
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/345899BA1ACB11F18EC72DC33A3D8C67.roa
File: 345899BA1ACB11F18EC72DC33A3D8C67.roa (raw, json)
Hash identifier: JeWVqSmEgpPqe99fpviE9IltiegcfYWeYrX7sVepfPs=
Subject key identifier: 8C:3B:E5:80:50:9E:35:59:53:10:E8:53:FC:5B:31:CB:08:19:5A:A3
Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial: 11ED
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/345899BA1ACB11F18EC72DC33A3D8C67.roa
Signing time: Sun 08 Mar 2026 08:46:34 +0000
ROA not before: Sun 08 Mar 2026 08:46:34 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2404:7ac0:691::/48 maxlen: 48
2404:7ac0:692::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4589 (0x11ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Validity
Not Before: Mar 8 08:46:34 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69ad376a-e8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:4d:ff:e6:0f:19:11:a4:2d:ff:1f:0a:09:
4f:40:5f:53:c7:8c:c5:75:ee:37:0f:11:28:6a:34:
0d:1d:de:ba:19:15:ef:a8:a7:00:2d:ec:f0:cc:50:
22:a1:3a:03:85:3e:28:c9:23:46:df:1f:19:82:a6:
61:b7:6c:b9:b0:26:7a:64:ca:83:44:cb:fe:38:4d:
8f:35:0e:84:c8:4f:bd:7b:22:fa:84:ea:26:8d:f0:
88:35:ff:90:9f:c2:9d:04:4a:de:f8:ad:f8:5c:f7:
6b:92:93:18:a4:9d:97:97:39:9d:4e:ae:dd:54:94:
cc:81:24:74:26:d2:c4:11:a8:da:95:75:92:4a:b9:
36:27:73:24:af:53:c4:c9:da:4a:6b:03:6e:06:d8:
3f:4b:bf:e6:cb:1c:1d:cb:87:3d:5b:40:54:01:07:
40:d2:91:f7:3e:9d:d3:85:01:31:bc:b0:5d:56:94:
f4:ad:3e:01:34:52:b8:11:42:04:88:a6:3f:cc:19:
70:35:83:3c:20:a5:bc:08:07:c5:ea:61:52:47:c6:
14:37:a6:57:d3:c8:a5:f9:58:b8:65:eb:6b:6a:e5:
04:94:9e:05:5b:7d:9f:87:19:6b:45:e5:a8:16:63:
fa:57:2f:58:30:40:ed:75:11:e8:ea:2f:11:19:06:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3B:E5:80:50:9E:35:59:53:10:E8:53:FC:5B:31:CB:08:19:5A:A3
X509v3 Authority Key Identifier:
keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/345899BA1ACB11F18EC72DC33A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:7ac0:691::-2404:7ac0:692:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
80:38:00:78:20:f9:92:bb:32:08:6c:db:17:1e:fe:9f:23:03:
7e:08:1e:fd:bb:ab:0f:59:ed:17:a4:d2:c6:7a:9e:27:14:c6:
96:c9:d1:5d:9c:71:11:ec:83:eb:f4:c4:1b:03:33:bc:8b:c4:
41:81:16:c9:24:3c:5e:41:ed:e9:b8:05:74:a2:d6:73:56:9c:
ff:b5:d4:1a:df:50:60:71:06:05:0f:97:33:8a:9e:df:96:ad:
7f:ed:be:fe:19:9e:66:0a:34:14:ba:ad:1f:ce:cc:dc:19:3b:
67:27:81:22:39:02:a4:4c:59:38:94:3d:0f:b3:ec:b4:be:68:
ae:14:29:41:b4:9a:10:4d:99:d5:a8:ad:54:86:af:69:c1:7b:
45:f1:e2:48:ed:cc:8a:a2:29:4f:25:ed:cd:34:df:c7:a9:31:
cf:c0:d4:d5:fb:58:1e:c6:27:d1:05:bd:cc:28:dd:79:04:f4:
e8:83:5e:0d:7c:b5:f8:ca:c6:a6:b1:96:35:9d:15:f2:a4:66:
ae:82:61:42:a6:b9:77:cd:1b:ce:08:5e:47:d4:d8:42:0a:f1:
86:50:f5:92:88:d4:79:29:c7:cd:a9:8d:87:15:17:91:41:3b:
22:6c:dc:ff:15:af:c5:ea:bc:27:0e:46:ba:d1:26:34:fa:a1:
00:9d:fb:82
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICEe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz
QzBDRUNBMzIwHhcNMjYwMzA4MDg0NjM0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFkMzc2YS1lOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr6hN/+YPGRGkLf8fCglPQF9Tx4zFde43DxEoajQNHd66GRXvqKcALezwzFAi
oToDhT4oySNG3x8ZgqZht2y5sCZ6ZMqDRMv+OE2PNQ6EyE+9eyL6hOomjfCINf+Q
n8KdBEre+K34XPdrkpMYpJ2XlzmdTq7dVJTMgSR0JtLEEajalXWSSrk2J3Mkr1PE
ydpKawNuBtg/S7/myxwdy4c9W0BUAQdA0pH3Pp3ThQExvLBdVpT0rT4BNFK4EUIE
iKY/zBlwNYM8IKW8CAfF6mFSR8YUN6ZX08il+Vi4ZetrauUElJ4FW32fhxlrReWo
FmP6Vy9YMEDtdRHo6i8RGQZn0wIDAQABo4ICbjCCAmowHQYDVR0OBBYEFIw75YBQ
njVZUxDoU/xbMcsIGVqjMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4
QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDE2QTMvNzcyN0NFNUMzOEM3MTFFOUE3QjVDMjMzQzRGOUFFMDIvMzQ1ODk5QkEx
QUNCMTFGMThFQzcyREMzM0EzRDhDNjcucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAAjAUMBIDBwAkBHrABpEDBwAkBHrABpIwDQYJKoZIhvcNAQELBQADggEBAIA4
AHgg+ZK7Mghs2xce/p8jA34IHv27qw9Z7Rek0sZ6nicUxpbJ0V2ccRHsg+v0xBsD
M7yLxEGBFskkPF5B7em4BXSi1nNWnP+11BrfUGBxBgUPlzOKnt+WrX/tvv4ZnmYK
NBS6rR/OzNwZO2cngSI5AqRMWTiUPQ+z7LS+aK4UKUG0mhBNmdWorVSGr2nBe0Xx
4kjtzIqiKU8l7c0038epMc/A1NX7WB7GJ9EFvcwo3XkE9OiDXg18tfjKxqaxljWd
FfKkZq6CYUKmuXfNG84IXkfU2EIK8YZQ9ZKI1Hkpx82pjYcVF5FBOyJs3P8Vr8Xq
vCcORrrRJjT6oQCd+4I=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:16 2026 by rpki-client