
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/3EE95EC801B211F19B62C4E66C6F56BC.roa
File: 3EE95EC801B211F19B62C4E66C6F56BC.roa (raw, json)
Hash identifier: 3vXiEZ/BapV8xzTafBsl3BTeOQfwNE0grNCvitbFMro=
Subject key identifier: 91:2B:24:28:8B:81:C9:81:56:02:8E:BC:27:86:FC:84:43:3C:59:81
Certificate issuer: /CN=A918E3C0/serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D
Certificate serial: 02
Authority key identifier: A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/3EE95EC801B211F19B62C4E66C6F56BC.roa
Signing time: Wed 04 Feb 2026 10:14:10 +0000
ROA not before: Wed 04 Feb 2026 10:14:10 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 138233
IP address blocks: 2001:df6:ad40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl
rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E3C0, serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D
Validity
Not Before: Feb 4 10:14:10 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69831bf1-0073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:19:54:13:b0:02:ae:0d:3e:f9:a9:7c:ff:
8a:af:8f:c2:b3:d1:81:91:4b:89:00:41:15:c8:b6:
12:92:79:80:90:97:9b:62:67:38:f7:f6:97:74:8f:
51:85:fc:1c:bb:a3:8b:fa:35:23:ca:7f:81:bb:fa:
82:ad:42:39:5e:a3:06:95:e9:c8:93:b5:c8:a0:21:
9a:63:71:3a:0b:4c:18:c5:90:d7:96:5f:ab:35:e8:
57:f2:72:24:78:c4:37:7e:24:c0:60:95:9e:fc:5d:
9e:79:f4:51:9d:88:64:6f:3d:f5:20:98:35:ce:4b:
4c:50:56:80:4b:dc:a4:6d:a4:0c:66:6d:b4:b3:7a:
ad:c8:04:ca:4f:d2:4c:b0:d3:7f:65:c0:ac:40:cd:
80:89:e0:1e:b1:45:9f:c0:ab:c2:63:1e:48:0c:78:
39:5f:9f:f8:61:fc:b9:d2:db:bd:d4:c8:74:e1:38:
69:09:96:5a:7e:bd:4a:c0:20:aa:75:09:df:ce:ad:
4f:9c:1e:00:bc:16:4a:af:6d:79:36:a2:ef:c2:0d:
1e:46:f4:95:6c:2f:e2:d1:52:ba:cd:3e:b2:c8:e9:
27:8f:9a:bb:c4:f0:32:0f:10:77:f7:17:5f:16:b8:
a3:a9:72:e5:ce:9f:2f:7c:98:df:69:ea:44:a0:1d:
47:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2B:24:28:8B:81:C9:81:56:02:8E:BC:27:86:FC:84:43:3C:59:81
X509v3 Authority Key Identifier:
keyid:A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/3EE95EC801B211F19B62C4E66C6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:ad40::/48
Signature Algorithm: sha256WithRSAEncryption
34:e1:d4:03:92:4f:1e:3d:cf:be:eb:c3:64:40:3e:ad:41:30:
c9:39:37:89:b3:af:1e:7a:1e:d2:d2:c5:ba:31:77:3c:a3:b6:
5b:98:cb:51:3c:9e:22:b6:74:3e:c2:47:2a:3f:97:61:23:c3:
8e:cf:23:7d:8d:ed:c3:3c:28:8c:46:84:4e:aa:94:1e:6c:a3:
52:2a:4d:17:44:b1:b5:1a:9a:3f:d4:b2:ab:3c:e9:c5:49:db:
65:14:d7:4a:f8:bd:37:1f:83:bc:26:e8:d0:7f:0c:74:c9:16:
a2:45:16:51:d7:90:d6:9a:82:8f:65:9d:95:8e:c5:cc:08:3c:
a3:f6:33:49:a5:bf:4b:5c:68:c8:5b:75:59:86:27:52:c1:7a:
a6:d5:26:a5:46:00:d8:2c:be:1c:fc:d3:78:34:09:05:c5:8b:
d3:9d:f2:3c:bb:22:da:6f:ac:25:b5:39:56:9a:04:31:fb:6c:
c9:2c:26:cd:48:31:4c:8b:23:66:ef:63:86:73:25:b5:68:f0:
b9:19:6c:15:59:a9:2c:79:e0:ca:24:0c:30:b2:cc:41:e5:4b:
e1:00:90:6f:07:6f:ff:5e:b1:f7:1a:b1:b8:6a:6d:85:3e:c5:
9d:85:95:64:08:9d:42:6c:0a:63:74:c4:d9:34:6c:63:46:8d:
7a:be:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:38 2026 by rpki-client