
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/3FAB1696ADA911F1A6606A8C6F11F970.roa
File: 3FAB1696ADA911F1A6606A8C6F11F970.roa (raw, json)
Hash identifier: Z1a/tuAmkiyt4Eq8nxykrWeYBIPm8sZY0IammJRdAN8=
Subject key identifier: 8F:6E:8E:D3:A1:AC:C9:16:F3:F5:AA:42:D5:F3:64:37:CC:33:B4:3C
Certificate issuer: /CN=A91161EB/serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE
Certificate serial: 50
Authority key identifier: 35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/3FAB1696ADA911F1A6606A8C6F11F970.roa
Signing time: Fri 11 Sep 2026 06:23:06 +0000
ROA not before: Fri 11 Sep 2026 06:23:06 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154446
IP address blocks: 144.79.150.0/24 maxlen: 24
144.79.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl
rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91161EB, serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE
Validity
Not Before: Sep 11 06:23:06 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6aa39e49-7b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0a:68:ae:e9:65:29:13:0f:6d:88:2c:3e:17:
cf:6c:ab:7f:68:1d:0c:75:d4:ca:92:ab:34:c0:03:
e5:22:c6:e0:74:78:45:7b:d1:56:66:dd:b9:49:b3:
f7:78:a1:c5:da:39:34:59:80:2c:09:70:cc:45:ce:
20:3f:fa:f7:56:80:c7:e9:47:4a:10:88:7f:0d:4d:
3f:c4:d5:03:6e:4a:9e:13:dc:8f:4d:76:a0:d5:ff:
87:d7:24:33:4a:fa:d3:e7:56:d5:9d:d5:9d:08:4f:
70:9d:ec:cb:7a:c8:d7:2f:79:fe:81:ca:24:f6:03:
d6:1b:df:9c:57:71:5a:0e:c1:a0:55:68:8d:66:15:
d8:b7:77:3f:65:33:23:b0:cc:dc:a5:5b:53:1f:1f:
c8:10:c6:f1:d1:33:36:26:61:8c:2a:53:77:bd:51:
af:0c:33:b1:e8:05:08:65:30:5e:af:9b:76:ba:07:
3b:80:4c:cf:01:45:00:7d:ba:9e:7d:e2:70:cc:1d:
f4:57:59:a5:aa:87:54:04:0d:84:1d:3e:1b:9a:a0:
b4:fc:54:2c:57:ef:52:2e:e3:84:4a:f4:1e:56:21:
63:52:32:b2:32:8c:95:4b:03:0d:f1:fe:40:40:58:
e8:73:ce:29:64:0f:78:d4:ac:3a:4b:c4:b4:56:64:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6E:8E:D3:A1:AC:C9:16:F3:F5:AA:42:D5:F3:64:37:CC:33:B4:3C
X509v3 Authority Key Identifier:
keyid:35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/3FAB1696ADA911F1A6606A8C6F11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.150.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:18:d9:64:1b:92:4d:a8:6e:c7:96:e3:78:b4:ca:83:da:cb:
20:ef:68:9c:ac:f9:48:f8:e4:bc:d7:2e:36:e2:ad:7a:80:f1:
5b:4e:aa:84:1b:32:7f:26:ef:bb:58:02:a0:65:e5:85:99:3c:
c0:18:d2:65:c1:c0:01:04:43:07:c1:a0:c9:4d:9a:15:9c:82:
fc:64:9b:3a:f6:1e:d1:14:c8:9a:0a:cf:bc:e8:4f:78:de:e5:
c6:ca:b9:20:6c:bb:67:6f:55:f2:c2:45:26:d7:be:a9:0b:0e:
92:34:f2:da:a4:30:a4:ab:25:43:86:86:77:ea:f7:d7:63:a0:
4d:54:bf:0b:f7:ca:09:62:df:73:a1:28:67:38:04:f0:07:11:
d4:0b:b9:6c:c6:00:29:0e:f6:ee:6c:ac:78:31:bc:20:08:3a:
19:c9:90:1a:6b:6c:84:58:9c:a7:1c:da:10:3c:ef:39:01:e0:
e1:d6:66:72:e0:54:58:52:0c:c2:3a:59:23:b7:a8:a7:97:f6:
6e:e9:08:14:c4:48:d6:55:32:03:c3:f4:54:87:4d:c4:62:fa:
06:f8:dd:e7:e8:96:7d:77:f3:e0:b7:6d:7f:93:32:6e:a6:2a:
a0:1c:78:3c:11:a0:02:64:5a:2f:a6:17:1f:88:dd:0b:86:6a:
7b:20:42:76
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NjFFQjExMC8GA1UEBRMoMzVBMDNBQTE0NzhEMDY4MUMwNjcxOTc2QzlGQjQzRjY5
MzEzODJCRTAeFw0yNjA5MTEwNjIzMDZaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYTM5ZTQ5LTdiODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDpCmiu6WUpEw9tiCw+F89sq39oHQx11MqSqzTAA+UixuB0eEV70VZm3blJs/d4
ocXaOTRZgCwJcMxFziA/+vdWgMfpR0oQiH8NTT/E1QNuSp4T3I9NdqDV/4fXJDNK
+tPnVtWd1Z0IT3Cd7Mt6yNcvef6ByiT2A9Yb35xXcVoOwaBVaI1mFdi3dz9lMyOw
zNylW1MfH8gQxvHRMzYmYYwqU3e9Ua8MM7HoBQhlMF6vm3a6BzuATM8BRQB9up59
4nDMHfRXWaWqh1QEDYQdPhuaoLT8VCxX71Iu44RK9B5WIWNSMrIyjJVLAw3x/kBA
WOhzzilkD3jUrDpLxLRWZG9HAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUj26O06Gs
yRbz9apC1fNkN8wztDwwHwYDVR0jBBgwFoAUNaA6oUeNBoHAZxl2yftD9pMTgr4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MUVCLzBBOTM4NUQwMzUw
MjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9IQVp4bDJ5ZnREOXBNVGdy
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTmFBNm9VZU5Cb0hBWnhsMnlmdEQ5cE1UZ3I0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjFFQi8wQTkzODVEMDM1MDIxMUYxQjFGRDZENzQ5QjgzMzc3My8zRkFCMTY5NkFE
QTkxMUYxQTY2MDZBOEM2RjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGQT5YwDQYJKoZIhvcNAQELBQADggEBAEsY2WQbkk2obseW43i0yoPa
yyDvaJys+Uj45LzXLjbirXqA8VtOqoQbMn8m77tYAqBl5YWZPMAY0mXBwAEEQwfB
oMlNmhWcgvxkmzr2HtEUyJoKz7zoT3je5cbKuSBsu2dvVfLCRSbXvqkLDpI08tqk
MKSrJUOGhnfq99djoE1Uvwv3ygli33OhKGc4BPAHEdQLuWzGACkO9u5srHgxvCAI
OhnJkBprbIRYnKcc2hA87zkB4OHWZnLgVFhSDMI6WSO3qKeX9m7pCBTESNZVMgPD
9FSHTcRi+gb43efoln138+C3bX+TMm6mKqAceDwRoAJkWi+mFx+I3QuGansgQnY=
-----END CERTIFICATE-----
Generated at Wed Sep 23 06:47:00 2026 by rpki-client