
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3469BD8A3D4A11F08AE43354C4F9AE02.roa
File: 3469BD8A3D4A11F08AE43354C4F9AE02.roa (raw, json)
Hash identifier: k2QvB10OYJ/mDRgGCKal5TscFfiGzTigbOuUPOZAQBg=
Subject key identifier: 61:A4:06:00:62:74:26:F8:53:4F:21:5F:A9:B9:EE:52:BA:44:90:51
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D914
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3469BD8A3D4A11F08AE43354C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:57:39 +0000
ROA not before: Fri 30 May 2025 11:35:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136677
IP address blocks: 2001:df4:a840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55572 (0xd914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 11:35:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c463-067d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:af:77:d8:01:bd:4f:34:c2:f2:a3:1a:c3:
13:8a:f5:89:6a:20:6a:ae:8e:c0:ca:82:b8:ff:12:
1e:ce:03:07:78:93:f8:78:1e:b2:85:18:19:7e:b8:
34:1a:7f:4f:8f:c7:11:28:b3:a4:96:25:b0:11:48:
85:b7:72:58:a0:ae:d4:f4:14:92:f3:eb:dd:97:57:
8e:1d:c5:3b:bd:ef:36:e5:3a:fb:78:c8:2e:0c:3e:
fc:19:22:f0:71:dc:22:9d:59:fc:1a:32:7a:d8:af:
04:b7:4f:37:27:e0:8d:01:36:a7:17:da:b8:87:3f:
be:da:02:66:e6:78:cc:9b:88:64:ea:b9:28:b4:fb:
63:83:bd:97:c0:a6:1b:ab:f1:ec:4a:3b:70:c1:4a:
36:08:bd:df:45:84:90:9f:be:1c:c5:39:7b:49:2b:
dc:2d:02:4a:a9:a9:62:e1:3a:b0:a6:f9:65:ea:b8:
bf:b5:3c:95:b8:45:3d:ea:87:9d:7f:58:7b:65:52:
2f:7a:fc:01:7a:7b:75:15:27:8a:e7:7f:66:c0:01:
1f:a6:27:f0:16:62:7d:50:04:07:7f:07:e5:4a:ce:
a1:6b:bc:43:d1:e4:1b:53:40:e7:16:43:ea:06:59:
77:45:39:36:57:c9:64:21:43:7d:0f:f6:ff:ab:45:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A4:06:00:62:74:26:F8:53:4F:21:5F:A9:B9:EE:52:BA:44:90:51
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3469BD8A3D4A11F08AE43354C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:a840::/48
Signature Algorithm: sha256WithRSAEncryption
97:a4:04:db:45:36:a9:c1:cd:63:85:10:81:02:45:0d:c9:55:
60:1f:0d:82:3e:9a:30:af:e2:3c:4d:ec:00:58:69:1e:2e:19:
8c:b5:44:2b:f7:d8:11:b7:73:bf:7d:ab:fd:54:00:68:03:9c:
1d:04:f7:8d:21:5d:d9:bf:79:90:e2:0e:c8:78:79:1a:5d:2f:
fe:3e:16:1b:93:13:ba:24:10:14:53:0e:bd:82:f0:15:57:6f:
ed:71:38:e4:8e:c0:69:e3:b0:e1:85:c0:88:1b:d2:be:95:04:
0e:fd:08:4a:a8:15:85:19:b5:0a:5b:84:59:8e:e5:9f:33:d8:
7f:e3:09:6e:13:06:e3:de:b0:54:7b:5f:b9:78:39:eb:9a:0e:
aa:a2:cd:91:3e:16:8b:19:b4:50:ee:3f:f8:c4:40:ca:47:48:
32:57:81:a7:a8:5d:6d:c8:36:23:63:f3:74:64:99:f4:9e:0a:
bc:25:41:91:a1:8c:59:9d:11:0a:cf:03:1f:73:f9:3c:4f:7e:
70:69:bc:5d:70:1b:13:8f:ed:6c:33:e0:d9:0d:fa:41:d0:c7:
08:49:dc:d4:b6:cf:b6:81:e9:e3:ae:89:be:ce:25:55:1f:01:
2b:8b:bb:f8:db:f9:da:08:c4:ee:a2:47:26:5a:3e:a0:ff:06:
38:02:8e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:06 2026 by rpki-client