
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
File: 3AF0F3E028CB11F195C91CE1BF833773.roa (raw, json)
Hash identifier: N9Zfbr0Qlz5c/vqla/0to6ngZOQKD3Tc/j8yz0uDraA=
Subject key identifier: D4:4D:94:09:31:F1:0E:C8:28:AF:77:BB:EF:E0:A9:F3:06:0E:9F:58
Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Certificate serial: 3521
Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
Signing time: Thu 26 Mar 2026 04:21:16 +0000
ROA not before: Thu 26 Mar 2026 04:21:16 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 55330
IP address blocks: 180.94.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13601 (0x3521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Validity
Not Before: Mar 26 04:21:16 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69c4b43c-16e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:18:89:a3:53:8e:8e:72:5f:8c:52:ce:c8:
4d:28:4c:91:ef:25:ed:a1:84:9c:df:90:0e:5c:f5:
7b:d7:e2:20:1d:20:84:b7:7d:13:ee:88:17:c4:b4:
18:76:6b:31:b9:7b:8b:52:41:95:fb:2f:cc:87:5e:
a1:2e:84:30:84:a1:52:0b:2e:c5:62:4c:70:17:f4:
bc:56:fe:e7:2d:94:64:7f:4a:31:d7:96:56:b7:cb:
58:62:56:af:ae:bb:1d:41:ab:06:e9:ae:a0:e6:71:
1b:01:20:c6:ec:d3:5d:11:ba:8d:3e:d8:f2:35:4a:
b9:34:90:11:20:58:83:9d:80:4f:87:ce:45:d5:1a:
5a:45:4d:8b:0e:07:66:53:64:1b:dd:c0:62:31:58:
3a:cc:cb:8b:23:5b:69:a4:39:0f:3c:94:8e:d3:27:
7d:68:4e:17:e7:81:06:a1:13:b0:f5:64:32:c0:c2:
fe:73:ab:cc:11:7e:0b:5c:6d:15:6d:34:d9:bc:e6:
2e:dd:c9:a4:91:85:0d:6d:5a:62:a1:4c:1a:c2:0c:
a2:6e:c5:ab:90:66:6f:88:b6:8d:8a:eb:52:b0:5c:
00:30:17:d0:21:a3:6f:c5:57:89:f3:7b:a4:01:e5:
da:de:52:3c:2c:4f:6b:54:fa:ff:ad:f7:f1:a3:12:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4D:94:09:31:F1:0E:C8:28:AF:77:BB:EF:E0:A9:F3:06:0E:9F:58
X509v3 Authority Key Identifier:
keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
180.94.65.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ec:a5:cf:df:d5:8f:92:0c:7f:52:37:87:d5:5b:2b:cd:e9:
f1:76:ef:22:d1:ee:31:27:f5:32:df:99:fd:0a:c9:ed:84:f4:
46:e1:bd:2b:51:2b:20:e5:22:72:4d:48:66:a0:13:04:cb:d9:
0b:19:e5:d7:c1:a9:f4:e4:e4:b8:c0:bd:bf:a9:0a:de:0c:ab:
39:9c:21:1b:f2:a3:f2:c2:da:b5:e3:4a:c4:fe:05:b1:4a:85:
a4:f6:d1:1e:f2:7c:b0:e5:22:0b:ae:53:c8:50:c7:d2:ff:6d:
0b:31:f9:e8:ad:4d:85:87:89:6a:bd:cc:97:aa:94:ab:4b:fe:
32:08:da:e5:03:d5:15:8d:fe:05:25:3e:9f:d3:41:e5:10:51:
ec:90:8c:a3:f1:e9:68:70:cb:95:8d:48:57:62:08:fc:d4:11:
8d:25:13:b8:b5:01:aa:b0:2a:05:36:8c:3a:d2:1b:78:31:6e:
28:1c:16:90:3c:38:ef:6d:a5:e0:eb:87:46:2c:25:12:46:34:
43:e4:be:2c:8c:7c:a6:6d:71:b2:01:60:da:a5:23:d9:47:75:
97:fb:19:71:ec:73:fb:43:76:bd:1b:8c:da:df:c1:83:cc:c5:
0b:4f:6f:8e:ca:38:37:b2:6c:12:65:6d:14:79:90:80:a8:88:
e3:d0:32:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:06:41 2026 by rpki-client