
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/3BE03ECC7D4D11EE93D62E30C4F9AE02.roa
File: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (raw, json)
Hash identifier: XDu+IeKyxj5n2r5Q1uVJ/WbOchHWT5+N2NY6KVXQfNE=
Subject key identifier: 1C:2E:BE:14:CF:C6:50:7A:36:6D:3C:C0:E5:EA:B5:22:13:D1:51:B2
Certificate issuer: /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial: 020B
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/3BE03ECC7D4D11EE93D62E30C4F9AE02.roa
Signing time: Sat 11 Jul 2026 04:30:09 +0000
ROA not before: Sat 11 Jul 2026 04:30:09 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:dec:4000::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Validity
Not Before: Jul 11 04:30:09 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a51c6d1-a8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:92:f5:10:4a:21:ea:94:7d:9d:30:cd:3e:
b3:cd:6e:e9:34:4d:1c:95:08:0e:d2:82:c6:75:10:
7a:d2:de:26:4d:23:ee:95:0e:61:9a:57:32:3c:40:
dd:99:f2:a9:86:12:d6:5c:dc:0f:eb:c5:ff:b6:0f:
dd:4b:18:7d:28:5e:29:55:01:30:99:4b:16:87:57:
cf:01:22:7c:33:a9:94:ee:9d:44:01:20:c6:82:53:
d2:54:e8:e6:a2:f4:41:ee:9a:c5:13:06:b3:88:cd:
68:f1:79:cb:e2:3c:96:df:28:1c:57:13:fd:17:5f:
8f:50:c5:07:c3:87:ad:0a:4c:2d:ce:fa:05:7d:c1:
38:a3:0b:27:34:80:e3:ab:44:7e:2a:64:6a:e2:7b:
5d:5d:ca:4f:3a:88:ee:81:d0:b8:fd:de:71:6c:33:
6c:68:60:15:91:d5:dd:6c:9a:ad:7e:96:be:cf:5f:
37:1c:20:cc:74:7e:47:00:c8:70:a8:72:9e:b4:04:
54:c6:c7:99:e1:38:b7:84:d2:47:1b:d2:7c:39:38:
c6:e1:ea:66:51:85:8a:67:ba:d1:66:ec:d0:a6:49:
ff:d0:fb:6f:8a:45:d7:8b:3e:80:83:8f:12:48:2a:
d6:fe:91:95:23:aa:c2:ad:c2:f6:75:56:c3:94:49:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2E:BE:14:CF:C6:50:7A:36:6D:3C:C0:E5:EA:B5:22:13:D1:51:B2
X509v3 Authority Key Identifier:
keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/3BE03ECC7D4D11EE93D62E30C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:dec:4000::/48
Signature Algorithm: sha256WithRSAEncryption
a3:f9:fc:63:35:7f:84:17:e5:a2:68:81:fc:7d:68:f1:d2:ac:
16:84:be:28:f7:33:4b:6e:31:d3:06:c0:d9:6c:fa:47:ea:48:
29:f7:e0:97:e0:68:bf:55:5e:c8:9c:ef:cb:19:b7:5f:df:4f:
c9:74:07:86:70:51:2a:a1:80:0b:dc:7e:11:90:2c:56:df:15:
bc:6a:76:c9:39:1c:a3:d4:be:9c:cd:52:9b:55:bd:51:b6:99:
8b:28:0b:79:5d:24:e0:fe:f6:d0:34:ce:3d:b9:9d:83:a5:7e:
84:13:81:50:5d:ee:f5:00:3a:7e:81:3e:0c:ee:4e:f4:29:49:
f4:61:cf:5f:b9:6c:88:d8:96:6e:57:6f:ef:81:be:60:e9:b9:
19:44:0b:8a:cd:6d:5b:c6:b6:f2:38:f4:0e:6d:32:05:91:a9:
84:6a:c3:b2:d4:86:bf:36:f2:3c:cf:4e:f4:20:46:73:28:09:
80:02:dc:fd:81:49:52:ea:a0:4a:49:b4:e5:73:72:fd:55:32:
9f:84:19:2e:61:f9:4e:a4:44:cc:f8:72:ed:46:45:22:b8:07:
ea:a7:9c:4f:33:db:e5:eb:8e:b9:d0:0f:35:66:6c:2b:37:f4:
81:6c:c4:cb:0d:2a:0a:b9:99:fc:23:5b:2c:65:b9:e1:82:9e:
c5:bd:76:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:08 2026 by rpki-client