
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/3F50C060031811F19D968415183D8C67.roa
File: 3F50C060031811F19D968415183D8C67.roa (raw, json)
Hash identifier: ikbWJMeGoQ4NT+iTgattiHwkrEFygkhc4z1JEm/i9+4=
Subject key identifier: A6:07:C9:BA:6A:3A:D4:22:69:65:F2:AD:89:24:43:C7:C9:FB:7F:FB
Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial: 0235
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/3F50C060031811F19D968415183D8C67.roa
Signing time: Sun 01 Mar 2026 18:22:53 +0000
ROA not before: Fri 06 Feb 2026 04:56:50 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 34985
IP address blocks: 185.254.240.0/24 maxlen: 24
194.246.40.0/24 maxlen: 24
194.246.41.0/24 maxlen: 24
194.246.42.0/24 maxlen: 24
194.246.43.0/24 maxlen: 24
213.139.233.0/24 maxlen: 24
213.139.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Validity
Not Before: Feb 6 04:56:50 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a483fd-5531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:62:9d:25:a5:1e:b5:2b:6a:68:20:b8:ba:
3e:8e:74:67:a5:85:7b:78:e2:f7:7d:83:63:f1:d0:
d6:15:ce:55:65:70:0c:7d:59:13:87:56:eb:fe:b5:
46:8b:4c:2f:9a:10:f1:82:47:16:62:2f:46:a6:03:
00:6a:c3:1d:b7:2a:c2:3f:0c:51:1b:f7:ff:b7:4b:
35:71:47:60:89:85:57:6d:6b:fe:b1:e4:90:13:a4:
48:99:78:0b:e2:94:ce:f2:6d:83:b9:6e:0e:9c:c0:
7e:0b:86:f4:48:93:3f:74:19:12:d2:ca:3c:1c:b4:
45:7a:ba:eb:41:8d:50:53:68:6c:49:65:5b:98:75:
47:b6:87:ad:83:15:6b:ab:6e:51:03:04:bd:94:b2:
f6:23:5b:b8:76:13:20:4d:08:48:b3:20:38:42:96:
27:ad:91:7b:6d:08:76:b7:37:21:e8:53:f2:da:fa:
04:29:13:a2:82:cc:46:d0:78:9a:f4:d8:fa:ee:58:
3c:2c:21:db:c9:92:e5:8c:de:e9:0c:64:b2:8f:0d:
54:d9:85:1e:33:19:d2:8e:38:c6:3b:a5:76:2d:20:
f0:78:ae:dd:9f:b9:d6:99:a3:e0:dc:9a:33:55:8a:
7f:bf:37:54:cc:3f:c9:d4:6b:8c:ee:5e:48:99:aa:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:07:C9:BA:6A:3A:D4:22:69:65:F2:AD:89:24:43:C7:C9:FB:7F:FB
X509v3 Authority Key Identifier:
keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/3F50C060031811F19D968415183D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
185.254.240.0/24
194.246.40.0/22
213.139.233.0-213.139.234.255
Signature Algorithm: sha256WithRSAEncryption
53:cd:14:8b:bd:3c:47:b8:62:14:a0:a5:04:c2:63:23:68:83:
07:6d:cc:63:e4:cd:e8:1f:97:48:74:62:fe:04:c6:94:2f:97:
cf:16:28:b1:11:63:5b:e3:fb:50:c5:fa:41:83:86:48:95:73:
97:79:39:19:08:05:79:c2:1f:9b:55:e1:1a:b4:eb:bd:1f:72:
53:c4:90:d4:2c:4c:d4:1e:99:10:0a:c8:17:c2:bb:bc:3e:2d:
f9:56:ee:ef:9d:d9:38:7c:5d:fc:3a:68:d1:a7:dc:1b:bb:86:
2c:1f:96:fc:5d:95:9b:a2:35:bd:5b:ec:99:ef:4a:48:78:2a:
45:8c:e6:72:bf:dc:ac:3e:d4:95:1c:83:6f:d9:9b:dd:fa:73:
2b:6d:de:a0:db:ee:3d:51:fe:17:ec:75:77:e1:6b:aa:37:34:
a3:2d:23:b3:ea:ff:97:e1:74:78:92:58:30:8f:7c:88:02:75:
e5:34:65:1c:90:23:23:ea:7b:62:9b:e8:44:1f:b3:19:d9:70:
85:e2:b4:ba:47:d9:bb:37:db:79:ce:ed:bf:ca:2f:b9:4f:10:
0a:c1:94:9e:f5:ae:8e:e1:1a:3d:48:93:19:cd:28:cd:7a:c7:
af:c1:3c:37:34:a0:5f:6e:a2:4c:73:7d:68:19:5a:c4:20:17:
5a:d2:33:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:51:09 2026 by rpki-client