
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/3F7E724808FA11F1B69E3FD3313D8C67.roa
File: 3F7E724808FA11F1B69E3FD3313D8C67.roa (raw, json)
Hash identifier: 4VW6RAno3y0GfbXAVymMa7lwcHpijLHhwRaIDmRY9yo=
Subject key identifier: BE:11:C8:CB:BB:54:BA:86:D8:DF:29:AF:D6:BF:72:8F:36:AF:B8:5C
Certificate issuer: /CN=A919DB08/serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828
Certificate serial: 0F
Authority key identifier: 23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/3F7E724808FA11F1B69E3FD3313D8C67.roa
Signing time: Sun 01 Mar 2026 05:36:24 +0000
ROA not before: Fri 13 Feb 2026 16:37:54 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 8075
IP address blocks: 137.132.48.0/24 maxlen: 24
137.132.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl
rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DB08, serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828
Validity
Not Before: Feb 13 16:37:54 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3d057-71ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:90:21:88:89:76:d8:29:1f:c9:c1:33:bb:3a:
02:16:b1:15:74:44:a1:95:b3:56:7d:2c:22:3e:88:
d7:6d:d5:ed:8c:5c:d6:09:dc:7c:62:d8:98:0d:f0:
f9:1f:09:41:5b:61:ad:65:37:c2:80:d3:4b:de:b0:
e9:54:b4:a1:12:af:5c:af:c7:ce:be:df:c2:65:f3:
22:11:39:76:10:e8:9a:89:fa:d5:e8:c9:3a:74:4f:
60:fb:cf:86:75:63:2f:62:58:2b:1d:b2:9d:3e:78:
b8:78:33:4c:ed:80:1f:25:d1:99:8e:49:81:82:2e:
aa:c4:18:2e:0d:12:20:88:bc:86:e9:6f:1c:c5:40:
86:55:e9:2d:7d:65:1d:38:49:35:64:6f:db:0a:47:
19:0f:9c:08:f7:b0:79:b2:27:60:09:f9:20:15:69:
07:86:b9:44:80:f7:1e:f9:ca:fc:1e:a6:b5:43:cd:
7b:5e:35:b9:aa:bd:ac:c6:05:d5:ae:69:f8:09:e6:
b1:dd:70:71:9e:8e:76:8a:63:38:64:33:27:d5:ef:
e2:65:08:2e:20:fa:6b:15:31:89:20:5c:48:47:0a:
ea:55:6c:90:32:4e:15:12:34:54:33:61:2a:a9:d7:
02:e9:ab:05:34:70:7c:ea:f9:3b:2e:d6:1a:8f:ba:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:11:C8:CB:BB:54:BA:86:D8:DF:29:AF:D6:BF:72:8F:36:AF:B8:5C
X509v3 Authority Key Identifier:
keyid:23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/3F7E724808FA11F1B69E3FD3313D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
137.132.48.0/23
Signature Algorithm: sha256WithRSAEncryption
20:9f:2d:4d:ad:9f:cc:28:9b:e4:7b:25:db:2e:f4:f7:15:7d:
c5:d1:97:8f:41:95:2f:89:15:ab:ad:e5:7a:e6:97:44:f6:2c:
31:c6:53:61:3e:a7:7d:38:df:76:db:3b:04:63:a7:d7:cc:59:
20:0f:f6:aa:9e:88:45:02:b3:71:d6:10:1a:9d:fd:3c:a3:89:
51:b4:de:f8:10:57:52:f4:07:2b:17:37:ce:45:89:40:ec:bb:
a0:2f:5e:32:82:c5:de:9e:cb:c8:d6:63:f0:3f:2a:f4:c1:9c:
d8:d1:dc:85:fb:6b:8f:cd:48:c1:44:09:4f:59:a8:06:d0:91:
d7:b3:e8:bc:e6:a6:db:31:79:68:b8:1c:f2:8d:80:d6:7a:2f:
b7:26:95:96:26:58:7e:91:c8:8f:65:79:f9:ad:25:93:bf:39:
90:bf:c8:f4:b3:92:77:b2:7b:e6:1e:73:ae:25:37:e6:8f:9b:
6c:90:8b:75:0c:dc:4b:f9:ac:ca:a1:3f:ba:87:14:2a:0f:9d:
14:17:d1:c6:ee:e8:b3:b1:ff:3f:f1:15:84:a1:ba:4f:c4:46:
a4:e4:e3:74:9f:08:d0:4a:da:92:71:9f:02:9d:ad:f7:98:fd:
20:4f:1f:8f:68:b3:be:5e:04:7d:fd:4f:b1:73:6e:ce:b2:2c:
05:50:ee:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:26 2026 by rpki-client