
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/3E3F56AE602C11EF82BEF23FC4F9AE02.roa
File: 3E3F56AE602C11EF82BEF23FC4F9AE02.roa (raw, json)
Hash identifier: ljpaK6h7Qu+yD69fQT6FR9miFJ6+BwcWJUtP4CX4HzM=
Subject key identifier: 29:9B:61:6B:28:C4:C0:36:E6:8C:B5:F0:9C:DF:B4:9F:8F:04:9A:5E
Certificate issuer: /CN=A91A1E13/serialNumber=C3AEAC96EDB28C288DD7A5500B512985F1DA3714
Certificate serial: 0700
Authority key identifier: C3:AE:AC:96:ED:B2:8C:28:8D:D7:A5:50:0B:51:29:85:F1:DA:37:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/3E3F56AE602C11EF82BEF23FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:04:54 +0000
ROA not before: Tue 02 Dec 2025 21:25:54 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 50605
IP address blocks: 218.251.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.crl
rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1E13, serialNumber=C3AEAC96EDB28C288DD7A5500B512985F1DA3714
Validity
Not Before: Dec 2 21:25:54 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a471b6-b8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3b:bb:73:e1:c2:b1:8b:d4:48:9e:99:59:e3:
69:73:79:7f:ae:cf:d4:64:03:f4:fb:fe:91:2b:01:
d6:1c:8b:f9:f9:9a:0d:c0:7b:49:df:63:71:a3:aa:
3f:99:40:ac:0b:24:2c:f9:9a:b7:ce:ef:3c:03:31:
a8:f4:47:2f:c3:46:99:c2:70:5e:29:36:65:2e:0a:
f8:b5:06:82:3f:18:f6:a8:7e:33:55:9c:87:8f:a4:
1c:bf:53:87:77:2f:f3:57:a5:71:71:9e:15:a9:8f:
01:2a:9f:b6:61:0f:a5:48:e4:cf:1a:9d:ce:64:22:
3c:fb:61:52:f0:04:dc:4a:bc:81:2c:d9:5c:3c:1a:
94:e0:c4:e6:91:8f:d4:cd:08:78:77:9f:ef:e2:49:
9d:81:78:eb:53:45:44:95:8a:16:7c:14:a1:87:ea:
36:7a:40:39:19:d1:7d:ae:69:5e:40:ca:c3:c6:10:
15:e0:97:0f:b0:0b:3f:61:ca:19:98:35:37:ff:03:
b2:92:fa:87:72:f8:a9:8f:d3:dd:01:fc:29:2f:12:
95:4a:8b:36:4c:f7:ca:8d:fa:26:06:07:d7:d6:37:
76:78:3a:b3:5b:12:a2:0e:28:7d:f4:d8:8d:19:2c:
d2:d1:5a:f5:2d:db:e1:de:b1:27:35:11:92:71:28:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9B:61:6B:28:C4:C0:36:E6:8C:B5:F0:9C:DF:B4:9F:8F:04:9A:5E
X509v3 Authority Key Identifier:
keyid:C3:AE:AC:96:ED:B2:8C:28:8D:D7:A5:50:0B:51:29:85:F1:DA:37:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/3E3F56AE602C11EF82BEF23FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
218.251.220.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:df:52:22:59:35:0b:af:91:7f:66:49:95:43:ca:b3:38:da:
15:af:55:02:73:9d:3c:93:b8:51:0c:0e:62:a2:58:d1:3b:47:
01:3e:27:ea:a3:44:a2:4e:38:03:42:8d:54:4c:b0:75:78:8a:
32:b6:ed:4f:45:60:12:69:f5:5b:58:f4:9c:76:ed:a5:fc:46:
70:3f:89:43:a2:4c:d3:c6:01:b4:74:7c:87:69:00:5d:51:c6:
bb:fc:65:20:91:53:7f:8b:e6:0e:d4:9f:b7:d5:63:c6:e7:9c:
12:e9:34:32:fd:84:fa:ec:72:bd:4b:d6:e5:a1:53:05:08:34:
42:8d:42:9c:30:67:1d:e1:92:84:55:73:31:98:30:bd:a6:4f:
84:a8:d9:64:af:05:2e:f6:c8:46:41:31:cb:79:9c:86:10:d2:
ea:9e:c7:1d:be:c1:a4:45:ee:b8:09:c6:d0:07:69:75:ac:42:
57:73:c4:5e:0f:2c:8f:34:87:e7:04:d7:b9:5b:ae:c5:68:7e:
0b:61:25:d0:6a:c7:55:f7:e6:3d:e0:77:fe:6b:33:a5:d0:4d:
43:fd:51:a2:b9:e1:ed:e4:38:8c:72:b4:ee:21:3b:ed:7c:57:
d6:98:84:62:8b:3b:d7:50:2c:48:d5:9b:cd:2c:17:a9:92:8e:
e9:73:d5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:12 2026 by rpki-client