
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/100C3F1E212211F18A5869CB2A3D8C67.roa
File: 100C3F1E212211F18A5869CB2A3D8C67.roa (raw, json)
Hash identifier: IMdiCehXyYtBy9e96FQHmcfQXtXWDXRFaUL7xCwpfWk=
Subject key identifier: BB:FC:E8:B2:D8:FC:3D:C5:45:5C:5C:A7:01:0A:D2:1C:EB:92:71:89
Certificate issuer: /CN=A9158019/serialNumber=F3783A788050EE9C7E17895B53DDED646A924C40
Certificate serial: 03
Authority key identifier: F3:78:3A:78:80:50:EE:9C:7E:17:89:5B:53:DD:ED:64:6A:92:4C:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/100C3F1E212211F18A5869CB2A3D8C67.roa
Signing time: Mon 16 Mar 2026 10:22:41 +0000
ROA not before: Mon 16 Mar 2026 10:22:41 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 154343
IP address blocks: 2001:df6:4740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.crl
rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158019, serialNumber=F3783A788050EE9C7E17895B53DDED646A924C40
Validity
Not Before: Mar 16 10:22:41 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69b7d9f1-80c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:f2:bc:4f:5e:73:f8:9a:10:19:5c:1a:9e:
6c:11:86:47:bd:b6:0c:91:ea:8d:3b:a0:7e:44:8a:
84:07:fa:35:eb:34:3e:91:19:2e:0d:40:95:25:8a:
c9:39:c7:e7:4a:f9:43:79:db:b8:ae:09:01:46:a7:
22:26:5a:a5:59:fb:60:ca:cf:ad:bf:a0:2d:97:b7:
55:fe:ba:02:9a:a6:b6:2e:6a:40:69:8b:3e:2f:d2:
c4:42:77:bd:da:6a:35:62:a9:59:ed:b6:6d:7e:ff:
54:6f:6c:70:35:5d:d8:89:a6:e7:64:02:67:21:61:
76:3a:48:b8:34:1b:36:4a:4a:a0:26:cb:47:81:8f:
ce:16:4e:22:9c:e8:e2:4e:ce:4f:5b:28:e6:ea:68:
cd:0d:fc:bd:b3:44:80:fc:60:25:07:09:5e:7e:19:
af:d8:58:f1:13:f1:11:1b:53:81:3c:5e:8f:29:c7:
7c:69:2a:69:d8:38:aa:e8:5a:c5:10:85:64:e9:17:
6e:e3:d6:ce:d9:0a:cc:3f:cc:c5:05:ad:18:94:f7:
52:1e:5b:75:2f:f8:ff:67:b2:9a:d0:3d:50:6c:76:
d6:3b:69:47:89:b4:e8:fa:60:1b:2b:66:3e:d4:84:
6e:a1:d5:3f:53:f7:d0:34:7c:46:18:c2:9b:35:0c:
cb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:E8:B2:D8:FC:3D:C5:45:5C:5C:A7:01:0A:D2:1C:EB:92:71:89
X509v3 Authority Key Identifier:
keyid:F3:78:3A:78:80:50:EE:9C:7E:17:89:5B:53:DD:ED:64:6A:92:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/100C3F1E212211F18A5869CB2A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:4740::/48
Signature Algorithm: sha256WithRSAEncryption
1c:dd:c4:d2:10:a6:51:82:cf:d7:53:e9:ea:e9:05:d2:c7:d0:
69:63:c7:64:7c:1c:22:86:b1:2c:fd:5e:85:47:4a:0d:a4:52:
3b:85:58:9d:d7:c2:dc:42:e8:12:1b:db:e3:4f:ed:18:90:10:
e6:6d:c4:ec:10:f2:a0:e3:3c:19:2b:36:ba:0f:38:bf:ae:0d:
e0:4e:b6:41:10:11:03:b6:ad:e9:19:be:d7:e3:c0:26:bd:d6:
ee:9b:7f:cf:20:50:81:d5:f1:96:c3:80:78:b2:bf:a1:bf:8d:
8a:8d:da:61:3e:1c:44:c8:bc:f9:be:18:b9:6f:7c:c6:2b:bc:
34:b8:89:26:1c:5e:bb:d8:07:d1:d5:a9:29:93:91:89:0e:cd:
fc:bb:c5:85:c5:bb:19:bb:a2:ba:40:ac:63:21:1c:3a:c7:59:
e9:95:12:79:26:d2:85:05:58:bf:6b:58:de:36:ac:ff:cb:39:
d5:f7:87:2b:5e:03:f9:c0:bb:00:cb:3d:29:9a:08:35:fe:50:
f8:1b:21:6e:06:c4:65:4d:9d:55:ed:96:7d:00:ac:26:03:38:
50:4e:0a:4c:93:2b:b9:e7:1f:82:1d:d3:12:e6:cd:c1:91:45:
50:7c:da:e9:41:de:fd:84:62:d1:0f:6a:00:fb:02:3f:65:ff:
aa:73:70:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:01:19 2026 by rpki-client