
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/3EA78B421D0B11F08389C829C4F9AE02.roa
File: 3EA78B421D0B11F08389C829C4F9AE02.roa (raw, json)
Hash identifier: UpXQLmw7cYNYgQoy2FdAYqD1shDQWt+tw0L6PWQgH4Y=
Subject key identifier: 61:34:C6:B3:09:2E:70:CF:79:A7:79:31:41:E8:A8:3C:4E:35:6E:35
Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
Certificate serial: 01AA
Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/3EA78B421D0B11F08389C829C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:06:36 +0000
ROA not before: Wed 03 Dec 2025 02:34:33 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 151354
IP address blocks: 210.79.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl
rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
Validity
Not Before: Dec 3 02:34:33 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a439dc-ac3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:52:41:c9:4e:53:07:6e:47:73:24:7a:ac:f9:
1c:3b:53:37:f5:70:61:3d:13:37:01:dc:b6:79:b9:
37:10:92:97:ed:af:22:c4:bf:23:ac:ed:ec:a3:1d:
ee:fc:c8:10:24:8d:b2:d1:41:de:53:e4:92:0a:7b:
f8:17:1b:a7:e9:27:19:fe:7d:35:59:89:a7:7b:86:
b5:39:ba:38:5d:5e:7d:3b:3e:2e:37:3e:2e:82:5b:
19:c6:5f:ea:82:db:99:43:eb:70:a7:84:1f:41:8b:
05:f5:70:a8:51:ad:69:ca:61:fe:06:12:55:7e:69:
7c:92:a2:0f:b3:89:34:8f:0a:42:6b:78:b5:e2:21:
00:e0:61:c1:45:ea:3e:aa:59:4b:ea:5b:33:85:70:
a0:57:37:3b:19:86:0c:87:10:eb:c3:5b:2e:23:fa:
a0:89:b8:b3:72:68:ca:4e:43:db:40:6d:a8:87:90:
15:bf:58:42:ab:77:b7:8f:a9:16:75:be:86:79:73:
92:55:2f:0d:27:4a:65:43:b7:c5:89:ac:ab:8b:ba:
ad:6a:42:a0:07:dd:ab:bd:b5:ed:07:60:0b:67:3e:
17:8f:3f:f7:20:33:2c:a3:06:27:1c:eb:b7:98:4f:
06:1c:5c:d0:10:83:aa:9e:c6:39:8c:87:b5:f1:12:
61:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:34:C6:B3:09:2E:70:CF:79:A7:79:31:41:E8:A8:3C:4E:35:6E:35
X509v3 Authority Key Identifier:
keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/3EA78B421D0B11F08389C829C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.79.179.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:3f:3a:ce:cb:4c:6e:86:f8:68:8d:ca:b7:3b:4d:f8:32:d1:
a7:8b:b2:ae:53:37:c1:29:fc:ed:c0:4c:fa:de:bf:37:b0:2f:
5d:13:cb:8e:8f:4d:2f:56:5b:5f:5b:a1:d4:65:b1:e3:8b:40:
be:61:1d:db:d9:89:c9:c4:98:f7:68:25:70:52:0e:06:d1:4a:
b8:23:cd:41:6c:c4:41:64:89:d8:0d:e8:1e:ef:14:e1:38:c3:
b1:4e:b2:66:50:da:63:41:18:4f:cc:8c:ba:8d:f1:f1:99:ab:
c7:99:f5:99:c4:15:ed:b5:54:6b:3c:8f:85:6c:db:83:c8:b5:
3d:3a:38:66:5a:10:30:28:70:5a:62:84:bd:0d:fb:65:22:c4:
3b:fe:55:10:90:e6:5f:76:25:53:6b:15:53:fe:c1:85:46:4e:
0c:69:67:16:0a:55:cc:cb:01:b6:09:17:56:e6:6c:3c:c4:ae:
c3:9b:d8:bc:ae:6b:7f:d2:4c:87:b8:6c:48:55:91:31:d4:64:
55:87:1d:95:2b:55:88:6c:68:17:b3:37:0a:c3:f1:42:b3:5e:
80:1f:70:cc:85:17:ec:9c:3f:58:ee:fc:23:8b:f5:36:e5:9a:
07:2c:93:55:e6:e4:b4:1f:56:f6:d4:e3:4b:86:23:f5:88:f5:
32:70:17:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:47:53 2026 by rpki-client