
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/A3FCB4646AF811F084208830C4F9AE02.roa
File: A3FCB4646AF811F084208830C4F9AE02.roa (raw, json)
Hash identifier: JAiPWOFxcmGrI/Ag2pNPkau1v6DYUSQ0ojsFK11ZmcE=
Subject key identifier: CF:B3:27:A7:EC:91:AE:99:59:1E:C0:56:4B:1C:E4:17:B2:D5:40:63
Certificate issuer: /CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Certificate serial: 06D6
Authority key identifier: 58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/A3FCB4646AF811F084208830C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:34:44 +0000
ROA not before: Sun 27 Jul 2025 14:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49304
IP address blocks: 202.8.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl
rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Mar 2026 21:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1750 (0x6d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F185F, serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Validity
Not Before: Jul 27 14:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a43264-a45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:8f:7f:4f:dd:2c:98:87:9c:13:51:72:68:
29:ca:a5:96:98:85:6b:a2:7d:a7:9a:8e:99:bb:1f:
a2:6c:68:de:bf:f1:15:11:ff:0e:c5:48:57:0d:1f:
11:f0:eb:80:ff:18:fc:07:6d:c6:b5:ff:63:c6:33:
a4:7f:8a:d1:11:34:a3:53:1a:d5:e4:1a:da:13:49:
a2:e4:81:4a:dd:60:cb:ea:a2:cd:75:11:ca:da:36:
50:84:ba:2e:73:98:50:b5:49:aa:95:a5:f0:52:c8:
00:27:72:84:a4:32:e6:34:8f:a0:b5:bf:2f:4a:10:
79:de:fd:c0:21:bc:3a:b7:86:37:61:a5:35:c4:7d:
ee:db:10:0d:bb:19:0f:95:87:c2:30:61:98:45:d3:
7a:52:90:b0:42:f0:3d:ba:33:f1:bc:9f:db:d0:85:
e6:1e:6f:d7:ce:b9:8b:e1:04:a8:b8:11:80:96:11:
cc:33:c3:c7:ce:27:36:0b:14:73:e2:34:46:0c:79:
14:1f:a8:f7:0e:5b:91:cc:b0:05:10:85:bf:f0:08:
5f:7d:09:a1:48:ec:18:da:0b:ad:3d:2e:fd:76:8b:
a1:49:d6:c1:02:cb:98:56:1b:08:01:88:81:ff:fe:
bb:18:e3:aa:06:4a:38:89:1e:8b:51:62:04:4f:a6:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:27:A7:EC:91:AE:99:59:1E:C0:56:4B:1C:E4:17:B2:D5:40:63
X509v3 Authority Key Identifier:
keyid:58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/A3FCB4646AF811F084208830C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.8.104.0/22
Signature Algorithm: sha256WithRSAEncryption
72:16:42:1c:a5:94:d5:57:4d:60:6f:e1:7b:b9:9b:cc:4f:b5:
70:33:93:8b:2f:a4:1a:fe:61:9b:ab:b9:9a:2f:37:22:ec:40:
13:10:e4:91:71:8d:c0:da:00:f5:32:35:0f:52:81:7c:09:eb:
0c:45:77:4d:04:a2:dd:15:7b:c1:67:64:aa:a7:bc:2f:9d:d5:
8b:0f:4c:dc:ce:59:3c:cd:74:8d:80:b8:09:dd:a0:72:6f:81:
b0:c0:06:b4:3a:40:85:92:21:e5:55:d8:9b:79:86:55:98:85:
60:00:c9:9d:12:0f:c5:9d:2e:11:c6:a5:aa:29:1c:6e:36:82:
f0:a6:d5:19:3e:1d:84:10:34:ca:93:f3:0c:07:02:f7:46:96:
78:9a:ba:5c:80:88:40:1a:2b:54:ec:0c:b7:aa:e9:20:d1:2f:
a4:60:f6:1c:72:24:25:3e:0c:db:07:45:31:9d:e6:b9:b2:77:
a5:87:1a:c6:49:63:de:14:90:40:43:48:c2:44:0c:96:59:ae:
63:a1:0b:13:48:23:f7:54:65:db:66:2f:70:8f:d4:95:1b:a7:
9d:68:29:74:11:40:31:40:bc:2f:12:9a:c3:0b:9a:79:42:68:
58:a8:64:6a:27:82:b1:6f:a2:7d:cc:65:21:79:e8:c5:94:9f:
81:c0:1b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 17:41:18 2026 by rpki-client