
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/35BF0DAA84B811F1831C967990A30FBC.roa
File: 35BF0DAA84B811F1831C967990A30FBC.roa (raw, json)
Hash identifier: HWBAdMe8FSClbVLPqjcTR1x0l7ScvbAKX35W7AgEFEI=
Subject key identifier: F7:10:BF:2F:14:5B:D7:DE:CD:54:33:19:C8:DF:01:48:25:40:2B:5F
Certificate issuer: /CN=A91CCAED/serialNumber=2894BCF7E2394403826D3B4B4B807A44A7A41682
Certificate serial: 06
Authority key identifier: 28:94:BC:F7:E2:39:44:03:82:6D:3B:4B:4B:80:7A:44:A7:A4:16:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/35BF0DAA84B811F1831C967990A30FBC.roa
Signing time: Tue 21 Jul 2026 03:56:54 +0000
ROA not before: Tue 21 Jul 2026 03:56:54 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 23838
IP address blocks: 103.198.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.crl
rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCAED, serialNumber=2894BCF7E2394403826D3B4B4B807A44A7A41682
Validity
Not Before: Jul 21 03:56:54 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a5eee06-ba4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:62:56:00:42:f7:33:52:3e:e8:47:97:d4:
a6:75:a7:2c:93:f9:3a:99:81:92:b1:59:3b:f4:b5:
7d:a7:ed:90:be:f4:54:08:59:38:77:61:cd:2d:70:
5a:cc:1b:19:c0:d9:70:bb:9b:4d:83:21:f3:d2:1a:
31:60:76:fe:f4:0b:8d:91:44:a5:4a:38:9a:08:13:
b7:db:f2:a8:f7:5e:f5:40:a5:e6:b8:6d:e8:9f:5b:
3c:f2:c2:db:82:79:73:81:e6:a3:e8:2e:5b:71:4b:
00:38:19:5f:25:76:2d:1f:48:79:ae:99:44:46:65:
1e:37:2d:36:c2:b9:91:eb:19:a8:36:19:a6:a0:43:
16:67:51:a2:f5:12:e7:21:7a:16:19:66:8a:9b:3b:
ad:d5:07:5a:10:2b:6b:0a:ba:fe:12:aa:3c:d4:16:
b8:7d:cf:1d:28:51:a3:17:d7:79:d1:e2:68:3d:9f:
f5:3f:4e:ad:d0:8f:92:86:2f:80:96:41:3c:1b:02:
a3:15:03:59:08:c3:4b:31:d3:a4:48:a4:df:ea:79:
8d:d2:2d:cb:ab:82:74:08:dd:54:5d:90:ce:e1:22:
19:4a:40:e4:b8:38:85:6a:84:af:d9:6c:89:8c:d0:
cd:05:04:dc:0a:44:ff:f0:0e:9e:ed:66:7a:3e:78:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:10:BF:2F:14:5B:D7:DE:CD:54:33:19:C8:DF:01:48:25:40:2B:5F
X509v3 Authority Key Identifier:
keyid:28:94:BC:F7:E2:39:44:03:82:6D:3B:4B:4B:80:7A:44:A7:A4:16:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/35BF0DAA84B811F1831C967990A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.198.104.0/23
Signature Algorithm: sha256WithRSAEncryption
72:19:c0:17:d6:fb:ea:7a:05:e5:39:2b:9c:64:6c:45:48:c1:
44:b9:6a:5c:31:0c:e5:fc:72:88:49:d6:66:58:c4:2a:b7:44:
7f:6c:43:06:65:75:ee:ba:c1:47:21:c4:d2:9f:76:22:dc:ad:
f6:c2:5c:e9:a6:b0:54:be:80:bc:66:35:e8:e2:3b:0a:67:de:
f4:79:bc:4d:ac:9e:ac:b5:6c:a7:69:d8:d6:9a:f2:c2:03:85:
b5:ce:b8:f3:c1:4f:20:9e:04:62:94:ba:6b:c4:e7:c1:2a:d4:
89:b7:a4:1c:f9:ee:03:0b:6c:9b:2e:91:7e:47:5b:5b:f0:a5:
2b:6c:cb:7c:dd:12:02:f3:82:c1:23:fd:6f:a0:eb:f0:17:c3:
4e:4a:2a:cf:b8:09:c6:ca:71:50:07:b3:c0:31:76:12:17:54:
be:fe:98:f2:e5:50:47:92:6c:ff:2e:81:ad:76:34:02:b1:f2:
17:78:72:5a:4b:c6:2e:73:f8:4b:e5:a7:d6:a1:a7:d3:e1:69:
0a:f7:9c:82:13:18:af:e8:70:c8:6d:69:97:ac:5d:4e:ce:ee:
09:1a:7b:d5:24:ae:3c:05:28:5d:1f:90:4e:c5:fd:de:0c:2e:
37:31:2f:bb:f4:0a:d1:be:10:71:e8:cf:8b:ad:54:5c:59:f3:
76:38:c9:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:41:23 2026 by rpki-client