
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F3011EAAB88311EBB2078C50C4F9AE02.roa
File: F3011EAAB88311EBB2078C50C4F9AE02.roa (raw, json)
Hash identifier: VxYvOO28xeiG9c6rCrahvvpw2JaHPPY/8pkFYEDdB48=
Subject key identifier: 83:92:33:09:26:65:9C:6E:AC:DB:67:D3:7C:CC:6C:CA:FD:C2:5D:4E
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 1258
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F3011EAAB88311EBB2078C50C4F9AE02.roa
Signing time: Wed 26 Aug 2026 17:34:33 +0000
ROA not before: Wed 26 Aug 2026 17:34:33 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 142130
IP address blocks: 2404:f4c0:fa80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4696 (0x1258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 26 17:34:33 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a8f23a9-5f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:6e:13:80:43:39:b5:c4:01:41:33:ac:6f:
42:64:be:e7:c1:ff:c2:8d:aa:da:71:bb:83:1f:6d:
b5:d6:e3:98:29:c7:47:aa:65:d7:18:d9:70:cd:72:
3e:8b:ae:4e:89:38:cf:15:0d:7b:44:79:dc:66:fe:
f8:f3:5e:04:19:d0:ad:be:c1:7f:cc:e0:d2:d1:d5:
28:13:39:e7:69:56:fb:02:6a:b1:b6:1c:83:f9:a4:
84:2e:02:f6:a2:0d:75:38:a2:de:70:35:ad:5d:5e:
e4:4b:4d:3f:bd:8f:59:80:17:b9:11:93:5e:73:31:
65:a8:83:9a:fe:f7:12:67:d5:17:e8:a9:35:68:c0:
1b:c9:55:48:85:60:3d:7b:20:78:16:eb:59:72:9b:
40:9f:f4:47:d7:1c:90:21:12:a9:44:48:56:10:40:
0a:2d:36:2a:28:b1:75:cf:17:f4:1e:2b:fe:ab:51:
21:84:bc:91:47:bd:ca:08:62:cf:1b:e2:33:58:1d:
d7:02:d2:aa:2f:22:ad:18:92:b6:4d:c5:cf:2b:c0:
5a:35:2b:c9:22:fa:ce:73:a0:f9:8f:29:68:f7:6f:
46:54:7e:d2:32:9d:68:09:78:24:39:b3:73:5d:12:
21:c5:1a:00:59:ce:e1:91:24:78:db:23:f5:b8:1f:
70:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:92:33:09:26:65:9C:6E:AC:DB:67:D3:7C:CC:6C:CA:FD:C2:5D:4E
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F3011EAAB88311EBB2078C50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0:fa80::/44
Signature Algorithm: sha256WithRSAEncryption
89:ee:cd:c2:8c:06:f7:01:5a:8a:04:25:ad:8f:19:b4:24:ba:
f0:85:43:96:0e:94:d8:24:ce:5b:47:84:2f:ef:ea:d5:b4:6e:
0d:00:dc:b6:6f:fb:24:17:06:85:af:15:b8:89:72:91:ac:14:
11:f8:93:f0:03:a8:94:8b:3b:6a:44:b5:ea:b0:a8:5c:58:dd:
09:d3:2c:fc:80:43:70:0e:a7:27:7a:76:e6:ec:f7:0c:d3:50:
1a:b8:29:20:71:ab:da:31:a7:8f:9d:9b:a7:69:93:63:b4:1f:
d7:0c:6f:ad:8b:7e:b3:9e:79:e6:38:6b:c4:fb:09:fd:74:2c:
74:1f:b0:26:ba:53:bb:2e:35:6e:39:71:e7:6d:4a:4d:15:5b:
30:b2:ab:78:35:33:b3:55:1c:b7:3b:69:10:a0:6d:1e:5f:1f:
ac:d7:8a:97:7b:e0:b8:0d:e6:a1:57:92:91:af:d0:42:55:e4:
43:ba:a0:7a:8d:83:ca:54:47:8b:d6:d8:9e:ad:d5:4b:8c:6f:
f3:e9:ec:9a:de:4b:44:31:79:46:4e:81:60:25:7e:99:ee:c0:
0c:92:9d:0e:df:f1:6b:f1:91:dc:98:0c:2d:c4:80:8c:7f:4e:
04:fb:57:18:99:bc:a6:47:f6:9b:e9:09:ad:2a:8f:78:61:5d:
ca:af:e9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:48:28 2026 by rpki-client