
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa
File: 3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa (raw, json)
Hash identifier: +WUBdF5XyO/0Wp7ZryTUO15zQkPiK5sz2M+4YcvCha0=
Subject key identifier: 5C:E6:45:E6:5F:7C:BD:65:4B:04:F8:15:33:87:87:C1:8A:75:31:94
Certificate issuer: /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Certificate serial: 03EB
Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:25:05 +0000
ROA not before: Tue 17 Jun 2025 00:57:56 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 138986
IP address blocks: 2402:e940::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:27:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1003 (0x3eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Validity
Not Before: Jun 17 00:57:56 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47671-b5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:df:51:56:14:12:47:a6:36:2b:e4:65:30:
da:58:4c:25:3a:6a:6c:4e:ae:1d:f6:42:9b:d7:2c:
94:ab:de:da:95:f6:ce:2f:e5:27:d9:04:26:fb:c2:
62:98:16:ae:3b:05:21:9b:99:29:d9:43:3e:6d:70:
39:cc:5c:72:28:a9:b1:78:f8:96:25:22:f4:f1:cf:
a5:4e:83:63:31:76:31:df:a6:f6:3a:24:f4:e7:b2:
8e:64:d3:b0:34:d3:16:07:e9:02:6a:4a:88:d9:bd:
83:36:4a:d4:ef:28:7f:a4:6c:bb:5e:f1:54:9e:e2:
0d:6d:a8:9f:2f:28:c3:58:4e:8f:b4:92:1d:a0:9b:
60:b8:f7:e5:7b:b8:4a:7f:cd:20:6a:8c:f7:e2:bb:
4a:99:85:20:59:d1:07:43:6d:c8:1b:a9:dd:5c:f1:
b6:80:df:6f:57:0d:46:fd:71:51:8d:63:fd:44:f9:
45:e6:05:aa:16:35:d2:b8:fc:b1:6d:ca:2b:cd:95:
76:26:a7:ac:ce:3a:bc:2c:7e:61:da:da:0f:09:63:
71:5b:c0:12:71:ac:a5:1f:e7:12:21:17:b6:ea:60:
11:22:1a:7f:68:81:04:47:80:bc:48:2e:0a:9f:f2:
3a:38:ee:e2:8d:71:10:6a:5e:74:46:59:66:c9:cc:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E6:45:E6:5F:7C:BD:65:4B:04:F8:15:33:87:87:C1:8A:75:31:94
X509v3 Authority Key Identifier:
keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:e940::/44
Signature Algorithm: sha256WithRSAEncryption
01:bb:87:b3:4c:3c:45:35:34:86:d9:6e:50:56:df:2f:10:58:
6b:1c:3c:41:b8:a4:72:70:55:03:e3:50:b9:12:4a:c3:00:86:
09:f3:dd:06:b9:81:ad:b4:83:ea:83:0d:cd:e8:6e:74:16:a7:
39:e9:8c:4a:a4:a8:04:40:0b:c8:7a:34:91:69:9c:85:de:bf:
6b:69:35:f6:86:ea:fb:05:1b:f4:e6:5a:3f:cd:a2:0e:fa:fd:
c1:ab:61:66:25:7e:cf:18:c3:ac:9d:ec:8d:6a:cf:cb:10:ef:
32:52:1e:fb:60:23:11:50:34:58:dd:87:6c:e3:ce:c2:f1:95:
7d:9c:73:e1:10:04:81:9f:d4:8a:4c:3c:71:c9:e5:3f:b7:88:
06:57:c0:ee:fa:49:1a:0f:c5:08:67:4e:e9:ca:a8:1c:b7:6f:
e7:46:c1:df:5c:eb:8d:cf:a0:df:91:ee:2e:a6:06:08:d5:6c:
97:d0:33:55:e9:f5:b5:58:ce:c0:2a:51:e3:4c:6f:c9:26:05:
84:e4:7c:d1:09:83:a6:cc:5e:a3:8d:5a:69:37:ba:1e:e7:57:
4c:2e:23:4c:2e:b7:51:63:2a:24:1e:10:ad:cd:d3:cf:aa:d1:
6b:fa:f9:f6:9e:59:7a:81:f5:be:62:4b:7e:b2:2e:83:b4:1e:
fb:77:b9:fb
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg5OTYxMTAvBgNVBAUTKDY5MjEzNTYwODY4Mzc1NUU5NEQ4RUNBNTdEOEIwQjM1
OEVDRTE3MTgwHhcNMjUwNjE3MDA1NzU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzY3MS1iNWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApwDfUVYUEkemNivkZTDaWEwlOmpsTq4d9kKb1yyUq97alfbOL+Un2QQm+8Ji
mBauOwUhm5kp2UM+bXA5zFxyKKmxePiWJSL08c+lToNjMXYx36b2OiT057KOZNOw
NNMWB+kCakqI2b2DNkrU7yh/pGy7XvFUnuINbaifLyjDWE6PtJIdoJtguPfle7hK
f80gaoz34rtKmYUgWdEHQ23IG6ndXPG2gN9vVw1G/XFRjWP9RPlF5gWqFjXSuPyx
bcorzZV2Jqeszjq8LH5h2toPCWNxW8AScaylH+cSIRe26mARIhp/aIEER4C8SC4K
n/I6OO7ijXEQal50RllmycyaXQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFzmReZf
fL1lSwT4FTOHh8GKdTGUMB8GA1UdIwQYMBaAFGkhNWCGg3VelNjspX2LCzWOzhcY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODk5Ni82NjAzMEY1RUQw
NjAxMUVDQkE0MEZDODNDNEY5QUUwMi9hU0UxWUlhRGRWNlUyT3lsZllzTE5ZN09G
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FTRTFZSWFEZFY2VTJPeWxmWXNMTlk3T0Z4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTg5OTYvNjYwMzBGNUVEMDYwMTFFQ0JBNDBGQzgzQzRGOUFFMDIvM0U2RTdBMEM1
RkZCMTFFREJERjVBNjI3QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJALpQAAAMA0GCSqGSIb3DQEBCwUAA4IBAQABu4ezTDxFNTSG2W5Q
Vt8vEFhrHDxBuKRycFUD41C5EkrDAIYJ890GuYGttIPqgw3N6G50Fqc56YxKpKgE
QAvIejSRaZyF3r9raTX2hur7BRv05lo/zaIO+v3Bq2FmJX7PGMOsneyNas/LEO8y
Uh77YCMRUDRY3Yds487C8ZV9nHPhEASBn9SKTDxxyeU/t4gGV8Du+kkaD8UIZ07p
yqgct2/nRsHfXOuNz6Dfke4upgYI1WyX0DNV6fW1WM7AKlHjTG/JJgWE5HzRCYOm
zF6jjVppN7oe51dMLiNMLrdRYyokHhCtzdPPqtFr+vn2nll6gfW+Ykt+si6DtB77
d7n7
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:37 2026 by rpki-client