
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F3011EAAB88311EBB2078C50C4F9AE02.roa
File: F3011EAAB88311EBB2078C50C4F9AE02.roa (raw, json)
Hash identifier: RdnFjFlQSbXhKdwY5kMqtzBzkUycrU7RuwuLidB948U=
Subject key identifier: 56:6A:4C:75:E7:22:5E:71:DB:C5:FA:26:25:2B:21:08:7E:4D:26:63
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 11E7
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F3011EAAB88311EBB2078C50C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:16:52 +0000
ROA not before: Wed 20 Aug 2025 17:57:24 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142130
IP address blocks: 2404:f4c0:fa80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4583 (0x11e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 20 17:57:24 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48294-db5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:e0:b4:86:d9:05:ab:d3:69:21:b7:7d:8f:
f9:88:8a:e7:49:43:0e:66:05:6f:c4:23:10:fb:e8:
45:54:0d:63:50:33:ca:05:53:62:5e:bd:8e:61:61:
b1:9d:5d:b8:20:b9:99:fb:9e:bc:cf:07:07:fe:05:
0a:5f:cd:29:ce:5b:2e:f5:da:3d:be:c1:16:24:6a:
8d:99:5e:36:38:d9:d6:1d:54:c5:e7:a0:eb:14:90:
3a:ad:da:27:3d:30:81:ad:0b:e4:cb:8f:6e:df:be:
91:73:e2:1d:62:ca:7d:23:4e:46:59:a7:57:72:2c:
ae:89:72:6e:b1:8b:ca:2a:25:17:b3:85:90:27:34:
31:01:70:a3:49:96:dd:79:08:9c:45:e5:18:cb:81:
24:1e:8b:80:e3:f6:11:ed:44:88:c2:3b:3c:63:83:
b8:2c:a9:c4:6f:19:d5:00:6b:f1:ae:f8:47:45:03:
4a:b8:51:3f:95:65:1b:5b:8c:7c:39:f7:1f:e1:c3:
f5:0d:24:f6:13:40:d6:f3:6b:84:3a:0c:41:c7:4c:
a6:35:9a:8f:bb:11:97:21:fb:f8:3d:6b:94:7a:bc:
c8:4c:46:e6:ab:d4:98:75:c4:92:87:86:d6:1b:04:
80:16:3f:24:04:0d:3f:7e:f1:1f:ea:d2:6e:e2:e4:
68:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6A:4C:75:E7:22:5E:71:DB:C5:FA:26:25:2B:21:08:7E:4D:26:63
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F3011EAAB88311EBB2078C50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0:fa80::/44
Signature Algorithm: sha256WithRSAEncryption
69:7c:78:d2:21:3e:7b:df:cf:56:62:a9:5a:f6:5e:c9:46:3c:
86:aa:94:b4:e3:24:16:77:77:90:99:36:b2:6a:c4:4d:8d:48:
fb:cb:73:70:6c:22:7c:50:c2:70:ad:a9:ab:ce:2d:98:8e:c9:
65:15:07:e6:49:81:77:a4:dc:fc:38:e4:73:49:46:7e:33:89:
ea:f6:ba:45:32:6e:58:c4:ac:0d:45:44:9c:ad:07:1d:39:03:
fa:36:00:04:82:dd:10:38:78:6f:be:98:a1:a4:71:1a:8c:99:
82:94:d4:79:fe:84:84:c5:cb:f5:79:67:1e:bc:2a:5f:4f:52:
b1:44:0c:16:06:f4:fe:53:7d:0f:e7:a3:60:53:e8:9d:10:13:
45:6c:83:bb:13:4d:83:2e:01:50:3d:8a:cb:a8:3a:2b:52:9e:
b9:76:c9:18:fc:e2:29:7d:d6:1d:01:6f:b1:d2:b7:67:85:34:
b2:a6:d9:04:f3:fb:97:24:ed:2d:6b:43:7f:cb:ea:76:11:00:
fb:b1:d4:d9:54:c4:6c:62:97:9b:43:92:a3:a6:fc:48:0e:f1:
e2:23:75:91:81:40:a3:f2:8a:d4:fb:40:ee:31:7f:9f:4e:a7:
56:8e:21:07:63:2f:b0:25:59:7d:38:a8:a1:f4:3e:55:82:37:
65:0f:f6:4b
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5
RDNGRDdCNjAwHhcNMjUwODIwMTc1NzI0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODI5NC1kYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjsPgtIbZBavTaSG3fY/5iIrnSUMOZgVvxCMQ++hFVA1jUDPKBVNiXr2OYWGx
nV24ILmZ+568zwcH/gUKX80pzlsu9do9vsEWJGqNmV42ONnWHVTF56DrFJA6rdon
PTCBrQvky49u376Rc+IdYsp9I05GWadXciyuiXJusYvKKiUXs4WQJzQxAXCjSZbd
eQicReUYy4EkHouA4/YR7USIwjs8Y4O4LKnEbxnVAGvxrvhHRQNKuFE/lWUbW4x8
Ofcf4cP1DST2E0DW82uEOgxBx0ymNZqPuxGXIfv4PWuUerzITEbmq9SYdcSSh4bW
GwSAFj8kBA0/fvEf6tJu4uRo1wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFZqTHXn
Il5x28X6JiUrIQh+TSZjMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE
RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvRjMwMTFFQUFC
ODgzMTFFQkIyMDc4QzUwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAT0wPqAMA0GCSqGSIb3DQEBCwUAA4IBAQBpfHjSIT57389WYqla
9l7JRjyGqpS04yQWd3eQmTayasRNjUj7y3NwbCJ8UMJwramrzi2YjsllFQfmSYF3
pNz8OORzSUZ+M4nq9rpFMm5YxKwNRUScrQcdOQP6NgAEgt0QOHhvvpihpHEajJmC
lNR5/oSExcv1eWcevCpfT1KxRAwWBvT+U30P56NgU+idEBNFbIO7E02DLgFQPYrL
qDorUp65dskY/OIpfdYdAW+x0rdnhTSyptkE8/uXJO0ta0N/y+p2EQD7sdTZVMRs
YpebQ5KjpvxIDvHiI3WRgUCj8orU+0DuMX+fTqdWjiEHYy+wJVl9OKih9D5Vgjdl
D/ZL
-----END CERTIFICATE-----
Generated at Sat Mar 7 08:26:34 2026 by rpki-client