
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F3DC1FD08C5611E792848B4AC4F9AE02.roa
File: F3DC1FD08C5611E792848B4AC4F9AE02.roa (raw, json)
Hash identifier: j51cLfGITBXR/xee14Rv6rfJpCWZzT3Rfl0VvL2R5/I=
Subject key identifier: A5:3E:04:37:19:B2:00:A5:B0:C1:BE:B3:04:CD:37:13:D1:63:75:C3
Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial: 28A7
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F3DC1FD08C5611E792848B4AC4F9AE02.roa
Signing time: Tue 31 Mar 2026 16:20:11 +0000
ROA not before: Tue 31 Mar 2026 16:20:11 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 24451
IP address blocks: 58.71.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10407 (0x28a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Validity
Not Before: Mar 31 16:20:11 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cbf43b-2295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:fd:c1:86:8c:6b:1a:e4:6c:56:68:13:4c:
76:e4:99:d8:58:4a:a8:77:00:be:26:20:2a:88:6c:
1c:9d:f3:86:11:01:78:f3:67:18:a6:a2:30:d1:be:
d1:5c:5d:85:b4:81:59:1c:ee:13:14:ca:61:eb:9e:
d4:8c:f3:d4:08:d9:e0:9a:92:74:c6:2d:4f:b4:2d:
4c:33:fe:bc:6b:ab:a0:79:43:57:cd:a4:51:c4:02:
37:f8:40:d9:82:9a:ff:bd:91:fb:cc:5a:b3:6e:c2:
94:76:36:92:5e:bc:f5:f0:11:d5:a0:7b:26:57:d0:
3f:a9:8e:a5:1c:4b:b4:1a:d8:ee:27:b1:6e:cf:50:
e0:53:9e:89:4d:a1:8e:7f:d6:16:85:2e:1a:df:0c:
98:d6:3f:62:3d:ad:90:e3:01:cf:55:d6:64:d6:d8:
ab:c5:4f:5f:50:9a:f4:8d:bf:db:91:83:86:bc:86:
9a:82:84:6d:a5:12:d5:67:25:fb:bc:29:2b:3d:ce:
a0:41:4b:d8:b8:6c:ac:0c:f9:ee:80:e5:74:2d:ab:
62:23:2b:e7:01:93:cb:45:e7:51:a3:3d:ce:66:86:
22:66:ba:9f:9e:97:67:45:a1:88:1c:90:a3:b9:b0:
de:83:5b:04:2a:33:7f:0b:06:d7:13:a1:e1:6e:50:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3E:04:37:19:B2:00:A5:B0:C1:BE:B3:04:CD:37:13:D1:63:75:C3
X509v3 Authority Key Identifier:
keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F3DC1FD08C5611E792848B4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.71.71.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9d:16:21:1c:ca:bf:68:5f:50:1f:d9:64:48:c1:19:0b:fb:
ec:25:c5:30:ba:c7:d1:c4:b7:eb:91:c6:af:df:f7:18:90:bb:
72:6d:5f:cb:1b:86:0c:9a:08:89:4b:e7:97:61:47:16:33:69:
be:50:43:44:3f:80:55:f0:ee:74:99:da:27:74:53:06:1e:e5:
88:66:25:e6:2f:cf:c3:19:6c:8e:da:4a:48:b8:33:26:23:f8:
b3:21:32:c7:35:7f:4b:c9:1d:26:b0:aa:55:d4:be:4e:7f:54:
32:11:bf:dd:9c:93:18:f8:15:da:60:32:07:57:c9:53:79:bd:
a3:cb:f8:f5:db:14:88:39:dd:35:91:be:09:c5:fd:d5:ee:3c:
6a:29:93:4d:2d:74:58:c5:74:37:6b:ea:15:c5:d0:b9:2a:ac:
6c:db:11:14:71:b3:b9:29:07:2d:e2:a5:87:51:f8:eb:4d:15:
f4:a7:4b:f6:75:fc:f5:53:a2:b4:5d:5c:66:3a:53:ba:00:8f:
15:67:73:98:6e:cc:b7:dc:df:d5:95:fe:a8:1e:6d:1b:24:c9:
2f:d5:f4:60:62:6b:cd:39:4d:4b:cf:85:e2:c4:fc:ab:58:92:
f3:20:9c:8a:98:fd:93:01:ce:8d:f1:31:90:90:ed:c9:f8:23:
63:59:a0:27
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICKKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw
NDU5MjhBQjgwHhcNMjYwMzMxMTYyMDExWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNiZjQzYi0yMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAngb9wYaMaxrkbFZoE0x25JnYWEqodwC+JiAqiGwcnfOGEQF482cYpqIw0b7R
XF2FtIFZHO4TFMph657UjPPUCNngmpJ0xi1PtC1MM/68a6ugeUNXzaRRxAI3+EDZ
gpr/vZH7zFqzbsKUdjaSXrz18BHVoHsmV9A/qY6lHEu0GtjuJ7Fuz1DgU56JTaGO
f9YWhS4a3wyY1j9iPa2Q4wHPVdZk1tirxU9fUJr0jb/bkYOGvIaagoRtpRLVZyX7
vCkrPc6gQUvYuGysDPnugOV0LatiIyvnAZPLRedRoz3OZoYiZrqfnpdnRaGIHJCj
ubDeg1sEKjN/CwbXE6HhblAJUQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKU+BDcZ
sgClsMG+swTNNxPRY3XDMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz
OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvRjNEQzFGRDA4
QzU2MTFFNzkyODQ4QjRBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAOkdHMA0GCSqGSIb3DQEBCwUAA4IBAQAOnRYhHMq/aF9QH9lkSMEZ
C/vsJcUwusfRxLfrkcav3/cYkLtybV/LG4YMmgiJS+eXYUcWM2m+UENEP4BV8O50
mdondFMGHuWIZiXmL8/DGWyO2kpIuDMmI/izITLHNX9LyR0msKpV1L5Of1QyEb/d
nJMY+BXaYDIHV8lTeb2jy/j12xSIOd01kb4Jxf3V7jxqKZNNLXRYxXQ3a+oVxdC5
Kqxs2xEUcbO5KQct4qWHUfjrTRX0p0v2dfz1U6K0XVxmOlO6AI8VZ3OYbsy33N/V
lf6oHm0bJMkv1fRgYmvNOU1Lz4XixPyrWJLzIJyKmP2TAc6N8TGQkO3J+CNjWaAn
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:37:43 2026 by rpki-client