
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/E3E47D36B6B911EE8E72C641C4F9AE02.roa
File: E3E47D36B6B911EE8E72C641C4F9AE02.roa (raw, json)
Hash identifier: EOwdkUCPycfyxEwZOL9x4wNceSGbsrAFIwEgoffB50k=
Subject key identifier: 09:EE:6A:1F:8C:1F:18:B1:20:F5:15:8D:4B:07:D2:08:71:A8:D3:E4
Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Certificate serial: 019E
Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/E3E47D36B6B911EE8E72C641C4F9AE02.roa
Signing time: Sat 07 Mar 2026 04:38:37 +0000
ROA not before: Sat 07 Mar 2026 04:38:37 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152339
IP address blocks: 2001:df3:6240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Validity
Not Before: Mar 7 04:38:37 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69ababcd-32df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:65:0d:ab:ef:ab:bf:05:c1:66:45:f7:0d:6c:
de:c5:dc:d7:16:a1:1c:27:9f:10:c4:08:ec:2a:4d:
57:08:f4:14:f5:78:e5:01:0f:e7:12:58:45:a3:0d:
cf:b4:6e:fa:9d:25:30:58:1d:11:48:63:05:93:b5:
65:a6:17:d3:5a:6b:37:df:b8:7a:cd:d6:5b:de:8d:
95:2a:50:43:2b:9f:96:e9:62:d3:21:bf:67:e7:09:
bb:23:f3:b8:6e:73:f7:6f:ee:7d:3c:6f:73:b6:7b:
c6:37:7b:cd:70:33:3e:29:a2:f8:de:0c:c9:57:ac:
f7:b5:3d:c1:e3:56:33:e0:ab:50:90:67:fa:43:6b:
ae:9d:be:50:d5:7e:e6:a3:3b:d4:ed:34:bb:82:0a:
82:c6:42:a7:c4:98:b6:90:99:53:23:1c:55:1d:6f:
b4:fe:b8:34:0e:d8:2c:0c:e9:4f:6c:ef:75:75:19:
42:c4:46:ef:56:e3:e7:30:25:db:6d:bb:81:69:18:
97:de:1a:a3:9e:f0:54:1b:58:cc:fc:6b:fb:69:eb:
fe:90:8a:e0:71:ea:49:bf:a2:4e:72:d9:70:18:06:
31:1e:26:b1:f8:4d:4d:ee:78:89:ff:5b:0d:13:26:
22:1d:e0:ae:90:db:a5:d3:31:cc:b7:d7:e0:3c:4e:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EE:6A:1F:8C:1F:18:B1:20:F5:15:8D:4B:07:D2:08:71:A8:D3:E4
X509v3 Authority Key Identifier:
keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/E3E47D36B6B911EE8E72C641C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:6240::/48
Signature Algorithm: sha256WithRSAEncryption
9b:4b:c8:e6:c5:ec:4d:59:41:f9:bc:a5:90:4b:5a:1c:8c:39:
ee:84:93:97:9f:58:da:13:04:d3:35:6e:b7:cf:b1:79:94:2e:
a8:97:40:1f:dd:94:6a:08:b5:1e:d2:5d:da:bc:20:36:3c:b2:
a7:42:40:bc:af:b8:ca:d6:4e:d4:cb:5c:f1:75:1a:5d:17:d3:
06:6d:20:1a:54:c8:61:7d:0d:b9:57:2c:af:e5:09:94:c3:b2:
10:81:27:e9:6a:88:0e:16:a2:b2:af:17:c3:12:a0:fe:49:c1:
e9:a3:67:6a:2a:9e:47:23:0c:19:84:58:6f:c8:d9:dc:ed:0d:
99:ee:2d:36:8b:c0:e1:e5:5d:9b:08:30:e2:a5:11:68:29:60:
2a:d3:66:80:7a:94:80:f0:5e:5f:25:c7:c2:3c:7d:6a:b8:27:
c5:78:eb:a8:aa:31:aa:45:c5:cb:8a:3c:e0:d7:e9:68:95:17:
14:c4:8f:a2:32:e6:81:f9:d9:ce:6a:69:90:15:f3:05:fb:ac:
a0:4a:84:38:71:30:84:26:45:d4:06:23:16:ef:74:42:a4:9e:
40:3d:d8:11:15:7d:61:8f:04:6b:f3:37:e8:28:8d:6f:ca:9e:
c8:ae:2b:6f:be:5c:ab:9f:81:4e:e1:22:b0:ff:50:6e:9d:91:
86:0a:2b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:56:47 2026 by rpki-client