
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/3A6D7EA697EE11F187018DAB6C11F970.roa
File: 3A6D7EA697EE11F187018DAB6C11F970.roa (raw, json)
Hash identifier: i+2F5SE8QWLsCFLahpcFi70dethbqd7K67ZjDZ7JpYI=
Subject key identifier: 9D:F5:EB:9B:C6:26:92:EB:11:21:3C:B9:60:8E:10:DA:89:48:DD:99
Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial: 0307
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/3A6D7EA697EE11F187018DAB6C11F970.roa
Signing time: Fri 14 Aug 2026 14:41:26 +0000
ROA not before: Fri 14 Aug 2026 14:41:26 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 394695
IP address blocks: 65.254.64.0/19 maxlen: 24
66.116.128.0/17 maxlen: 24
216.10.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 775 (0x307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Validity
Not Before: Aug 14 14:41:26 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a7f2916-2ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:f2:88:4b:4d:23:19:a3:65:bd:18:05:04:
f5:73:75:05:58:76:3a:fb:19:78:a9:96:55:4b:83:
cf:3c:63:57:66:f2:8c:53:29:b2:92:fb:85:66:ac:
9b:2c:07:3b:a7:45:1a:b2:35:16:4f:22:cf:b0:da:
ce:0c:f9:3b:fb:81:01:50:bc:07:bb:f0:42:ef:4d:
44:fe:28:b3:5b:2f:04:46:86:75:97:90:7a:ed:10:
52:09:c7:60:21:f6:d2:c1:25:32:10:6b:64:5c:5a:
9a:05:77:77:40:6f:1b:43:2b:11:0e:17:db:98:4f:
85:95:b0:00:20:41:5f:dd:dc:6a:58:80:05:8c:7f:
15:de:78:29:8f:8e:2c:e6:e2:ed:c6:35:6e:e9:68:
78:bb:3c:6a:0a:0a:45:b3:80:4c:4f:70:d4:11:15:
a8:bf:a9:b5:ae:a4:5b:6b:f4:10:22:a3:61:49:2f:
e7:0c:c2:d0:52:94:de:80:67:da:72:da:98:00:a5:
7e:4b:02:18:8f:96:0f:87:da:73:6a:77:62:a2:2d:
aa:5e:86:6e:62:5e:87:e4:19:d9:5c:4d:a2:e2:be:
59:80:bf:08:e9:85:63:47:8c:8d:36:5c:54:03:15:
fa:73:cb:06:13:ae:ce:2c:00:a0:a8:f8:b7:07:00:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F5:EB:9B:C6:26:92:EB:11:21:3C:B9:60:8E:10:DA:89:48:DD:99
X509v3 Authority Key Identifier:
keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/3A6D7EA697EE11F187018DAB6C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
65.254.64.0/19
66.116.128.0/17
216.10.240.0/20
Signature Algorithm: sha256WithRSAEncryption
11:39:e5:6c:73:aa:69:7f:2c:44:ab:46:42:1f:11:8f:d7:99:
bc:d2:57:b7:d2:6a:aa:57:83:ef:1c:20:a5:ab:ab:22:6e:f2:
49:e3:75:90:5f:57:f7:52:1c:4f:c3:0b:0a:57:6b:f7:11:1c:
ef:e4:72:e0:fd:e7:78:85:86:3e:17:c7:53:c0:34:42:2b:46:
19:87:01:93:b0:ba:d5:34:fd:f9:3e:85:6f:a7:f9:3f:8c:bb:
d7:0f:1a:f5:d1:46:a3:fe:18:c0:3a:02:fc:80:ce:97:b7:6e:
28:7b:62:67:92:8b:f4:06:b9:91:fb:e1:c6:ef:56:ec:da:1a:
52:bc:6d:30:99:96:12:43:95:e7:87:0f:69:87:90:0d:93:00:
df:7b:e4:d8:25:0c:66:73:e2:4e:ac:16:41:a9:31:c9:0d:cc:
c0:66:39:9c:c1:67:0d:2d:15:68:56:c8:8a:0c:86:c7:09:3a:
c1:e0:ca:3e:11:07:82:7c:a7:f3:12:f6:67:b9:f1:18:26:2f:
73:04:cb:d6:d9:30:46:2c:21:a5:a3:c0:81:90:eb:41:2d:bd:
6a:68:27:49:98:1e:ee:28:e5:b3:9c:88:4a:6f:94:b0:66:85:
f4:28:7d:7a:4a:08:94:f9:50:1c:17:51:c7:cf:0f:df:fd:85:
1e:98:c4:da
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICAwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB
RTdEQ0M3NjEwHhcNMjYwODE0MTQ0MTI2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdmMjkxNi0yY2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxkvyiEtNIxmjZb0YBQT1c3UFWHY6+xl4qZZVS4PPPGNXZvKMUymykvuFZqyb
LAc7p0UasjUWTyLPsNrODPk7+4EBULwHu/BC701E/iizWy8ERoZ1l5B67RBSCcdg
IfbSwSUyEGtkXFqaBXd3QG8bQysRDhfbmE+FlbAAIEFf3dxqWIAFjH8V3ngpj44s
5uLtxjVu6Wh4uzxqCgpFs4BMT3DUERWov6m1rqRba/QQIqNhSS/nDMLQUpTegGfa
ctqYAKV+SwIYj5YPh9pzandioi2qXoZuYl6H5BnZXE2i4r5ZgL8I6YVjR4yNNlxU
AxX6c8sGE67OLACgqPi3BwD12QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJ3165vG
JpLrESE8uWCOENqJSN2ZMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG
QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzc0OEUvNEQ3ODkyNkE0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvM0E2RDdFQTY5
N0VFMTFGMTg3MDE4REFCNkMxMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQFQf5AAwQHQnSAAwQE2ArwMA0GCSqGSIb3DQEBCwUAA4IBAQAROeVs
c6ppfyxEq0ZCHxGP15m80le30mqqV4PvHCClq6sibvJJ43WQX1f3UhxPwwsKV2v3
ERzv5HLg/ed4hYY+F8dTwDRCK0YZhwGTsLrVNP35PoVvp/k/jLvXDxr10Uaj/hjA
OgL8gM6Xt24oe2Jnkov0BrmR++HG71bs2hpSvG0wmZYSQ5Xnhw9ph5ANkwDfe+TY
JQxmc+JOrBZBqTHJDczAZjmcwWcNLRVoVsiKDIbHCTrB4Mo+EQeCfKfzEvZnufEY
Ji9zBMvW2TBGLCGlo8CBkOtBLb1qaCdJmB7uKOWznIhKb5SwZoX0KH16SgiU+VAc
F1HHzw/f/YUemMTa
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:55:34 2026 by rpki-client