
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/3CBCF5BED6D911F0B064CD5C85D3641D.roa
File: 3CBCF5BED6D911F0B064CD5C85D3641D.roa (raw, json)
Hash identifier: sM6CeOH9Bgvv3iRWHhGYzH5sAI6j1iD3slAlqraB/mI=
Subject key identifier: 0D:F7:AC:B9:99:94:42:DD:B0:E1:90:93:B4:31:69:BE:F0:64:05:EA
Certificate issuer: /CN=A9172989/serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
Certificate serial: 53
Authority key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/3CBCF5BED6D911F0B064CD5C85D3641D.roa
Signing time: Tue 05 May 2026 08:42:13 +0000
ROA not before: Tue 05 May 2026 08:42:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 2402:4480::/33 maxlen: 33
2402:4480:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl
rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
Validity
Not Before: May 5 08:42:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f9ad65-5b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c8:92:ef:48:fd:96:90:67:26:33:1e:e9:0a:
e1:71:75:33:2a:91:e6:0d:e0:ea:89:ac:dc:c9:e1:
fe:7c:5c:b2:93:c0:d0:a6:88:e7:e7:66:22:85:2e:
82:27:8d:11:04:39:5e:37:27:fb:26:bb:33:4b:d6:
92:d1:5c:c3:e0:95:07:e7:88:38:99:31:dd:35:48:
63:43:2b:f8:49:ba:26:9a:47:b9:d1:12:64:41:db:
2a:2c:4c:68:d2:ab:a5:f5:54:a9:4a:56:9b:ea:48:
c8:82:35:fc:70:8f:f4:c4:29:d4:9a:15:4e:f8:e9:
b0:69:01:84:77:3f:bb:b9:f2:bd:96:ef:64:0c:fd:
6b:a5:66:02:3c:49:b7:12:f8:aa:9b:9d:8e:83:01:
92:c9:51:05:75:b2:79:53:ea:0b:63:70:df:33:14:
53:4c:da:f9:3e:80:12:5d:85:42:b3:40:ec:fb:ba:
42:04:a6:44:82:64:08:64:3c:76:69:97:5d:97:f7:
3c:df:a3:5a:48:38:32:a3:e5:31:25:4e:4a:d0:92:
c3:94:ad:1f:de:7c:bf:0f:f4:cc:85:ee:17:38:c3:
78:9b:85:e7:7c:4a:98:5a:7a:e6:14:99:34:e0:c2:
f5:ff:84:29:0f:4c:96:3b:62:34:b5:c4:50:ab:9f:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F7:AC:B9:99:94:42:DD:B0:E1:90:93:B4:31:69:BE:F0:64:05:EA
X509v3 Authority Key Identifier:
keyid:AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/3CBCF5BED6D911F0B064CD5C85D3641D.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:4480::/32
Signature Algorithm: sha256WithRSAEncryption
63:49:a3:1c:1e:2e:bb:26:09:02:f7:85:14:8f:56:0f:23:f0:
c6:54:ba:c8:2f:e2:a9:fb:0f:b8:41:7b:be:ea:8c:6a:41:c3:
5f:1e:f2:b2:64:e5:06:b9:dc:2b:8c:5b:8d:b1:40:41:a2:9e:
a6:22:cd:e9:84:55:34:dc:29:c1:f0:eb:f9:71:a0:aa:58:36:
df:48:d9:02:7a:21:9d:93:ee:cd:22:ef:b3:18:28:45:fb:5b:
af:ac:22:2d:40:1d:53:d7:a5:4d:16:f2:30:f8:bc:26:c9:9b:
fc:e0:bd:f5:d4:cb:6b:ed:c1:81:a3:8c:b2:0f:c7:db:5d:f8:
84:ff:5d:cf:a1:47:b6:56:2f:f0:e4:a9:b0:82:12:ba:92:c4:
4f:0c:fc:49:d9:10:cc:c2:c5:5e:0b:d9:44:b3:61:81:35:f4:
e8:4c:2e:7a:96:6a:2a:eb:98:23:98:ae:62:3a:4c:16:aa:9a:
db:e6:73:dc:38:27:3c:73:f6:87:b2:e9:9d:76:a4:4f:ef:a5:
04:77:8a:48:af:37:cb:99:ef:17:d3:c7:62:79:f3:19:e5:b4:
a4:17:95:c9:f5:45:c0:ea:c5:11:33:3b:8f:4c:3c:d2:75:fa:
cc:97:bf:ea:76:05:26:57:a0:3c:c7:91:f1:d5:cd:9c:11:54:
24:d9:39:6e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
Mjk4OTExMC8GA1UEBRMoQUI2OUM3NDAyNTQ4OUFGRDYxNzQ3RkY5MzM1QjE0N0Uy
MEJCMjVENDAeFw0yNjA1MDUwODQyMTNaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZjlhZDY1LTViM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDqyJLvSP2WkGcmMx7pCuFxdTMqkeYN4OqJrNzJ4f58XLKTwNCmiOfnZiKFLoIn
jREEOV43J/smuzNL1pLRXMPglQfniDiZMd01SGNDK/hJuiaaR7nREmRB2yosTGjS
q6X1VKlKVpvqSMiCNfxwj/TEKdSaFU746bBpAYR3P7u58r2W72QM/WulZgI8SbcS
+KqbnY6DAZLJUQV1snlT6gtjcN8zFFNM2vk+gBJdhUKzQOz7ukIEpkSCZAhkPHZp
l12X9zzfo1pIODKj5TElTkrQksOUrR/efL8P9MyF7hc4w3ibhed8SphaeuYUmTTg
wvX/hCkPTJY7YjS1xFCrn/ffAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUDfesuZmU
Qt2w4ZCTtDFpvvBkBeowHwYDVR0jBBgwFoAUq2nHQCVImv1hdH/5M1sUfiC7JdQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOTg5L0VGRkRENzE0RDZE
NTExRjBCMDYzODRCNTgxRDM2NDFEL3EybkhRQ1ZJbXYxaGRIXzVNMXNVZmlDN0pk
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcTJuSFFDVkltdjFoZEhfNU0xc1VmaUM3SmRRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Mjk4OS9FRkZERDcxNEQ2RDUxMUYwQjA2Mzg0QjU4MUQzNjQxRC8zQ0JDRjVCRUQ2
RDkxMUYwQjA2NENENUM4NUQzNjQxRC5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAkSAMA0GCSqGSIb3DQEBCwUAA4IBAQBjSaMcHi67JgkC94UUj1YP
I/DGVLrIL+Kp+w+4QXu+6oxqQcNfHvKyZOUGudwrjFuNsUBBop6mIs3phFU03CnB
8Ov5caCqWDbfSNkCeiGdk+7NIu+zGChF+1uvrCItQB1T16VNFvIw+LwmyZv84L31
1Mtr7cGBo4yyD8fbXfiE/13PoUe2Vi/w5KmwghK6ksRPDPxJ2RDMwsVeC9lEs2GB
NfToTC56lmoq65gjmK5iOkwWqprb5nPcOCc8c/aHsumddqRP76UEd4pIrzfLme8X
08diefMZ5bSkF5XJ9UXA6sURMzuPTDzSdfrMl7/qdgUmV6A8x5Hx1c2cEVQk2Tlu
-----END CERTIFICATE-----
Generated at Tue May 12 21:58:06 2026 by rpki-client