
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa
File: 3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa (raw, json)
Hash identifier: hULC6uSAlepciu0KIOcIk9poH1lBPmwK9Cbq5y+OX4c=
Subject key identifier: 6C:55:2E:14:95:47:BB:EB:8B:7B:C6:33:A5:A3:BF:50:66:8B:84:DD
Certificate issuer: /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Certificate serial: 0424
Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa
Signing time: Fri 05 Jun 2026 01:30:07 +0000
ROA not before: Fri 05 Jun 2026 01:30:07 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 138986
IP address blocks: 2402:e940::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1060 (0x424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Validity
Not Before: Jun 5 01:30:07 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a22269f-0da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:27:18:b4:48:bd:90:7b:85:46:f2:08:9f:
cf:69:cb:2e:2b:97:65:04:66:d6:22:00:b5:84:4c:
35:46:fc:8b:39:9d:7f:9a:d9:fb:b3:31:27:c1:fe:
44:17:09:e1:85:6b:78:10:58:d4:13:11:68:30:fc:
52:39:85:c8:23:77:1b:25:46:30:ae:4e:86:4e:05:
53:86:86:7f:50:5f:4b:1b:f5:96:f8:9f:f2:21:36:
2d:d2:c4:97:1b:c5:39:fd:cf:0a:ac:60:3f:64:a7:
81:5e:29:1a:39:72:19:8b:f2:dc:33:d9:5e:17:2a:
1c:e5:31:16:d4:74:96:74:eb:1b:26:7d:49:5f:d1:
e5:0f:70:a3:c3:7f:d4:bc:eb:7f:d5:59:b5:fc:b4:
db:32:19:3b:55:1f:03:01:c0:9e:1e:a8:67:0b:e5:
7c:e1:43:7b:bc:ad:34:c5:49:17:79:65:40:b3:0f:
5c:77:19:95:21:6d:6d:7b:df:bf:db:7b:6f:17:8c:
2d:2e:f0:95:d4:bf:d8:f7:09:93:90:4b:29:b0:2d:
0c:d9:4b:67:d4:76:ec:19:bc:3d:ce:5e:6b:d2:2b:
83:0e:a2:a2:60:fd:be:2c:8c:98:71:27:58:41:be:
80:20:1c:d5:6e:a2:4c:9b:71:6a:2e:4c:27:bb:c9:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:55:2E:14:95:47:BB:EB:8B:7B:C6:33:A5:A3:BF:50:66:8B:84:DD
X509v3 Authority Key Identifier:
keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:e940::/44
Signature Algorithm: sha256WithRSAEncryption
a4:2b:02:ff:f6:24:6d:50:50:e0:d3:f8:e9:44:cc:8a:c0:39:
b0:f3:bf:ce:f5:32:96:42:68:10:f5:d2:79:eb:55:59:f8:63:
35:3d:2e:59:57:de:a8:a1:48:56:2e:fa:ac:23:2e:2c:9b:49:
15:51:b5:13:47:68:9d:bd:51:65:6f:b9:46:eb:55:3e:91:6d:
c6:0e:09:f7:b5:d4:21:89:aa:b8:df:3b:95:9b:46:ad:f3:be:
51:1f:d4:72:c2:66:92:fb:58:42:9f:3f:aa:ed:f9:4a:7f:28:
76:29:3a:96:a8:20:6e:64:38:62:4c:d0:cc:8c:be:fc:5d:20:
6c:bc:f7:73:34:d0:aa:4c:75:e8:58:94:b7:09:81:23:ac:c9:
39:3b:03:a5:98:10:18:94:56:4a:66:58:15:5d:a2:4f:52:54:
ec:9f:48:7b:36:d2:fc:8a:8e:6c:ec:7a:e5:cc:58:a5:c0:a9:
43:70:e4:8c:d4:0d:eb:4b:12:53:00:59:ea:c2:2e:8e:14:e6:
ee:5e:c0:1c:f3:8a:7c:42:75:17:95:17:99:43:2b:a0:a2:e8:
b3:5f:88:b4:44:67:24:2e:ff:4a:7b:68:28:7d:08:a4:54:f1:
dd:c0:e8:9a:f4:bc:c5:61:f2:16:fe:dd:1c:0a:e1:31:44:40:
4f:f7:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:42 2026 by rpki-client