
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/3E4867CC86DC11EFA6022627C4F9AE02.roa
File: 3E4867CC86DC11EFA6022627C4F9AE02.roa (raw, json)
Hash identifier: oEyX+N8POVIt0NPqCPVZb7yBeCptqcWugjG7I1xvlZc=
Subject key identifier: 03:07:96:69:A7:7D:57:4E:06:D7:74:B8:32:75:40:D3:1F:C0:3B:33
Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Certificate serial: 010E
Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/3E4867CC86DC11EFA6022627C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:15:42 +0000
ROA not before: Sat 25 Oct 2025 09:50:01 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 153193
IP address blocks: 160.30.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Validity
Not Before: Oct 25 09:50:01 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a59b8e-235e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:c1:f4:a6:93:38:63:f7:7a:9d:2f:dd:f6:
e0:2a:09:f6:b2:14:f8:c0:98:f1:57:12:f5:dd:4f:
75:1e:ba:ff:6a:0b:df:2f:98:b3:e5:1b:fe:6d:1c:
d9:92:c3:ff:61:93:b0:f5:83:ab:67:49:d1:42:53:
f4:a8:3f:94:1a:e2:4c:a4:eb:00:e0:f8:46:a8:51:
14:3a:6b:78:45:df:f7:05:76:05:63:7a:b5:4e:2c:
4b:47:2e:0f:99:b8:95:04:31:f2:a3:6d:81:8a:74:
45:2f:28:c5:3c:95:aa:ac:60:d7:3d:ce:4e:f4:93:
e6:e6:ce:2a:48:47:c6:74:86:dd:9b:fd:0e:3b:78:
3d:91:04:8f:99:ec:35:fd:7a:9b:e0:b5:56:21:d1:
0e:e2:11:11:19:e6:95:f5:5f:fd:ed:52:4f:45:98:
de:f6:fe:02:43:40:de:b5:91:9c:59:fc:07:4f:a2:
a9:f4:3c:f7:24:af:3e:44:f8:7d:5d:2b:63:b0:59:
c2:81:4d:7c:9c:47:eb:5b:04:93:51:7b:47:3f:3f:
68:88:c1:9b:46:92:22:8a:2d:0c:77:fc:9c:fc:85:
06:39:88:26:4b:a8:2e:35:8d:90:0c:97:7d:f2:44:
5e:15:76:d3:36:a2:e8:6f:ac:9d:03:bf:3b:e8:58:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:07:96:69:A7:7D:57:4E:06:D7:74:B8:32:75:40:D3:1F:C0:3B:33
X509v3 Authority Key Identifier:
keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/3E4867CC86DC11EFA6022627C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.64.0/23
Signature Algorithm: sha256WithRSAEncryption
42:b2:8e:42:e2:8a:ea:68:6a:31:52:f0:f7:71:51:8a:3b:f9:
70:6b:90:de:d6:23:eb:94:eb:ef:18:12:2b:b4:a0:73:60:27:
19:5d:1d:3e:b7:5a:70:b7:01:ce:f4:a6:d4:3b:c0:34:ff:ab:
22:0d:0e:2c:33:17:b0:87:aa:d0:03:d8:eb:59:43:10:3b:cb:
ca:fe:52:82:e1:68:7f:46:67:20:c9:9f:15:8e:7a:a8:a1:26:
73:79:99:c9:f9:58:5f:13:7c:93:d9:03:80:de:75:9d:a4:69:
ec:78:41:85:94:e1:20:01:ce:b3:36:44:fd:d4:30:e2:1b:ec:
8e:7e:68:ba:83:50:b4:59:84:a1:2c:89:a2:91:2b:47:8b:c7:
9e:01:4c:66:60:2e:2c:ca:0d:3d:fd:c5:75:86:c2:c5:8c:07:
23:6b:6d:f4:ba:cf:7f:16:62:4e:d3:ca:73:9a:dd:9e:95:3e:
00:e4:4a:8a:c2:4a:2c:73:a9:44:44:ff:77:67:dd:cb:06:b9:
68:68:7c:fe:77:5f:43:59:bc:53:55:e9:ce:fe:28:b3:d4:72:
1b:a6:e2:de:7e:79:e4:7c:79:06:c6:56:81:cf:91:a5:58:3d:
36:fd:2e:e7:0c:e8:21:c6:c7:11:20:11:b6:87:f0:ce:5d:03:
73:73:7d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:58 2026 by rpki-client