
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3469BD8A3D4A11F08AE43354C4F9AE02.roa
File: 3469BD8A3D4A11F08AE43354C4F9AE02.roa (raw, json)
Hash identifier: 9gg8GsdhPNDiSX9JYSh90jlhDb4yjKGKkcU3MCVhDqU=
Subject key identifier: B1:A0:B0:BC:73:0B:13:01:EE:01:28:12:20:9F:2D:2C:F9:F5:67:BE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E4D6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3469BD8A3D4A11F08AE43354C4F9AE02.roa
Signing time: Sun 31 May 2026 16:57:04 +0000
ROA not before: Sun 31 May 2026 16:57:04 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 136677
IP address blocks: 2001:df4:a840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58582 (0xe4d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:57:04 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6860-c561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:34:d1:68:dd:ac:fb:53:b5:92:9a:00:e6:38:
a4:b2:98:df:da:cc:7c:88:34:33:7c:f0:71:f0:65:
8e:8c:13:dd:72:68:72:3c:31:d5:b5:a3:5e:7d:76:
12:46:1d:60:e8:6c:8e:30:85:c2:ec:89:75:f9:ac:
8e:c2:6e:1e:01:1b:e3:21:81:22:7d:17:e0:25:9a:
c5:9c:e5:02:af:dc:3c:4d:d6:f5:f9:c5:4b:37:e8:
ef:5a:31:2c:3b:65:74:be:b2:fc:e8:68:fc:e9:8b:
65:8b:8d:c7:6a:3b:b8:8e:52:34:bf:be:33:ad:20:
a9:80:fc:2b:29:01:20:f7:ac:73:d2:17:56:2b:7e:
f0:79:7b:c2:dc:f8:3d:d8:8e:c2:aa:2c:4c:c5:dd:
ce:4a:87:6a:ce:d4:0d:4c:89:92:75:06:21:f6:ea:
ad:a0:c1:3a:0d:09:6d:56:14:1d:3d:4a:19:79:54:
ab:b7:2a:c2:3a:ee:1f:7b:81:a8:d0:f2:31:ac:7e:
c2:b0:9b:a0:f3:88:dc:a0:0c:0b:0b:c3:85:06:33:
51:2e:d6:fc:09:bb:8a:33:7f:d0:f4:ba:dd:f2:2d:
c6:f2:dd:2e:2a:8f:39:22:19:11:7d:30:68:b0:17:
83:57:0a:44:4d:07:d9:3e:85:cc:cc:dc:80:15:de:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A0:B0:BC:73:0B:13:01:EE:01:28:12:20:9F:2D:2C:F9:F5:67:BE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3469BD8A3D4A11F08AE43354C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:a840::/48
Signature Algorithm: sha256WithRSAEncryption
11:19:78:a9:39:96:7c:11:90:04:8a:d1:5f:4b:7a:22:61:5b:
ef:93:5b:e5:0b:79:28:79:a9:76:fa:da:2b:e0:2f:60:39:9f:
8e:1a:bc:c6:e8:b0:59:b9:6a:9b:ef:17:16:08:b1:97:ec:a8:
cc:6b:12:1d:67:6c:3a:49:e6:26:9e:f3:a1:38:74:1a:eb:c2:
6a:25:00:ea:29:65:0b:7b:9c:84:49:29:9c:53:db:ca:dd:5a:
7c:f6:76:30:2c:9c:19:69:ab:27:73:c6:a5:f1:86:de:92:0c:
fe:42:3c:c0:06:ec:b8:6b:83:33:d9:c4:3d:1f:7b:26:11:08:
22:42:55:f9:a6:7d:d2:90:34:ec:ee:72:49:fe:d4:9d:43:38:
43:92:ff:5b:40:09:a9:55:27:bd:de:37:b3:c5:ce:84:9e:cd:
af:ac:cb:84:a2:8f:c2:ba:8c:83:f2:1e:ce:e1:da:98:c3:5c:
c7:e6:e2:1e:3e:e1:99:68:4a:25:19:ec:d0:00:b2:89:ba:30:
20:77:40:48:d2:5d:6d:07:2a:96:3b:22:0e:e7:67:c7:9a:a4:
a4:68:5d:52:64:a6:6a:b4:ca:68:08:28:69:09:07:57:bd:d7:
87:8f:25:73:94:60:85:6c:61:6c:71:f4:5d:54:d6:c5:74:d2:
bc:b3:04:f6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAOTWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NTcwNFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY4NjAtYzU2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOY00WjdrPtTtZKaAOY4pLKY39rMfIg0M3zwcfBljowT3XJocjwx1bWjXn12
EkYdYOhsjjCFwuyJdfmsjsJuHgEb4yGBIn0X4CWaxZzlAq/cPE3W9fnFSzfo71ox
LDtldL6y/Oho/OmLZYuNx2o7uI5SNL++M60gqYD8KykBIPesc9IXVit+8Hl7wtz4
PdiOwqosTMXdzkqHas7UDUyJknUGIfbqraDBOg0JbVYUHT1KGXlUq7cqwjruH3uB
qNDyMax+wrCboPOI3KAMCwvDhQYzUS7W/Am7ijN/0PS63fItxvLdLiqPOSIZEX0w
aLAXg1cKRE0H2T6FzMzcgBXeYwcCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBSxoLC8
cwsTAe4BKBIgny0s+fVnvjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM0NjlCRDhB
M0Q0QTExRjA4QUU0MzM1NEM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfSoQDANBgkqhkiG9w0BAQsFAAOCAQEAERl4qTmWfBGQBIrR
X0t6ImFb75Nb5Qt5KHmpdvraK+AvYDmfjhq8xuiwWblqm+8XFgixl+yozGsSHWds
OknmJp7zoTh0GuvCaiUA6illC3uchEkpnFPbyt1afPZ2MCycGWmrJ3PGpfGG3pIM
/kI8wAbsuGuDM9nEPR97JhEIIkJV+aZ90pA07O5ySf7UnUM4Q5L/W0AJqVUnvd43
s8XOhJ7Nr6zLhKKPwrqMg/IezuHamMNcx+biHj7hmWhKJRns0ACyibowIHdASNJd
bQcqljsiDudnx5qkpGhdUmSmarTKaAgoaQkHV73Xh48lc5RghWxhbHH0XVTWxXTS
vLME9g==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:07 2026 by rpki-client