
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/3CA96D46FF2E11F088116B6D89EE528E.roa
File: 3CA96D46FF2E11F088116B6D89EE528E.roa (raw, json)
Hash identifier: IPdWTiyZGv7CgTE/Oyk1ApvL7O1p0dJCGFiGPdap/5Y=
Subject key identifier: 2B:0F:8C:E8:6C:F2:59:16:49:0B:CB:CF:A0:DE:3A:8C:35:1C:F5:3D
Certificate issuer: /CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Certificate serial: EA
Authority key identifier: 01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/3CA96D46FF2E11F088116B6D89EE528E.roa
Signing time: Tue 03 Feb 2026 05:25:38 +0000
ROA not before: Tue 03 Feb 2026 05:25:38 +0000
ROA not after: Tue 02 Jun 2026 00:00:00 +0000
asID: 138026
IP address blocks: 2001:df4:a3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09BC, serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Validity
Not Before: Feb 3 05:25:38 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=698186d2-10f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:17:5b:61:5e:f9:37:d4:af:70:1d:66:98:
b1:50:33:89:d5:52:ad:d4:fa:e1:69:16:b4:5d:2b:
52:c0:75:31:e6:10:a2:5a:f6:b1:67:bb:9e:21:d2:
46:69:e9:46:5d:d1:c8:54:16:ee:d9:cc:e1:72:36:
9f:e9:c5:e3:ca:f1:17:0b:fa:a2:6b:4d:68:10:4a:
84:30:98:c0:da:2e:9b:e3:7c:61:94:53:7c:de:18:
d5:3e:3c:8e:a6:b1:25:14:8b:62:61:14:38:50:ed:
55:a8:35:19:16:13:80:08:fe:7f:05:cf:d8:e2:cd:
d6:73:65:8c:08:d6:19:b8:6f:59:d1:7b:03:71:ed:
1c:5e:62:62:d1:b0:be:dc:a5:5a:bc:6f:cc:f6:8d:
a7:8d:7a:28:25:55:cc:5b:16:25:7a:f1:7d:81:02:
e2:ff:84:9f:17:b1:8d:d0:ba:5b:83:55:2c:f8:b8:
a4:a5:0c:4c:bc:68:01:62:28:ff:24:4e:41:00:60:
18:ca:96:80:8a:6e:dc:58:51:41:7e:f6:b7:4b:21:
32:55:a9:f7:ab:25:67:31:54:02:47:c0:d7:6c:06:
dd:a3:ea:09:2f:d1:c5:4d:b8:45:a7:0a:96:e9:60:
93:84:02:9c:5e:17:49:aa:a2:59:e3:55:18:16:c7:
c7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0F:8C:E8:6C:F2:59:16:49:0B:CB:CF:A0:DE:3A:8C:35:1C:F5:3D
X509v3 Authority Key Identifier:
keyid:01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/3CA96D46FF2E11F088116B6D89EE528E.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:a3c0::/48
Signature Algorithm: sha256WithRSAEncryption
31:20:2e:6a:1f:17:03:7a:e7:fb:c1:c5:56:f5:8a:8c:ed:27:
75:73:f2:b7:99:0c:88:8b:2e:b0:03:09:46:0f:41:b4:8f:9d:
0b:dd:5e:ff:3a:ef:e0:62:5a:61:fd:de:5d:7a:ad:98:ea:93:
80:06:f8:06:63:84:12:40:aa:32:ea:86:e5:a0:23:c7:c5:cc:
18:39:a9:98:fd:3c:e2:92:95:35:56:9a:e3:cc:42:78:1c:ff:
b2:84:6b:57:59:1e:29:70:39:84:fe:c6:34:88:77:d3:0d:07:
3c:e4:ed:8a:b5:56:b2:be:98:da:d5:0a:01:aa:02:cc:d4:f2:
91:af:12:b9:16:6e:62:27:8d:97:5f:ee:78:ce:02:0e:3e:40:
0d:d3:44:1e:4b:c3:71:8e:84:64:80:f3:9e:df:a7:94:fd:ee:
c0:70:cc:85:8a:a8:4b:dc:ca:cd:61:c8:e5:86:74:ec:cc:8a:
0e:37:87:fc:29:fd:18:db:48:07:96:b5:1f:7e:04:23:2b:1f:
08:37:28:0d:8e:1a:33:a3:6e:85:d0:08:f1:2f:98:16:ce:fa:
cd:01:98:0a:72:09:24:82:dd:30:40:a6:f2:e8:e0:25:18:e2:
7a:07:5e:9a:f8:cc:52:c9:c7:c4:18:f6:44:2e:a8:b7:b6:03:
aa:82:e4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:38:00 2026 by rpki-client