
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/3B2E80F84C4C11F198B679C5B8833773.roa
File: 3B2E80F84C4C11F198B679C5B8833773.roa (raw, json)
Hash identifier: GpF3pkbxqalafRm1x56LPUl7e4X+LwnziO0xJ4MUzz8=
Subject key identifier: C6:2B:10:17:8C:FB:74:22:28:4B:2F:3E:83:42:8A:80:7C:B0:A2:37
Certificate issuer: /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Certificate serial: C3
Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/3B2E80F84C4C11F198B679C5B8833773.roa
Signing time: Sun 10 May 2026 08:42:52 +0000
ROA not before: Sun 10 May 2026 08:42:52 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 152147
IP address blocks: 165.101.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Validity
Not Before: May 10 08:42:52 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a00450c-941a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:35:2d:78:c3:a8:d2:88:db:ea:dc:aa:69:
05:68:d4:f6:81:89:b7:ea:74:1d:e3:67:80:2a:47:
bf:03:5b:c6:36:fd:41:88:1d:c2:e0:69:92:af:d5:
6d:8c:39:b9:11:13:4b:04:80:1e:38:79:26:0f:23:
0a:b8:5f:78:db:4f:4b:33:7e:1e:4c:3c:fd:2b:be:
7b:19:1c:76:aa:2d:6d:c1:d6:91:ce:f0:1b:92:f7:
79:e8:7a:85:20:82:32:48:04:06:b4:34:1e:b7:91:
d1:7b:b4:7b:b3:6f:57:7c:7c:87:84:49:31:b8:b2:
ac:df:1a:54:92:91:31:b5:08:fa:b1:e6:48:f1:3c:
26:e0:cc:b0:dc:af:f6:d2:b9:ce:43:62:d3:1e:e5:
98:9f:7d:ad:fa:15:06:9c:76:c6:c3:d7:d2:44:16:
2f:7c:47:8b:10:0f:75:2a:2f:b3:f0:96:7a:24:bd:
d0:b8:f6:e4:7a:d7:ce:e5:83:11:04:7f:4a:1c:f2:
93:c2:c8:d4:52:b8:78:0f:04:29:49:0d:f8:36:e8:
23:6a:dc:3d:e4:a6:a7:d2:58:2c:5c:db:a0:8e:b5:
85:99:00:95:24:c6:c5:1f:55:65:d3:90:9c:9f:e9:
de:88:75:3a:16:17:b1:4c:f8:a4:46:e6:16:04:2c:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2B:10:17:8C:FB:74:22:28:4B:2F:3E:83:42:8A:80:7C:B0:A2:37
X509v3 Authority Key Identifier:
keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/3B2E80F84C4C11F198B679C5B8833773.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.101.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c0:13:36:36:f8:c9:f9:74:25:d8:7b:e4:05:59:7e:31:4a:
76:e9:b5:0c:c2:e9:5d:3f:1a:62:76:b9:48:2b:ca:d9:d4:11:
01:15:74:96:6a:1b:bb:d9:6d:de:28:e6:64:aa:05:e9:d8:58:
a5:35:18:e1:b3:d6:fc:47:c9:0c:41:dd:78:73:66:4a:c3:95:
cd:23:cc:e3:2c:88:b3:ce:42:ed:f0:9d:4b:69:da:17:67:64:
c4:8e:d9:71:3f:f9:43:b5:63:5f:e0:34:03:d6:70:91:e5:8d:
80:d4:b9:23:63:0d:b8:55:1e:a6:87:0e:f4:01:45:13:6b:d0:
55:ed:cf:6b:f6:cb:82:2d:41:90:fd:45:c4:52:8c:63:68:71:
24:a7:64:00:d5:f3:35:3c:61:3c:11:67:e2:c2:a3:d0:cf:ef:
b2:2f:4c:f8:45:cc:e0:a9:ae:cd:42:c7:de:66:6e:24:f5:95:
40:b7:f3:f6:02:da:d6:f0:47:e0:57:7d:1e:10:4e:b2:2e:93:
e2:6d:c4:85:fd:1f:fa:c6:bd:7f:cb:22:ef:fc:2a:18:4e:ff:
91:22:a7:1c:ed:fb:c0:64:61:8b:a7:a3:27:10:13:03:99:3d:
5a:49:a8:81:ba:c3:05:0a:27:a5:bc:a6:77:9a:13:6c:80:95:
e3:2e:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:02 2026 by rpki-client