
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/3F69EB4C1D0B11F08389C829C4F9AE02.roa
File: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (raw, json)
Hash identifier: 4YSK+iaPKx3acIazhk09lsImhU6+yUHomcj+4pCQSC4=
Subject key identifier: 32:B2:A2:3A:44:EF:BF:4F:90:1D:A2:80:72:B0:5C:9E:32:02:AD:BF
Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
Certificate serial: 01AB
Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/3F69EB4C1D0B11F08389C829C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:06:37 +0000
ROA not before: Wed 03 Dec 2025 02:34:34 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152141
IP address blocks: 210.79.178.0/24 maxlen: 24
2001:df3:39c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl
rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
Validity
Not Before: Dec 3 02:34:34 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a439dd-1342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:34:18:e7:8f:9f:d1:7f:1d:c4:1d:82:8c:23:
43:24:21:1e:e0:f2:e7:92:52:4c:2b:e3:44:f4:41:
28:2e:c1:65:23:39:a4:56:23:54:89:7d:15:bb:64:
b2:9e:c0:99:84:5d:bf:74:4e:78:51:6b:1e:91:30:
e2:a7:cb:e0:c6:5a:44:b1:1c:6f:d6:2b:c8:3b:dc:
04:a2:63:35:04:8b:96:51:c5:4d:7c:cb:73:1e:13:
b8:92:3a:0a:1e:c9:fd:98:01:78:ba:07:e2:19:2f:
c3:59:52:36:8d:27:08:86:03:02:5f:27:73:d6:58:
09:a2:d3:30:54:54:02:43:4f:ea:47:d2:c9:32:0f:
6d:90:dc:13:b9:c5:a6:60:19:50:70:14:e7:32:75:
cb:42:00:e4:50:16:b5:ff:36:38:77:89:de:d5:da:
f0:63:bc:12:c0:e5:50:da:6e:da:7a:88:3d:64:d1:
d8:0e:96:4e:46:18:30:17:dd:ff:3c:e0:dd:f6:a1:
45:38:ff:37:16:a4:cd:36:21:f9:32:db:f5:4d:a3:
d8:c2:dd:7d:ea:db:97:31:f2:69:61:0a:b0:42:2c:
d0:01:73:a3:b2:38:34:5a:5d:36:9a:c7:4e:49:a5:
55:9a:03:ec:d5:9c:63:dd:aa:f4:1e:88:df:9e:9e:
39:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:A2:3A:44:EF:BF:4F:90:1D:A2:80:72:B0:5C:9E:32:02:AD:BF
X509v3 Authority Key Identifier:
keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/3F69EB4C1D0B11F08389C829C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.79.178.0/24
IPv6:
2001:df3:39c0::/48
Signature Algorithm: sha256WithRSAEncryption
48:9d:e3:44:a5:67:d1:58:74:28:e7:44:81:1b:b6:ba:b5:ac:
33:d6:66:04:ba:d1:df:a2:1c:41:02:1e:aa:78:c6:9d:b8:9b:
7c:48:e0:2e:e5:2b:75:34:30:5a:3b:86:96:f5:7f:3b:15:f8:
ad:b4:00:c8:a7:72:5b:3a:d5:49:4f:e3:e2:59:67:b1:4f:e6:
2a:77:f3:ea:d7:3f:48:f0:72:8e:b7:44:e2:b0:df:27:e5:4d:
fc:b0:b6:57:88:91:66:1d:e7:78:e5:82:86:a2:48:c4:d9:c8:
b2:ff:48:8a:25:c5:6b:7c:13:0d:c1:d0:6b:83:9a:fe:a4:59:
7b:bf:1d:f7:1b:92:09:3c:4f:f7:44:56:21:10:86:f0:ed:72:
3a:2a:0c:c1:68:76:90:3e:d8:4d:16:60:83:05:fa:9a:90:0d:
6b:81:d6:9a:4c:df:86:a7:74:b0:4b:48:52:3f:f0:8a:df:9b:
84:70:8a:a8:75:9b:c5:ed:96:3c:db:89:c2:af:99:a4:07:f4:
98:36:db:63:c3:d4:4c:4b:17:4a:77:37:c7:8b:1c:12:60:51:
6f:c1:84:67:63:a2:57:6c:47:16:34:c4:a8:d7:bd:f5:8c:0c:
21:31:55:f0:81:f8:6f:41:16:71:ea:d9:46:f6:9b:a6:66:a4:
ff:e0:08:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:40 2026 by rpki-client