
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/35941A5CF49D11EFBD8ACC0EC4F9AE02.roa
File: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (raw, json)
Hash identifier: lnol3FDE+TIgmDpE8Hb5zoS0uAhkzs2Kf9xTWAAdaZg=
Subject key identifier: 16:E5:77:06:F7:12:C9:9D:A6:1B:FB:DA:2E:D9:07:8D:EC:71:4D:A4
Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial: 01E8
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/35941A5CF49D11EFBD8ACC0EC4F9AE02.roa
Signing time: Mon 09 Mar 2026 03:37:07 +0000
ROA not before: Mon 09 Mar 2026 03:37:07 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 7575
IP address blocks: 192.245.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:56:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Validity
Not Before: Mar 9 03:37:07 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69ae4063-0a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:a6:9a:82:2f:69:62:d7:52:71:f0:21:bd:
1c:af:b6:b1:14:af:1e:06:d7:55:63:e9:ed:97:d8:
2e:61:1f:b0:47:60:99:18:86:96:db:2f:f4:15:cf:
27:39:cb:3b:20:77:12:27:f4:5d:e7:b8:73:c6:6c:
8c:6f:17:09:87:2c:2e:22:06:82:6b:7d:9c:b9:27:
13:4f:2b:aa:32:a5:14:cf:99:a2:95:71:ee:ff:e9:
f2:fb:64:67:9b:2c:ea:bd:4a:90:21:d7:09:6a:c5:
22:da:ca:66:7d:2b:54:84:ba:96:f8:66:c0:2a:27:
9b:5b:1e:c5:2c:43:db:6f:11:db:d0:9c:18:07:51:
af:53:3d:35:b2:0e:2a:4e:9f:b2:8f:4d:4c:47:b0:
5a:c1:36:b5:a5:99:46:08:33:43:50:6d:d5:a7:66:
b2:09:c6:19:89:a0:60:bc:a7:a4:9d:5e:9e:91:d6:
28:55:5d:6e:0e:a2:2f:cd:46:94:8f:b1:fe:3a:f1:
a9:3c:f0:03:b4:0c:fa:8d:ee:f7:20:cb:c4:16:13:
aa:21:0f:6a:87:e7:b3:53:7d:c5:b6:de:18:5c:60:
bf:08:c8:f8:c8:27:d1:24:5e:3c:c7:ef:9b:d9:6e:
6a:60:83:d4:cf:45:0d:df:b8:69:46:eb:8c:50:a1:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E5:77:06:F7:12:C9:9D:A6:1B:FB:DA:2E:D9:07:8D:EC:71:4D:A4
X509v3 Authority Key Identifier:
keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/35941A5CF49D11EFBD8ACC0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.245.105.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7e:25:f6:ba:8f:e0:50:d7:da:e1:b9:8a:bf:50:85:59:f9:
e6:d8:5e:30:dd:18:75:01:f3:bb:35:19:8e:38:e1:7b:e2:3c:
04:e0:11:5d:07:2d:3f:4d:da:fb:32:bb:10:86:03:97:a9:ae:
b2:81:18:be:64:76:9c:c8:5b:ac:34:fa:6e:5c:a9:f5:da:19:
56:9e:ac:ed:4c:39:d1:7a:a2:d3:80:18:e9:78:86:7d:0e:90:
e8:b4:d9:c8:db:2c:2d:a1:c4:32:6a:9e:18:72:03:64:92:18:
b1:fb:eb:44:ac:d8:71:00:d0:05:b8:18:4d:22:06:a1:85:26:
85:ba:cd:4a:0e:0e:85:1d:98:80:a2:ab:37:1a:f0:f9:90:9e:
18:4f:7e:3b:fe:4f:3d:0e:84:e7:59:1d:e9:ce:49:bd:b0:18:
19:9b:24:13:86:f9:74:b5:63:6e:11:d2:15:4c:17:1c:f9:17:
41:9b:eb:6e:40:17:68:c1:b9:db:63:e1:2e:80:1f:17:75:16:
1d:df:d8:36:5f:73:73:d3:2f:af:fc:04:9a:db:bc:b5:4b:26:
b3:a0:cc:e7:25:bf:90:d9:85:37:72:ec:70:be:e4:40:97:d2:
e9:e0:1e:30:7a:89:c3:9c:11:56:9f:02:1b:a3:4e:34:55:b6:
c7:c9:1d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:25:42 2026 by rpki-client