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:dec:4000::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 03:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Validity
Not Before: Jun 19 04:02:43 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a41c77-6bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:35:98:21:b2:ba:e6:39:f1:d5:31:3a:d1:
d5:02:56:64:16:a6:75:02:96:72:76:48:08:e8:ed:
ca:fd:c9:af:af:49:fc:8d:14:0a:ba:00:71:f9:c9:
3d:56:0b:db:42:13:5e:89:29:d9:26:51:b8:3e:f9:
01:d1:52:f2:c5:08:bd:48:ac:22:6d:1b:d8:a0:1f:
74:77:2d:25:81:1f:02:a1:b3:23:09:1f:3d:e4:06:
8d:1c:1c:8d:06:f5:37:79:eb:7a:52:ea:e9:c6:46:
03:c2:19:e9:16:af:d7:35:e7:5d:87:be:e5:e0:e8:
30:c6:57:9c:8c:b2:1d:5d:39:d4:ef:4d:7a:99:45:
a1:4b:55:cb:1c:19:37:5b:ec:53:b9:ed:52:48:c0:
d0:e2:c6:56:6b:ed:26:98:26:69:8d:c1:12:65:46:
80:fc:0b:63:0f:3e:ea:fd:5f:f9:64:d2:c4:22:66:
49:59:10:b3:80:e5:fe:89:87:79:9f:be:2c:2a:f2:
cd:5b:22:3e:74:e9:9a:f3:fa:46:f1:13:e8:2b:e0:
9e:ec:20:92:84:f1:82:4d:e1:49:f3:35:59:2f:e2:
fe:eb:d1:ba:b8:69:05:41:71:c9:f2:b4:d3:13:cb:
ff:fb:38:5a:ea:fe:89:94:bf:0b:c3:24:64:24:6a:
e0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0E:51:64:C0:1C:EF:DE:62:52:0E:7F:51:4E:B6:15:31:85:30:A4
X509v3 Authority Key Identifier:
keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/3BE03ECC7D4D11EE93D62E30C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:dec:4000::/48
Signature Algorithm: sha256WithRSAEncryption
92:e6:28:2d:ee:44:88:80:6c:27:50:f3:bf:7f:ff:e2:f4:a3:
3c:93:bb:43:9f:4a:d0:55:11:cd:a0:fd:bd:98:b1:ce:2f:2b:
d2:06:2a:8f:9b:3d:ac:17:27:5a:f2:d1:99:8a:f5:b5:82:69:
01:12:3f:10:35:87:a6:b8:be:eb:0f:86:c1:79:32:ac:53:73:
31:23:20:f9:dc:c7:b7:fa:99:5b:b3:3a:11:40:aa:8b:fa:b8:
3a:e7:9c:ac:29:e7:5c:c8:9d:b8:df:cd:95:4d:12:40:b4:2d:
69:37:59:76:c6:bb:51:72:8e:d2:67:73:e8:33:49:8a:17:dd:
92:09:c4:e4:7c:08:97:30:9f:9d:92:57:b0:ae:c3:f8:df:a9:
75:2e:ad:58:1e:6d:fb:7a:f9:6a:f2:e1:14:55:ef:ce:c5:11:
e7:b3:b1:b1:32:50:d2:d7:43:dd:29:ae:25:99:76:da:4b:cb:
d9:99:d4:c9:0a:68:b7:c6:f9:83:bd:97:22:11:8d:7b:15:0d:
7d:38:a8:7f:06:3d:ba:7a:43:8e:3e:99:ba:b4:48:12:d9:9d:
64:2e:64:d5:27:da:2d:52:6b:17:db:5e:93:19:13:e2:0e:59:
f4:ed:7e:36:4a:61:c1:cd:50:60:c9:3a:6f:8f:41:67:92:23:
87:63:af:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 18:21:42 2026 by rpki-client