
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/3824BA7ECBD411F08255F875C4F9AE02.roa
File: 3824BA7ECBD411F08255F875C4F9AE02.roa (raw, json)
Hash identifier: dBp1q9iBhNYg20l9RVe8ZORxX8RfsfInEVB0fEU3OIQ=
Subject key identifier: F1:FC:D1:15:12:F6:31:D6:E5:4D:31:B6:CE:A7:69:38:24:CE:3A:CD
Certificate issuer: /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Certificate serial: A0
Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/3824BA7ECBD411F08255F875C4F9AE02.roa
Signing time: Tue 25 Aug 2026 07:57:47 +0000
ROA not before: Tue 25 Aug 2026 07:57:47 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 0
IP address blocks: 2407:5800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Validity
Not Before: Aug 25 07:57:47 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8d4afb-31a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:9e:71:e5:75:19:b0:82:af:7a:0a:ed:d0:
1d:37:c5:e5:e9:d2:c8:20:4c:dd:3d:43:a8:dc:aa:
e9:e1:9c:c7:b7:8a:d2:e6:eb:5e:11:76:bc:a3:d7:
62:37:8b:1a:5a:bf:c0:42:6b:dd:d8:30:69:44:a0:
5b:22:84:0b:6b:f1:1d:78:bb:9f:07:63:cc:31:6a:
b3:8e:b3:5f:7d:4f:7c:f4:7f:2b:b5:07:2b:9b:3e:
10:c6:83:fc:c4:87:18:87:b7:11:fa:b4:ed:cc:30:
74:33:2c:56:1a:37:58:42:0a:3f:f8:63:78:62:98:
4e:7a:cd:97:11:42:ff:4c:23:f6:7e:b0:f8:7d:a1:
c5:e0:c6:50:fe:8c:9e:74:27:07:97:de:e5:3c:d1:
d6:bd:83:4e:e4:12:0c:8a:2b:e8:96:98:4d:c8:be:
6e:d0:68:fd:49:20:0b:e7:d7:ed:d4:37:c3:58:4b:
67:f8:aa:70:3e:c9:dc:bd:76:d6:67:92:39:77:ce:
b9:aa:ff:b7:d8:b8:f3:9b:58:81:6a:74:e7:18:f5:
b8:b3:50:c0:6f:72:ca:60:39:f3:3e:25:b1:89:db:
aa:a7:2d:a1:7a:ab:d9:c2:29:7c:14:46:c4:c2:d1:
c0:46:9e:7c:fe:29:b0:6f:53:eb:2d:f5:05:19:8c:
db:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FC:D1:15:12:F6:31:D6:E5:4D:31:B6:CE:A7:69:38:24:CE:3A:CD
X509v3 Authority Key Identifier:
keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/3824BA7ECBD411F08255F875C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:5800::/32
Signature Algorithm: sha256WithRSAEncryption
3a:be:01:e2:8b:78:50:60:6b:00:81:e8:37:c0:e8:82:df:05:
b0:2a:32:fc:69:64:04:b2:5b:92:94:6b:7f:42:73:19:3b:78:
c6:2a:41:53:7b:90:65:7f:cf:15:c7:6e:9e:64:2c:8c:f8:63:
00:ad:82:ad:f8:ce:ea:5f:e6:1c:23:6c:58:4c:b1:7c:45:4e:
7f:70:c7:71:40:32:52:5f:0b:20:c3:b4:9b:ba:d8:99:e7:36:
6c:dd:ff:3f:6e:80:71:c8:ac:1d:2f:1f:8c:18:45:19:9f:d1:
e0:e9:0d:55:9a:4d:57:39:4e:d9:8b:ab:66:86:da:dc:c6:02:
0c:29:3c:8a:33:14:89:ee:44:5d:2a:ae:7a:96:b3:81:a0:ed:
2a:3b:ec:e0:f3:2f:e8:3d:4c:33:98:9b:6e:3e:45:13:e7:1f:
e1:f5:c6:33:ab:d8:03:7e:18:39:78:97:3d:0d:38:06:41:d2:
dc:ca:9f:d2:37:9a:7f:0d:f1:0b:c5:d9:17:1f:4f:48:a5:6e:
6a:d2:1d:4f:8d:e0:58:50:2c:31:4f:7e:b7:51:5b:5c:d5:38:
80:a7:b1:f4:08:1e:f2:eb:91:02:42:6f:88:84:96:0c:9e:95:
75:d5:87:55:01:fd:70:d2:11:a2:fa:eb:5f:73:d7:9d:d2:83:
cc:b0:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:53:26 2026 by rpki-client