
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/312AAAD4BB7E11E9AFB49C42C4F9AE02.roa
File: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (raw, json)
Hash identifier: 3fQDm2jeysKhuzTVURmMD9MPV9CFwH61PGLvGKQJOew=
Subject key identifier: BD:9D:1A:4D:F9:F2:A1:E5:48:EF:0E:73:9C:8C:81:4F:6B:90:FE:DA
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 375F
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/312AAAD4BB7E11E9AFB49C42C4F9AE02.roa
Signing time: Sun 04 Oct 2026 15:18:31 +0000
ROA not before: Sun 04 Oct 2026 15:18:31 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 45177
IP address blocks: 2403:cc00:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 14:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14175 (0x375f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Oct 4 15:18:31 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac26e47-93a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:0f:fe:dc:2e:d0:2c:54:60:46:e5:7a:96:
13:68:be:92:bc:7c:db:f0:f9:e6:b0:39:8a:0e:2f:
40:44:3d:58:cb:73:fc:21:75:a3:c5:79:3c:35:80:
0c:38:aa:22:8c:73:0b:8f:52:32:d8:9a:c3:de:db:
5a:19:a3:22:e3:56:11:dd:3c:85:95:f9:cc:1d:0a:
f3:9b:f8:5c:39:b9:8d:8e:00:44:bb:0e:67:ba:79:
28:ad:15:e8:79:02:88:9f:71:be:8c:f2:26:9a:ad:
70:d8:fb:63:7e:26:8e:38:ec:d1:76:18:e8:8a:26:
39:91:ca:cb:28:7e:fc:85:5d:ff:f8:7b:5b:15:e2:
84:43:05:24:d5:db:19:6e:a7:fb:c0:76:ba:dd:a3:
9c:34:21:6d:44:68:5f:c4:a3:9a:f7:12:b3:8a:89:
f3:5f:57:27:39:f4:fb:6b:a4:d0:09:64:b3:7e:5b:
65:5d:33:c6:62:de:a9:c6:4f:25:db:44:06:91:1a:
eb:0a:0c:3a:17:81:be:05:09:7e:59:c9:c5:24:a2:
37:e4:88:25:f6:dc:8a:a3:fe:ad:3f:ff:1d:a9:a9:
26:61:44:e6:b8:fd:8a:fa:e4:6b:a4:83:b8:9a:7b:
a3:0f:81:ba:fe:62:a2:39:9c:79:37:20:63:0f:c3:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9D:1A:4D:F9:F2:A1:E5:48:EF:0E:73:9C:8C:81:4F:6B:90:FE:DA
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/312AAAD4BB7E11E9AFB49C42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:cc00:4000::/36
Signature Algorithm: sha256WithRSAEncryption
10:01:18:db:9b:7e:0b:c4:da:a8:d1:e8:6c:a4:d6:1d:3a:67:
ea:e5:08:1d:05:28:bd:93:bb:34:f5:31:e5:c1:58:12:ad:33:
41:a1:5d:bf:1e:65:aa:9b:fb:d3:8a:a2:b8:0d:a4:1a:6f:11:
b1:20:8d:b7:97:9a:e5:55:1f:cb:f4:d2:37:9d:ad:07:0e:7b:
f8:55:fa:42:ac:83:99:6b:6e:f0:fd:31:2d:aa:13:b5:5e:c0:
b2:60:8d:c5:84:b9:31:07:11:7f:46:ed:ab:95:0a:d7:08:a0:
a7:3d:ae:c6:e6:c7:34:cc:ed:04:ca:9b:61:b1:ee:4c:96:e7:
00:f1:20:8d:5b:a7:35:e6:27:7b:79:f4:08:12:15:6a:17:65:
fe:5d:36:df:81:01:33:88:f1:cc:c2:6f:7a:41:32:77:72:74:
d0:fe:51:a5:1e:2e:71:31:71:31:55:d1:c6:1f:d7:7b:f6:08:
d0:9c:51:60:e0:f6:c9:2e:87:07:63:13:a1:56:8a:d0:93:49:
b9:80:06:60:a8:4f:85:e7:56:61:49:64:6f:73:05:ef:c4:ee:
8e:da:36:5f:ab:b5:cb:65:8b:f8:40:7c:4a:fc:46:cd:0d:a3:
57:4e:88:23:8b:3e:2f:42:9c:77:b1:a0:a1:28:81:cb:39:d2:
d7:77:af:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:26:22 2026 by rpki-client