
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/C3F53A0654F011E7BE4A6431C4F9AE02.roa
File: C3F53A0654F011E7BE4A6431C4F9AE02.roa (raw, json)
Hash identifier: QVg7IcJ6NSx06X4qAnqppvTi4+Hmlx/WcbnAXz16lOU=
Subject key identifier: C8:21:D3:7E:14:5D:3D:93:D8:26:54:81:80:62:CE:46:C8:3D:D2:AD
Certificate issuer: /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D
Certificate serial: 3170
Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/C3F53A0654F011E7BE4A6431C4F9AE02.roa
Signing time: Thu 04 Jun 2026 16:17:27 +0000
ROA not before: Thu 04 Jun 2026 16:17:27 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 32934
IP address blocks: 45.64.40.0/22 maxlen: 24
103.4.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl
rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12656 (0x3170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1A37, serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D
Validity
Not Before: Jun 4 16:17:27 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21a517-f27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:c6:bd:d5:77:7b:f3:3a:c9:7f:56:95:99:
68:5b:d5:d2:8a:02:2d:09:a5:0d:2f:78:87:f2:b7:
db:ec:8c:73:e4:8d:fe:d8:a7:0d:cb:60:ac:fc:59:
0a:a0:be:67:3d:f1:92:cd:0b:f6:0d:bf:03:54:c3:
00:41:9c:3a:24:b1:b0:cd:42:7f:9b:92:6c:f0:96:
e9:d0:79:a4:2a:6c:8a:17:a2:97:5f:5b:87:b6:ac:
96:af:6d:8d:d4:d4:66:94:73:08:9d:15:70:17:e5:
fc:25:0a:c8:20:95:18:8a:c1:9e:0f:3d:f4:06:cd:
cf:f2:f6:1d:3d:71:11:a0:7b:c0:5b:34:76:55:2c:
77:40:15:1b:67:40:04:ff:9e:96:a0:1c:62:15:b8:
a9:f3:a8:7a:6d:27:16:0f:25:ae:90:57:a4:79:5a:
62:e2:f8:68:c1:d4:f8:4d:64:2f:b1:df:af:51:5a:
a0:4e:4a:79:0d:64:26:ac:39:88:fd:60:e8:e3:8a:
76:b7:10:72:24:56:69:b3:93:b6:7d:97:f9:06:97:
b5:f7:6b:80:c2:b9:fa:ba:3b:36:13:67:87:51:c2:
a5:29:77:46:e9:85:3a:cf:c4:96:a9:91:91:d0:05:
8e:5a:83:1d:34:4b:97:30:9d:d2:35:66:9f:86:d1:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:21:D3:7E:14:5D:3D:93:D8:26:54:81:80:62:CE:46:C8:3D:D2:AD
X509v3 Authority Key Identifier:
keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/C3F53A0654F011E7BE4A6431C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.64.40.0/22
103.4.96.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:5c:36:9a:7a:0b:d3:e6:34:9f:55:36:5d:7f:20:ff:a5:5f:
2e:f6:a7:b7:15:e8:3e:a5:84:c6:e3:ec:f9:37:ab:d1:93:15:
ac:54:78:9f:71:ec:08:55:36:15:52:19:e9:fc:fb:bc:ec:a4:
cf:ba:84:92:95:09:e8:19:77:ab:b3:7b:15:5a:27:bb:0e:70:
d3:cf:50:a2:51:08:ba:0e:1f:e1:7b:82:1c:23:26:a0:16:47:
92:b0:5a:47:f3:62:a3:1d:26:59:4f:16:62:cc:c9:bd:12:df:
85:f9:99:4c:a5:c5:b0:e1:ce:54:90:89:1c:30:ff:b0:39:84:
f7:e7:49:be:ff:a5:4f:bd:cc:27:38:2d:f5:f6:f0:8c:66:8b:
dd:38:d5:57:f1:93:2f:52:5b:4e:2e:8a:c3:ff:a9:e0:14:cf:
03:c8:ce:d7:bd:04:53:6d:1b:ce:c5:f6:26:8e:62:54:ab:16:
e4:04:05:d8:60:b5:5e:da:18:28:0b:c9:5a:34:b6:4e:67:b7:
da:b8:26:22:69:7c:f3:e5:f6:11:ed:7d:90:ec:72:df:79:7b:
cd:7b:41:46:7c:55:95:ab:66:37:50:fd:7f:8b:c4:c4:75:ff:
da:af:db:98:e3:97:ac:a0:c0:64:ef:a1:a1:b8:00:f4:4c:79:
b6:ed:ad:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:06:48 2026 by rpki-client