
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/1BC51A56CDA711F1AEC3F31DB6EE528E/0A0A6E04DF6511F19D3C2A491C66CEF9.roa
File: 0A0A6E04DF6511F19D3C2A491C66CEF9.roa (raw, json)
Hash identifier: a+REOebKGqQnjT4do0yE/duHVdjIkYQD5nl77uUtRio=
Subject key identifier: 50:7C:90:62:19:17:DB:86:6B:E9:CC:4D:33:DE:F4:61:C3:7D:FF:9B
Certificate issuer: /CN=A91A4402/serialNumber=4DAF0F7CA5F6372F770AB2F852FF10F9C00DC5EA
Certificate serial: 10
Authority key identifier: 4D:AF:0F:7C:A5:F6:37:2F:77:0A:B2:F8:52:FF:10:F9:C0:0D:C5:EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ta8PfKX2Ny93CrL4Uv8Q-cANxeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/1BC51A56CDA711F1AEC3F31DB6EE528E/0A0A6E04DF6511F19D3C2A491C66CEF9.roa
Signing time: Fri 13 Nov 2026 13:20:48 +0000
ROA not before: Fri 13 Nov 2026 13:20:48 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 2497
IP address blocks: 162.35.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/1BC51A56CDA711F1AEC3F31DB6EE528E/Ta8PfKX2Ny93CrL4Uv8Q-cANxeo.crl
rsync://rpki.apnic.net/member_repository/A91A4402/1BC51A56CDA711F1AEC3F31DB6EE528E/Ta8PfKX2Ny93CrL4Uv8Q-cANxeo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ta8PfKX2Ny93CrL4Uv8Q-cANxeo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=4DAF0F7CA5F6372F770AB2F852FF10F9C00DC5EA
Validity
Not Before: Nov 13 13:20:48 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6af70eb0-75a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c4:13:10:1c:78:0e:39:03:b8:05:d5:a6:79:
03:68:47:9e:2f:03:7d:04:20:b3:1b:4a:66:a6:37:
98:22:83:63:a5:a8:cd:72:0c:c4:ff:09:c8:d3:26:
86:ce:2d:4e:a1:ed:00:aa:c9:2a:71:5f:7a:df:b9:
64:88:d8:f4:a5:20:45:ea:e7:07:81:6b:5d:8b:68:
49:85:db:ca:79:2e:e7:14:60:bd:dd:ba:cb:9f:62:
9c:76:a8:36:b1:22:ba:60:69:df:06:a7:3e:c3:be:
fa:7e:f9:1e:f6:3a:c3:a5:c3:9d:b5:6c:7b:38:50:
e3:8b:93:ae:5e:77:12:43:34:4d:cc:cd:c9:66:ef:
87:49:30:ab:a7:e5:b6:04:b3:1c:ef:ea:b7:0f:4d:
6d:d1:9b:10:11:13:a6:b4:15:22:d9:a2:ce:14:26:
c4:30:46:4a:29:3c:d4:07:4a:ae:54:d4:04:eb:df:
88:1f:2d:2a:e7:14:5a:22:ed:ae:dc:27:24:ce:3d:
69:51:a7:c6:81:6f:36:63:41:f3:93:7a:da:cb:16:
5e:44:58:0a:b2:0b:aa:17:6e:e2:fd:df:d7:78:0b:
18:f1:b1:f4:50:2d:74:3e:2a:f1:53:be:13:aa:06:
32:4e:3e:a3:40:9f:07:dd:eb:ce:23:94:bf:55:d5:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7C:90:62:19:17:DB:86:6B:E9:CC:4D:33:DE:F4:61:C3:7D:FF:9B
X509v3 Authority Key Identifier:
keyid:4D:AF:0F:7C:A5:F6:37:2F:77:0A:B2:F8:52:FF:10:F9:C0:0D:C5:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/1BC51A56CDA711F1AEC3F31DB6EE528E/Ta8PfKX2Ny93CrL4Uv8Q-cANxeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ta8PfKX2Ny93CrL4Uv8Q-cANxeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/1BC51A56CDA711F1AEC3F31DB6EE528E/0A0A6E04DF6511F19D3C2A491C66CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
162.35.64.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:2f:bd:db:4f:9d:f4:25:7e:54:2b:e5:25:84:5b:3d:3c:c7:
44:10:1b:b1:23:d2:2d:43:cf:b9:44:f1:91:36:5d:4b:e3:a1:
15:bf:04:80:cc:c0:24:0a:b0:01:d5:7c:95:75:b1:c9:f8:7a:
b4:7e:6c:eb:0a:57:21:7c:36:1d:64:11:61:2e:a0:ad:b1:3d:
3c:63:c4:9e:5c:ec:8a:21:cc:24:56:19:34:67:82:9f:5b:f4:
9a:6c:28:6e:3b:2d:4d:9c:a9:90:c2:ad:93:9a:fd:64:65:07:
2f:83:50:ab:3d:12:eb:de:04:11:1c:de:0a:8f:c0:ba:90:ff:
5d:7c:b0:1c:c8:16:40:c9:62:bd:01:15:2f:37:c1:5f:5e:87:
0b:5a:67:c0:83:cb:30:a4:61:8f:6f:72:3c:9a:31:27:0c:d5:
64:6a:9a:09:61:c1:2b:c8:c8:e0:36:e6:28:8b:3a:f7:ae:e2:
48:95:8e:bc:13:df:c2:c2:6e:0f:05:8d:6b:8f:84:bf:10:9f:
fe:9b:6e:7c:bf:8b:e2:a5:fc:74:98:31:aa:da:36:01:3c:c3:
88:de:dc:e8:4c:f2:3e:6a:4f:71:4a:55:ae:a9:ec:e8:a2:90:
10:a6:58:9a:e8:93:c4:72:14:b3:a3:c5:4e:b7:ad:9d:f4:66:
b2:f2:68:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:20:07 2026 by rpki-client