
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/3CA27876F73F11EF95C5F011C4F9AE02.roa
File: 3CA27876F73F11EF95C5F011C4F9AE02.roa (raw, json)
Hash identifier: rUwmt+bo32fXyc76egq+OZINFYA/ahBwXXwNyoCKn6k=
Subject key identifier: 1A:E0:DD:A7:F1:0B:E8:D7:E0:88:D3:11:F9:C1:61:24:FD:83:9C:D9
Certificate issuer: /CN=A91F83B6/serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
Certificate serial: C3
Authority key identifier: E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/3CA27876F73F11EF95C5F011C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:05:24 +0000
ROA not before: Sun 02 Mar 2025 08:20:45 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 141414
IP address blocks: 163.61.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl
rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F83B6, serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
Validity
Not Before: Mar 2 08:20:45 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3f344-5b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b2:99:01:ba:26:5f:52:0d:97:c8:e6:e3:a4:
91:ab:bf:c5:83:b4:1d:d4:65:60:e0:c5:0b:8d:1f:
05:29:d7:83:4a:97:69:89:08:15:a1:26:c3:de:34:
74:94:42:a9:df:3d:a3:21:28:8f:4a:19:74:3d:96:
b5:0a:62:0a:b4:cb:97:15:f1:aa:e0:d1:57:7f:a4:
2e:4d:3b:eb:e0:5b:3b:07:60:48:3e:fa:f0:d1:96:
65:23:d4:f7:62:09:82:da:90:19:35:60:fb:a3:ad:
83:66:53:03:a2:9e:56:0b:f2:8a:14:40:61:b1:34:
f9:ce:02:61:9c:3e:3f:92:d6:78:8a:1d:86:26:2e:
1a:1b:08:08:3c:96:59:aa:25:19:6c:48:af:a1:f6:
30:ce:23:94:43:ea:b8:14:de:69:38:42:db:9e:2c:
dd:b9:49:f0:59:b2:bc:f5:b8:b8:56:e0:9c:37:b8:
e0:f6:3c:a6:a4:a2:de:aa:79:fb:2f:2a:60:68:91:
65:48:c2:ef:91:c0:2e:08:12:62:b8:af:81:7b:32:
bb:d3:21:b4:34:75:db:a8:5b:3c:47:81:8a:0d:26:
70:5c:06:a0:dd:55:8e:bd:95:21:70:40:1e:7c:fb:
c6:23:cf:ef:71:f7:af:99:c5:e3:b8:72:53:84:fc:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E0:DD:A7:F1:0B:E8:D7:E0:88:D3:11:F9:C1:61:24:FD:83:9C:D9
X509v3 Authority Key Identifier:
keyid:E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/3CA27876F73F11EF95C5F011C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.217.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a5:b9:1d:f6:12:fc:f2:e4:cf:30:29:4b:f4:fc:32:ec:57:
07:44:58:35:f8:27:d4:44:96:0f:d4:81:33:f4:f0:42:72:cc:
f4:21:2b:ff:05:fd:10:95:0a:ea:59:1f:dc:04:e1:51:22:69:
a9:ae:67:a8:a0:03:35:e0:ea:f1:e9:09:b5:19:a9:79:8c:ee:
6f:76:03:c2:7d:14:a3:17:de:6e:56:db:2f:66:0c:0c:c9:3e:
de:f8:fd:2a:3e:81:89:6d:73:88:b7:84:b6:b2:7a:37:67:65:
f1:c2:26:7d:1e:8e:24:64:e6:3f:32:4d:86:9a:84:fc:1d:1f:
4b:70:16:c7:08:c5:8f:85:c7:d5:67:b5:db:e9:4d:89:fc:32:
12:93:69:02:3b:04:1d:3e:15:2c:99:81:cc:c8:2f:bc:5a:f2:
54:57:cb:d1:a1:5d:81:be:41:44:50:33:1e:af:2a:d2:e5:80:
83:45:51:d4:f2:b9:a3:80:ad:75:1a:70:d7:f6:0b:4b:c6:84:
a5:8b:8c:5d:de:8b:a8:ce:65:4e:8c:a6:e1:65:a4:1a:78:a5:
fd:ea:3b:86:b3:bf:07:74:32:e0:fd:07:d4:bb:f3:9c:f4:12:
5d:0f:25:57:ac:72:06:31:a5:a0:11:28:15:91:a5:b5:9a:ea:
da:0e:ae:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:08 2026 by rpki-client