
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/3BC5B9F8B53311EE9D8D774EC4F9AE02.roa
File: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (raw, json)
Hash identifier: j0xY/53uVqFVDJMak2vPu5OYYbqCNOEfNhjOkMcxhA4=
Subject key identifier: 0F:4A:98:B2:59:B1:BC:51:08:3D:7A:5B:B7:95:E3:02:1A:DF:56:65
Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial: 357C
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/3BC5B9F8B53311EE9D8D774EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:32:59 +0000
ROA not before: Fri 12 Sep 2025 14:50:45 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151981
IP address blocks: 182.252.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13692 (0x357c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Validity
Not Before: Sep 12 14:50:45 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4784b-440b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:8f:99:14:8f:27:d6:eb:e8:5f:7b:6a:ee:
71:fd:fa:2f:92:db:43:36:f5:a5:75:1b:1e:c4:0f:
5d:68:95:80:e4:e3:6c:bc:3a:07:55:41:d7:c2:49:
56:2d:49:f9:1e:b4:03:55:00:df:d1:43:c2:45:26:
e5:43:4e:c0:da:f9:e9:77:eb:74:d0:e3:31:f3:42:
31:5d:7f:2d:f2:af:55:5c:27:ee:47:6e:a6:fc:29:
9b:be:6e:49:2e:da:2d:bc:5b:2a:c7:da:75:88:09:
76:0f:55:a3:3c:01:26:b3:e1:77:99:db:6e:5d:93:
89:01:92:d2:81:8b:60:88:fa:44:0f:80:f9:9b:d9:
33:e3:2e:7f:a5:c4:17:a6:18:6c:84:ce:64:13:73:
fa:ea:e1:9f:56:a4:ed:96:4f:db:cd:5e:7e:63:d2:
46:ff:fb:68:2d:47:cf:2b:e6:f2:17:0e:5c:6a:a6:
fe:02:ea:7c:b9:cc:cf:bf:88:c2:ed:f1:53:14:e1:
49:cf:f1:d2:04:d3:1f:3c:96:d9:03:81:e8:8c:c4:
10:3b:10:db:91:10:fc:0e:51:6c:b6:8e:aa:07:f3:
84:e4:aa:1b:29:59:10:cd:c6:76:2e:ce:d7:24:22:
aa:98:cc:80:65:5a:05:d0:5f:5a:33:7b:1b:ea:48:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4A:98:B2:59:B1:BC:51:08:3D:7A:5B:B7:95:E3:02:1A:DF:56:65
X509v3 Authority Key Identifier:
keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/3BC5B9F8B53311EE9D8D774EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
182.252.93.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3c:e9:44:b7:0d:a7:b1:58:e9:c5:e1:1d:e1:12:7a:51:4d:
68:ca:59:bb:14:8b:0e:a9:95:57:3a:52:bb:e5:b7:61:d0:eb:
94:98:47:7b:3a:4b:86:7c:ae:5e:34:32:dc:49:37:cd:d7:fc:
03:af:3b:9a:e2:c0:70:ea:60:25:99:8c:46:7e:dc:5a:9e:bc:
b8:d6:19:73:67:43:7a:e1:93:24:d6:66:08:86:8e:49:6b:73:
4c:b0:c2:31:16:c7:6f:e0:23:40:33:ba:3a:69:8f:c9:4a:de:
6b:6f:f6:6d:7a:e9:49:f5:03:19:2e:b6:49:bc:bd:26:46:53:
c9:37:68:4c:5a:80:56:f8:91:04:cb:45:f6:43:44:72:01:61:
97:ce:99:3e:2d:3f:4a:40:1a:64:d3:64:5c:70:de:b3:b3:37:
03:d2:01:d1:0c:71:f1:cf:93:4d:c5:c0:4b:00:65:1b:22:b3:
82:68:2b:65:e2:62:d3:9b:25:a8:62:a7:49:23:7c:25:7e:09:
31:64:d6:fa:8f:a6:1b:ba:06:b9:ae:d9:73:b5:43:36:92:1d:
2b:97:b3:c6:82:f0:98:6f:0b:b6:37:38:01:e5:99:30:24:ba:
82:7c:8b:11:b1:ef:ec:7c:d7:a7:6f:82:24:2f:00:03:ec:56:
05:a2:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:52:19 2026 by rpki-client