
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/F3997FACE21D11EFA5819B7EC4F9AE02.roa
File: F3997FACE21D11EFA5819B7EC4F9AE02.roa (raw, json)
Hash identifier: u+ZBN57vIi/zKLX25fP2Ihd1dJ5sMPLruwdZtn9hxms=
Subject key identifier: 93:CA:14:1B:79:90:28:08:7B:72:26:C3:23:93:EA:A4:34:39:C5:76
Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Certificate serial: 0317
Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/F3997FACE21D11EFA5819B7EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:04:47 +0000
ROA not before: Fri 09 May 2025 02:00:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152599
IP address blocks: 2001:df0:9840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 791 (0x317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Validity
Not Before: May 9 02:00:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a40f3f-57a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:63:12:82:c1:9f:aa:7c:73:da:db:02:62:
c8:c4:65:8f:e5:28:20:7a:9e:ee:35:d7:32:44:89:
41:dc:03:0f:12:cb:37:d9:fc:4a:21:f8:71:3c:1f:
e3:9f:42:f5:98:20:65:db:fe:ec:a2:81:c4:43:43:
16:b8:c1:d7:f6:0c:70:f6:93:49:6f:8b:26:1f:b8:
ba:0c:10:c8:18:be:e2:80:42:57:a9:94:ed:a0:dd:
9c:ab:4a:66:7f:85:07:97:ef:bc:cb:6d:8c:1a:a7:
a4:54:ca:7e:43:9d:56:82:44:8a:30:a6:13:c4:97:
dd:be:17:5f:34:30:35:16:61:e7:12:1a:32:0f:d7:
d3:9d:87:e6:7d:25:90:c7:db:01:9c:d3:c4:72:c7:
04:22:a7:e8:09:70:65:8c:b7:f8:c9:8f:7d:58:cc:
87:3b:f5:79:b0:56:4e:cf:a6:d4:9b:8b:2c:b4:ac:
e4:30:a5:a5:5e:45:2b:61:f9:f0:3a:fe:e7:d2:e7:
7a:a4:01:80:f0:92:b1:ad:0e:2a:20:9e:e6:aa:97:
ee:a4:82:21:91:08:fd:3f:27:89:79:50:c6:1e:16:
7d:f0:81:cd:9e:a7:dc:7c:74:cd:cc:82:fe:3b:02:
96:01:89:fb:93:e6:44:26:90:93:ab:a0:0d:11:21:
56:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CA:14:1B:79:90:28:08:7B:72:26:C3:23:93:EA:A4:34:39:C5:76
X509v3 Authority Key Identifier:
keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/F3997FACE21D11EFA5819B7EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:9840::/48
Signature Algorithm: sha256WithRSAEncryption
57:98:cc:44:cd:3d:ed:23:5f:ff:b8:60:b6:54:a6:75:60:68:
87:a9:91:ff:22:88:e2:86:93:c5:3a:3b:0e:43:b9:d0:dd:27:
1b:49:19:db:ea:4a:85:42:37:e7:13:51:01:3a:b4:58:2b:39:
8d:e7:5a:f4:a0:c3:25:f1:8d:88:39:53:85:48:5c:f3:93:17:
8e:cc:09:7c:a4:b6:d8:a1:23:f6:b5:da:ac:3c:ba:8a:09:75:
65:01:98:bb:94:41:f2:c2:86:3b:f5:ee:10:d5:9a:1b:a5:7c:
b2:a6:1d:10:de:6b:f3:23:95:06:88:0a:9a:14:1a:9f:04:36:
45:63:84:ab:14:9b:fc:e7:71:f5:48:57:d5:ce:2c:36:50:e9:
72:4f:2b:27:e6:ad:38:a8:aa:b4:63:db:46:5e:12:82:8c:59:
dc:1d:27:88:24:47:7c:c3:33:8a:07:fb:ce:6a:c2:86:bf:c2:
ab:3b:e6:66:b4:f5:38:50:df:cb:2c:3c:d7:86:d2:23:7a:e1:
dc:12:88:4f:6e:83:22:9b:59:85:3e:e8:0d:22:3c:88:83:47:
ea:e6:58:c4:e3:d2:fb:58:d5:21:97:f3:49:ee:75:d9:68:36:
89:62:0a:a9:b7:d7:5c:02:33:87:50:6c:db:c7:3d:f5:64:94:
49:51:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:21:51 2026 by rpki-client