
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/F3997FACE21D11EFA5819B7EC4F9AE02.roa
File: F3997FACE21D11EFA5819B7EC4F9AE02.roa (raw, json)
Hash identifier: SaiPWLAHUnkyojVdelS2uSfpAinLvbN01a3ry45lnng=
Subject key identifier: 03:ED:43:9B:AA:4D:27:58:4C:1A:50:65:AD:5D:50:7F:D9:E4:B4:85
Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Certificate serial: 033C
Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/F3997FACE21D11EFA5819B7EC4F9AE02.roa
Signing time: Fri 01 May 2026 01:32:56 +0000
ROA not before: Fri 01 May 2026 01:32:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152599
IP address blocks: 2001:df0:9840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 828 (0x33c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Validity
Not Before: May 1 01:32:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f402c8-9578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:79:5b:83:1a:b5:01:17:b7:3e:36:75:94:
0c:b3:5b:c8:85:d4:31:6d:cf:3a:ce:1c:20:46:78:
64:fa:ff:a4:35:b8:2f:5b:12:dd:da:c9:4c:0d:1c:
f4:b0:a3:ed:d2:7b:0a:66:f0:f1:f2:b7:08:91:60:
98:d7:9b:1d:eb:f2:e4:cc:d7:c2:b4:93:4f:d0:3b:
19:14:cf:7d:11:e3:38:9f:1a:86:30:a2:67:07:6d:
b7:e5:69:3a:18:dc:40:af:8f:b2:32:fc:1f:fc:d9:
6c:7f:72:b4:31:69:cd:12:2f:57:53:ef:18:ee:28:
90:9d:e6:0a:aa:71:c8:36:b0:e1:bd:98:41:1f:4a:
35:09:60:af:0e:35:37:81:5a:ee:ac:da:94:66:ac:
cb:bf:2d:e1:80:a5:99:a2:df:33:6b:16:5f:45:d8:
df:58:89:d6:f1:bc:81:f7:22:2e:b5:38:c5:5f:fa:
c1:df:6d:1e:81:42:dd:b2:2a:7a:ad:e5:40:cd:de:
5e:a9:98:a8:26:b4:0a:75:70:a3:e8:41:a9:90:91:
3f:a4:87:51:77:87:dd:f2:f7:ef:14:de:7c:7a:7e:
c3:ab:74:aa:71:f5:8b:f0:50:c0:01:16:83:62:8c:
a4:e0:a2:62:8b:6e:63:21:30:6f:d6:3d:6e:46:48:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:ED:43:9B:AA:4D:27:58:4C:1A:50:65:AD:5D:50:7F:D9:E4:B4:85
X509v3 Authority Key Identifier:
keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/F3997FACE21D11EFA5819B7EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:9840::/48
Signature Algorithm: sha256WithRSAEncryption
76:66:a1:95:8a:37:b4:f9:a4:aa:ab:e3:85:a4:4e:93:5c:34:
6b:ac:5e:76:12:0b:3d:a8:4f:6f:74:99:17:94:4b:a5:d1:b3:
b9:20:72:38:22:26:70:17:0f:cc:26:fd:58:2d:3f:a9:bb:bf:
a5:1f:b2:3e:d8:f1:06:d4:54:34:75:f6:ce:1c:e1:c9:89:c4:
d5:3a:0c:c6:ad:2f:0e:a3:8f:c4:1b:fa:24:be:f6:7c:bd:e3:
87:78:16:b2:66:f3:63:63:60:d0:c5:c3:9d:62:7b:81:5b:d1:
9f:18:37:bd:d9:49:ff:01:d4:92:59:41:8a:76:51:96:74:99:
e1:ff:f0:55:6b:8b:d9:d8:3a:03:4a:06:cd:db:a2:74:5b:cb:
f4:9f:99:48:ff:f7:28:b9:66:a7:7c:07:25:7d:4d:14:fb:ea:
4b:c5:12:f7:a3:f0:d7:b7:59:02:c9:59:21:49:47:ad:cd:e1:
c1:ae:32:82:f4:46:46:6f:8a:58:a2:0e:99:e4:16:69:06:ec:
a8:f4:c0:1d:c2:0a:72:1e:06:4a:12:1b:ea:52:43:3b:dc:68:
e0:87:2d:da:61:5c:3e:eb:0f:50:0b:1b:81:4c:ff:9a:d7:5a:
6a:8a:e2:58:2e:44:5f:e0:c5:9c:f5:00:ed:e8:a5:cb:25:6b:
f3:77:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:06 2026 by rpki-client