
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/344644CC1DC511EF95607948C4F9AE02.roa
File: 344644CC1DC511EF95607948C4F9AE02.roa (raw, json)
Hash identifier: zF+J5zFh1poif0hGxgEuq8x4MHnVNaCe2reoxnvlkL0=
Subject key identifier: 39:61:B6:48:BC:4C:2E:10:74:CC:FD:E8:F5:C4:BD:03:C7:C4:C0:64
Certificate issuer: /CN=A91A2F33/serialNumber=14E673C4A71DB34A756813587E48212DA2E77330
Certificate serial: 0A8C
Authority key identifier: 14:E6:73:C4:A7:1D:B3:4A:75:68:13:58:7E:48:21:2D:A2:E7:73:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/344644CC1DC511EF95607948C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:48:34 +0000
ROA not before: Wed 30 Apr 2025 19:58:55 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 140579
IP address blocks: 2001:df3:8380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.crl
rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2700 (0xa8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2F33, serialNumber=14E673C4A71DB34A756813587E48212DA2E77330
Validity
Not Before: Apr 30 19:58:55 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a42792-c211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:77:8b:02:1e:c2:f6:e1:ae:85:43:7a:74:
bd:ad:41:46:1f:21:e3:c5:34:2b:19:39:02:ae:8c:
3d:07:9f:93:15:97:a5:16:60:2f:96:21:40:5c:24:
c8:0b:53:38:46:14:66:67:f8:3e:dd:60:6d:55:52:
32:3e:15:5a:47:3e:b7:8f:8d:91:95:9f:1d:7a:82:
83:d2:37:ce:39:ca:aa:16:d3:87:0d:97:6c:6c:cc:
2f:24:c0:62:dc:af:db:65:62:8c:a6:fa:c6:47:5a:
b5:43:39:e6:a7:42:80:65:85:80:cd:50:6e:48:18:
54:6d:b3:53:b0:3e:38:6f:30:6f:60:14:ab:c4:a6:
82:ce:09:af:2b:4c:f0:75:5f:4e:5b:fa:b4:cf:0c:
c5:b6:da:6a:3a:94:11:00:71:1b:7e:ef:d8:66:7d:
bd:9c:64:21:e1:ee:46:28:9b:fe:11:05:f9:36:fe:
7e:c9:46:4a:d4:df:f5:4f:24:0e:3b:2b:be:7a:cc:
80:2a:65:00:5c:59:52:ee:f3:3f:0a:dd:23:fd:a5:
46:1a:59:45:e3:42:a8:eb:49:56:d7:b5:2e:71:9c:
5d:c8:57:9e:9c:7e:2e:76:6e:1c:ae:55:0f:fd:99:
96:a1:7c:24:41:f3:4e:f7:bd:16:3a:5c:e7:ed:83:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:61:B6:48:BC:4C:2E:10:74:CC:FD:E8:F5:C4:BD:03:C7:C4:C0:64
X509v3 Authority Key Identifier:
keyid:14:E6:73:C4:A7:1D:B3:4A:75:68:13:58:7E:48:21:2D:A2:E7:73:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/344644CC1DC511EF95607948C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:8380::/48
Signature Algorithm: sha256WithRSAEncryption
9e:3c:a2:34:79:b3:54:5a:07:8f:c5:1d:7b:08:91:5f:25:58:
4e:07:8b:22:12:d9:55:1a:f0:75:f9:dc:a6:f6:08:f8:9e:03:
d2:89:40:ee:6e:59:76:b9:ae:00:78:4e:37:95:a4:38:a8:54:
1b:f8:1a:78:47:81:9a:90:c5:3d:45:e7:ac:5e:1c:cd:52:f5:
f0:33:02:47:3c:30:45:19:4a:07:1f:45:fa:d3:ff:1b:1d:27:
29:83:66:06:be:9c:e7:9a:25:c6:c8:44:b3:53:9c:24:d2:11:
78:24:72:7f:cc:54:11:b4:ba:7d:47:99:cb:7b:8c:2f:08:9f:
63:e2:bc:fd:75:42:0b:c1:f2:f9:82:e0:e1:bf:ff:08:19:8b:
3b:88:34:52:e0:06:40:05:57:e5:52:56:f6:e6:12:b8:5f:b1:
c2:fc:37:3d:05:27:f4:17:2a:a3:88:14:6d:d1:66:7c:a5:ba:
10:2f:5b:52:82:a7:29:d6:e2:f3:00:8e:be:b7:91:38:8f:dc:
a7:3b:81:9d:ef:3a:b3:70:db:a0:c2:dc:7c:44:42:f6:0a:cc:
36:5c:9f:79:f3:d5:43:a1:e4:df:bf:ef:d9:b9:62:3c:ab:76:
b9:ec:32:e2:80:1a:f3:c6:e4:c5:05:e8:9d:f8:c6:78:a9:5c:
ca:f7:74:e4
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICCowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTJGMzMxMTAvBgNVBAUTKDE0RTY3M0M0QTcxREIzNEE3NTY4MTM1ODdFNDgyMTJE
QTJFNzczMzAwHhcNMjUwNDMwMTk1ODU1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Mjc5Mi1jMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqkJ3iwIewvbhroVDenS9rUFGHyHjxTQrGTkCrow9B5+TFZelFmAvliFAXCTI
C1M4RhRmZ/g+3WBtVVIyPhVaRz63j42RlZ8deoKD0jfOOcqqFtOHDZdsbMwvJMBi
3K/bZWKMpvrGR1q1Qznmp0KAZYWAzVBuSBhUbbNTsD44bzBvYBSrxKaCzgmvK0zw
dV9OW/q0zwzFttpqOpQRAHEbfu/YZn29nGQh4e5GKJv+EQX5Nv5+yUZK1N/1TyQO
Oyu+esyAKmUAXFlS7vM/Ct0j/aVGGllF40Ko60lW17UucZxdyFeenH4udm4crlUP
/ZmWoXwkQfNO970WOlzn7YPaHQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFDlhtki8
TC4QdMz96PXEvQPHxMBkMB8GA1UdIwQYMBaAFBTmc8SnHbNKdWgTWH5IIS2i53Mw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkYzMy9FNkVDMkQ5Mjgw
OTExMUVBQUJDREZGNkNDNEY5QUUwMi9GT1p6eEtjZHMwcDFhQk5ZZmtnaExhTG5j
ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZPWnp4S2NkczBwMWFCTllma2doTGFMbmN6QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTJGMzMvRTZFQzJEOTI4MDkxMTFFQUFCQ0RGRjZDQzRGOUFFMDIvMzQ0NjQ0Q0Mx
REM1MTFFRjk1NjA3OTQ4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN84OAMA0GCSqGSIb3DQEBCwUAA4IBAQCePKI0ebNUWgePxR17
CJFfJVhOB4siEtlVGvB1+dym9gj4ngPSiUDubll2ua4AeE43laQ4qFQb+Bp4R4Ga
kMU9ReesXhzNUvXwMwJHPDBFGUoHH0X60/8bHScpg2YGvpznmiXGyESzU5wk0hF4
JHJ/zFQRtLp9R5nLe4wvCJ9j4rz9dUILwfL5guDhv/8IGYs7iDRS4AZABVflUlb2
5hK4X7HC/Dc9BSf0FyqjiBRt0WZ8pboQL1tSgqcp1uLzAI6+t5E4j9ynO4Gd7zqz
cNugwtx8REL2Csw2XJ9589VDoeTfv+/ZuWI8q3a57DLigBrzxuTFBeid+MZ4qVzK
93Tk
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:06 2026 by rpki-client