
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/3FE8CD1051B111F0932E1173C4F9AE02.roa
File: 3FE8CD1051B111F0932E1173C4F9AE02.roa (raw, json)
Hash identifier: mMQnIMnHxyxrtTIwTqaDefb9F/Y/eYhRGnrXlUtgbk0=
Subject key identifier: 2F:8B:DE:26:78:81:7B:AA:70:C7:11:3D:00:D4:C8:C2:30:8C:F1:23
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 06A0
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/3FE8CD1051B111F0932E1173C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:42:44 +0000
ROA not before: Wed 25 Jun 2025 10:43:37 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153726
IP address blocks: 123.253.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1696 (0x6a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Validity
Not Before: Jun 25 10:43:37 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a47a94-dd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:64:ba:d3:70:63:3a:af:c0:61:1b:1b:ea:
e9:9c:a2:95:6a:87:01:c2:d2:5a:cb:cf:ec:ca:8c:
5d:cf:6b:e1:5f:d2:66:61:e8:47:77:16:7b:64:0b:
22:9f:ad:b3:f2:06:c7:c1:65:b0:2a:a6:9e:52:b4:
e3:73:97:cb:2f:f2:8b:18:1f:1b:18:14:ff:1c:f5:
9e:f1:d4:81:bb:81:db:e1:0d:cd:84:af:14:2a:66:
fc:86:57:8d:69:88:9d:99:a7:2d:e6:50:0c:2b:7a:
28:e8:25:13:d6:43:1c:c2:aa:f1:c5:4d:cf:05:30:
a3:a1:d1:58:15:50:b1:68:d1:46:5d:e4:31:23:c1:
5b:02:e8:d9:44:b2:f4:88:60:0d:31:cb:ae:9f:f9:
23:6e:8a:65:e0:38:5a:ba:4a:ea:3f:c9:6f:64:50:
86:19:a7:fa:60:32:83:ed:19:ec:8f:22:bb:c9:e0:
d7:32:94:65:cc:c4:37:80:b7:39:e4:05:0f:7b:fe:
81:7f:cd:25:9d:f0:e9:96:0a:74:41:84:1b:c8:ae:
f1:dd:14:48:58:d8:c7:26:fd:bd:44:e7:03:57:88:
b8:cd:ce:f0:a2:98:d8:21:75:8b:79:c6:5c:91:48:
55:16:dc:e7:c9:11:ce:72:7b:ad:2f:76:a8:a4:af:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:DE:26:78:81:7B:AA:70:C7:11:3D:00:D4:C8:C2:30:8C:F1:23
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/3FE8CD1051B111F0932E1173C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.253.226.0/24
Signature Algorithm: sha256WithRSAEncryption
96:11:3d:21:9e:ed:c5:e1:79:29:0a:79:4c:e7:61:8a:0f:83:
ee:e2:17:cb:5f:93:d8:d8:31:8f:db:48:60:1b:1f:aa:1c:17:
cf:e2:95:e5:7d:7e:f1:b8:8f:e3:0e:78:47:8b:83:4a:0b:98:
15:ff:ba:9d:5d:f1:f0:b7:ae:7f:9b:be:81:42:62:75:23:cf:
43:af:bf:13:04:27:87:eb:0e:f2:d1:a6:54:1c:8f:25:8e:d6:
08:74:e1:b1:04:51:cd:52:49:b0:b9:82:39:bc:8d:f5:36:95:
b1:8d:09:3f:53:69:82:3b:eb:99:00:79:73:dd:c7:01:b5:c1:
ed:a5:47:34:f6:d9:3a:e8:46:29:d6:4b:8a:09:3c:4b:cf:52:
f4:0e:87:d9:8e:73:f6:0e:70:1d:4e:06:ba:b1:cb:2a:87:82:
ad:2c:c1:a7:4f:4d:e8:57:22:6a:63:95:2c:01:3c:a2:29:4e:
b4:ab:e1:fb:4c:7c:f9:0a:24:65:43:b0:9c:ef:db:23:f2:63:
b2:ef:e5:f3:f0:d2:ad:7a:08:a6:8e:30:2a:75:c4:21:6c:ca:
51:df:bd:85:3c:7a:90:09:60:d0:2c:08:4a:8f:54:48:4d:4e:
17:2f:69:3a:a5:65:e9:fe:38:e4:95:32:29:cd:26:e0:24:6c:
82:73:06:b8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG
MDVCQUYyMTEwHhcNMjUwNjI1MTA0MzM3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2E5NC1kZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtslkutNwYzqvwGEbG+rpnKKVaocBwtJay8/syoxdz2vhX9JmYehHdxZ7ZAsi
n62z8gbHwWWwKqaeUrTjc5fLL/KLGB8bGBT/HPWe8dSBu4Hb4Q3NhK8UKmb8hleN
aYidmact5lAMK3oo6CUT1kMcwqrxxU3PBTCjodFYFVCxaNFGXeQxI8FbAujZRLL0
iGANMcuun/kjbopl4DhaukrqP8lvZFCGGaf6YDKD7RnsjyK7yeDXMpRlzMQ3gLc5
5AUPe/6Bf80lnfDplgp0QYQbyK7x3RRIWNjHJv29ROcDV4i4zc7wopjYIXWLecZc
kUhVFtznyRHOcnutL3aopK+fsQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC+L3iZ4
gXuqcMcRPQDUyMIwjPEjMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE
MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTc3NjEvMEU0QjkxNjhCRDM0MTFFQjkwRTU1NDI4QzRGOUFFMDIvM0ZFOENEMTA1
MUIxMTFGMDkzMkUxMTczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAe/3iMA0GCSqGSIb3DQEBCwUAA4IBAQCWET0hnu3F4XkpCnlM52GK
D4Pu4hfLX5PY2DGP20hgGx+qHBfP4pXlfX7xuI/jDnhHi4NKC5gV/7qdXfHwt65/
m76BQmJ1I89Dr78TBCeH6w7y0aZUHI8ljtYIdOGxBFHNUkmwuYI5vI31NpWxjQk/
U2mCO+uZAHlz3ccBtcHtpUc09tk66EYp1kuKCTxLz1L0DofZjnP2DnAdTga6scsq
h4KtLMGnT03oVyJqY5UsATyiKU60q+H7THz5CiRlQ7Cc79sj8mOy7+Xz8NKtegim
jjAqdcQhbMpR372FPHqQCWDQLAhKj1RITU4XL2k6pWXp/jjklTIpzSbgJGyCcwa4
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:20 2026 by rpki-client