
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/3F2882786B9911F19129D9096D47A888.roa
File: 3F2882786B9911F19129D9096D47A888.roa (raw, json)
Hash identifier: LrMK47xAaSNKfir1pZggdafMp40B6KiAGZbM8Zztl8A=
Subject key identifier: BD:99:2F:29:C6:BB:F9:E3:4A:81:06:33:16:5C:9E:30:65:7D:A5:91
Certificate issuer: /CN=A91D2A6D/serialNumber=F6919381696AFB917D2A2FCE5F21C1D8533FF162
Certificate serial: 0A
Authority key identifier: F6:91:93:81:69:6A:FB:91:7D:2A:2F:CE:5F:21:C1:D8:53:3F:F1:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/3F2882786B9911F19129D9096D47A888.roa
Signing time: Fri 19 Jun 2026 04:42:16 +0000
ROA not before: Fri 19 Jun 2026 04:42:16 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 134573
IP address blocks: 134.65.126.0/23 maxlen: 23
134.65.126.0/24 maxlen: 24
134.65.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.crl
rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 01:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2A6D, serialNumber=F6919381696AFB917D2A2FCE5F21C1D8533FF162
Validity
Not Before: Jun 19 04:42:16 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a34c8a8-6a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:71:58:8e:f3:4c:bd:2a:a9:11:09:d4:e7:
16:a1:43:9f:bb:f6:25:06:f9:40:20:8c:4c:cc:61:
53:4e:8f:d5:08:b3:04:6a:4a:91:38:0a:a9:1d:a1:
15:85:48:36:e9:e1:1f:a4:c2:5c:35:6a:1e:a4:80:
5a:df:13:92:41:91:ec:4c:aa:b8:05:15:d8:4c:59:
3c:06:75:00:54:55:7c:7c:68:7a:6d:f8:4c:99:78:
62:64:44:68:a1:64:89:b8:7c:56:5c:5a:a0:ed:63:
d2:99:e5:42:14:23:9f:eb:22:80:18:36:54:f2:ef:
1e:0e:39:95:61:2f:db:84:73:5b:79:97:cb:2e:ba:
3f:c1:96:b0:0b:c7:30:d5:de:e5:4a:1a:ae:fb:c9:
b3:b2:d5:08:64:4f:87:3e:97:9d:ac:a8:09:18:2c:
8b:46:7f:dc:d9:02:5e:de:19:35:04:2a:b8:65:cb:
d6:31:df:a4:86:09:32:b1:8e:97:eb:bb:1b:f0:a7:
ba:8e:76:e5:3c:70:4b:83:06:3e:a0:48:f3:61:9e:
b9:37:fb:83:15:3b:38:f9:72:2e:bc:12:5e:48:dd:
34:d6:7f:71:7d:fa:f3:a4:29:cd:d3:ab:da:de:62:
08:be:e3:6a:0b:9d:90:f8:33:67:73:df:3f:79:85:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:99:2F:29:C6:BB:F9:E3:4A:81:06:33:16:5C:9E:30:65:7D:A5:91
X509v3 Authority Key Identifier:
keyid:F6:91:93:81:69:6A:FB:91:7D:2A:2F:CE:5F:21:C1:D8:53:3F:F1:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/3F2882786B9911F19129D9096D47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
134.65.126.0/23
Signature Algorithm: sha256WithRSAEncryption
16:cd:13:9c:e8:68:ed:f5:45:2a:86:6a:b2:7c:09:fe:42:1d:
f0:93:bc:37:4e:3f:f0:e5:7f:df:25:89:8f:c6:a0:9b:6b:e2:
39:d7:0c:3e:a9:87:7a:31:1b:b8:4a:48:be:0a:ee:46:59:eb:
97:96:ad:eb:c0:9a:4b:d0:02:cb:8d:c8:67:98:82:27:e7:d5:
f1:59:a1:c0:99:de:75:58:f2:8a:0f:8c:50:e5:0a:e6:b2:7c:
18:74:cd:60:71:fc:0c:22:06:32:fe:f7:af:f7:0d:f9:5c:43:
70:0e:fa:4c:ac:1d:ce:63:28:a1:da:c0:c4:6f:29:88:98:8d:
1b:ed:94:fa:89:24:fd:c0:96:79:f2:24:1f:f5:5a:f6:50:b3:
1f:0f:c6:b9:d3:f7:d3:b2:95:07:fa:70:77:8c:98:e3:aa:96:
53:86:95:f8:67:67:9e:63:64:d0:55:97:b2:b4:de:71:64:bb:
b6:ef:bf:8a:3e:16:87:af:d9:d1:8f:fc:47:c4:e4:25:9e:77:
f1:f4:c2:25:e5:07:b7:67:42:3b:fa:14:81:fe:eb:3a:b5:46:
56:20:c1:08:79:59:1c:45:ac:68:85:02:d9:61:86:0e:ae:88:
c1:8e:10:89:1d:8e:81:7e:4b:e8:99:03:cc:44:9f:c9:b5:a4:
43:b2:12:40
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MkE2RDExMC8GA1UEBRMoRjY5MTkzODE2OTZBRkI5MTdEMkEyRkNFNUYyMUMxRDg1
MzNGRjE2MjAeFw0yNjA2MTkwNDQyMTZaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMzRjOGE4LTZhNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVQXFYjvNMvSqpEQnU5xahQ5+79iUG+UAgjEzMYVNOj9UIswRqSpE4CqkdoRWF
SDbp4R+kwlw1ah6kgFrfE5JBkexMqrgFFdhMWTwGdQBUVXx8aHpt+EyZeGJkRGih
ZIm4fFZcWqDtY9KZ5UIUI5/rIoAYNlTy7x4OOZVhL9uEc1t5l8suuj/BlrALxzDV
3uVKGq77ybOy1QhkT4c+l52sqAkYLItGf9zZAl7eGTUEKrhly9Yx36SGCTKxjpfr
uxvwp7qOduU8cEuDBj6gSPNhnrk3+4MVOzj5ci68El5I3TTWf3F9+vOkKc3Tq9re
Ygi+42oLnZD4M2dz3z95hQw5AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUvZkvKca7
+eNKgQYzFlyeMGV9pZEwHwYDVR0jBBgwFoAU9pGTgWlq+5F9Ki/OXyHB2FM/8WIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQTZELzUwQjBDMjg2NjBB
ODExRjFBM0I1RUI4RTc5NDdBODg4LzlwR1RnV2xxLTVGOUtpX09YeUhCMkZNXzhX
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvOXBHVGdXbHEtNUY5S2lfT1h5SEIyRk1fOFdJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkE2RC81MEIwQzI4NjYwQTgxMUYxQTNCNUVCOEU3OTQ3QTg4OC8zRjI4ODI3ODZC
OTkxMUYxOTEyOUQ5MDk2RDQ3QTg4OC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGGQX4wDQYJKoZIhvcNAQELBQADggEBABbNE5zoaO31RSqGarJ8Cf5C
HfCTvDdOP/Dlf98liY/GoJtr4jnXDD6ph3oxG7hKSL4K7kZZ65eWrevAmkvQAsuN
yGeYgifn1fFZocCZ3nVY8ooPjFDlCuayfBh0zWBx/AwiBjL+96/3DflcQ3AO+kys
Hc5jKKHawMRvKYiYjRvtlPqJJP3AlnnyJB/1WvZQsx8PxrnT99OylQf6cHeMmOOq
llOGlfhnZ55jZNBVl7K03nFku7bvv4o+Foev2dGP/EfE5CWed/H0wiXlB7dnQjv6
FIH+6zq1RlYgwQh5WRxFrGiFAtlhhg6uiMGOEIkdjoF+S+iZA8xEn8m1pEOyEkA=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:18:37 2026 by rpki-client