
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/3CA27876F73F11EF95C5F011C4F9AE02.roa
File: 3CA27876F73F11EF95C5F011C4F9AE02.roa (raw, json)
Hash identifier: nJgMh1pSR7RYvQfkOhJmgSgKanvuGtJRzxiXUhoXDR8=
Subject key identifier: 5E:AA:DA:52:CF:B3:8C:C9:4E:D6:EE:62:F6:31:D7:FD:70:4C:1C:E7
Certificate issuer: /CN=A91F83B6/serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
Certificate serial: E7
Authority key identifier: E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/3CA27876F73F11EF95C5F011C4F9AE02.roa
Signing time: Wed 29 Apr 2026 07:41:24 +0000
ROA not before: Wed 29 Apr 2026 07:41:24 +0000
ROA not after: Fri 28 Aug 2026 00:00:00 +0000
asID: 141414
IP address blocks: 163.61.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl
rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F83B6, serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
Validity
Not Before: Apr 29 07:41:24 2026 GMT
Not After : Aug 28 00:00:00 2026 GMT
Subject: CN=69f1b624-b38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:e1:d4:42:7f:a9:c1:b8:3e:1f:06:18:54:
1a:f5:d5:62:5f:04:5f:23:a3:0b:e0:0a:c4:41:d5:
f0:64:97:fc:2e:73:f5:9e:cd:20:d1:56:c3:ff:46:
54:e2:83:6e:1f:68:dd:b1:2a:54:4a:1b:6a:00:ff:
98:f2:ce:54:dc:5f:e0:55:7b:2e:06:4b:b7:88:27:
c2:4e:aa:81:8b:01:86:75:18:e4:c8:6c:28:31:13:
49:af:4f:8c:10:da:e0:41:05:d0:c6:82:63:ea:a3:
a7:f8:e2:3c:f7:8d:2a:e6:61:6f:22:22:fc:3e:8f:
bd:4c:52:22:ae:e0:b5:39:7a:d6:56:71:3d:06:44:
ab:1b:30:96:1b:4a:60:11:dd:5d:f4:a8:bf:dd:98:
ac:49:38:da:fc:20:54:24:f4:08:c6:f8:60:4b:76:
28:84:2d:a8:04:d1:df:f7:27:17:03:68:2b:07:53:
85:62:92:47:c3:10:dd:d5:cf:95:f6:75:d4:f7:0a:
3b:17:8e:6b:18:b5:66:cf:cd:f9:b3:12:04:9b:4b:
0e:56:1c:20:a4:4d:9b:74:cb:d8:40:94:8a:9a:a1:
60:9c:d1:e5:a4:4d:67:97:80:af:47:8a:1a:bd:aa:
06:91:cf:a9:66:b5:1e:f7:dd:69:71:a8:8b:a7:82:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AA:DA:52:CF:B3:8C:C9:4E:D6:EE:62:F6:31:D7:FD:70:4C:1C:E7
X509v3 Authority Key Identifier:
keyid:E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/3CA27876F73F11EF95C5F011C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.217.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d3:e8:e0:c6:93:7b:09:c9:b7:df:3d:5d:54:22:4a:3c:78:
d4:99:9f:6f:39:87:e2:09:52:1f:80:c4:18:62:08:46:94:92:
29:62:55:c2:70:7a:2e:79:46:41:a1:1f:31:77:c4:73:03:9b:
e0:51:ac:a2:68:81:e8:ab:f8:be:57:fe:76:13:49:27:b7:d2:
5b:6f:62:8e:e6:e9:89:02:7c:e4:1e:ca:be:63:ae:ad:ad:df:
6b:89:ca:e8:b3:0d:a3:44:6e:11:24:c3:a4:22:6c:de:0d:15:
92:a1:d1:2e:88:9f:91:78:1f:f0:c8:d8:60:b5:ec:7b:2e:bf:
38:54:15:6c:44:99:00:3b:09:d8:72:8f:95:c3:20:3d:d9:2c:
21:5b:fb:8f:1d:d9:ba:88:42:9c:66:da:87:a6:67:31:28:c3:
14:07:6b:23:9f:ba:06:a6:fa:78:60:77:12:b0:f0:59:90:14:
bf:75:97:b5:66:18:c7:23:3a:61:b7:e9:50:4b:d3:94:8e:61:
92:d5:53:12:f5:b0:f6:9c:6a:4d:be:f8:7b:c2:b2:e3:f6:3d:
43:c4:f1:c2:b8:0b:49:95:bf:ca:b9:57:00:7d:5c:98:d4:63:
4a:7a:78:70:1d:06:cd:ee:16:73:eb:d4:6d:7e:93:8b:b1:0d:
9b:d9:46:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:48:58 2026 by rpki-client