
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/35ADE898B90A11EF97D24653C4F9AE02.roa
File: 35ADE898B90A11EF97D24653C4F9AE02.roa (raw, json)
Hash identifier: j4HW8v+J9rL2PkNopASjMuegUlrtdhRwhQv/dAW6LJM=
Subject key identifier: 18:B1:8D:ED:A6:1E:6C:6E:F5:CB:02:3D:5B:A5:E8:09:C6:95:6F:47
Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Certificate serial: 0286
Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/35ADE898B90A11EF97D24653C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:16:42 +0000
ROA not before: Wed 05 Nov 2025 02:16:40 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 150286
IP address blocks: 2001:df1:3440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Validity
Not Before: Nov 5 02:16:40 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4747a-e2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:b0:26:ff:2d:b7:84:04:c6:b2:e0:7b:d0:
b3:01:75:af:3d:e5:87:fb:4a:5c:e6:1e:f2:c0:bd:
6b:a3:d1:63:11:9f:5e:36:08:35:b6:2f:e6:41:f6:
a0:5b:1c:20:3f:ed:ce:9d:3e:4d:9f:ea:fa:92:fd:
2a:5d:21:b8:14:a9:ea:26:6b:37:14:e9:ee:1c:42:
21:c2:4d:8e:f2:9a:b4:c4:d3:56:d5:f5:14:59:c0:
c1:16:63:ed:68:f6:90:62:92:c3:61:b5:8f:06:00:
f9:a0:2a:f3:1b:27:42:de:48:0f:ac:8f:0e:df:51:
51:f2:c6:9c:61:85:a7:5e:5c:66:1d:c2:01:8d:57:
63:ab:7d:85:6d:00:3d:6b:70:55:63:70:96:07:43:
56:ac:5c:4f:18:e8:a7:57:5a:56:53:8b:86:99:00:
90:24:25:d3:44:32:93:3c:9d:86:58:21:56:5e:55:
58:c8:b7:f6:3c:a3:d6:11:d6:48:f2:1d:4d:7e:79:
22:c2:cf:cd:d5:7f:84:ab:d4:16:f0:d5:af:bc:4c:
1d:28:0a:c7:e4:0a:3f:f7:46:ac:4f:c5:70:8b:53:
01:86:e0:31:12:70:6c:e5:37:bc:04:78:e7:d7:9d:
d8:de:53:7b:8c:8c:42:9a:86:ba:ec:3f:89:76:b7:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B1:8D:ED:A6:1E:6C:6E:F5:CB:02:3D:5B:A5:E8:09:C6:95:6F:47
X509v3 Authority Key Identifier:
keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/35ADE898B90A11EF97D24653C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:3440::/48
Signature Algorithm: sha256WithRSAEncryption
25:ce:31:6f:f4:ce:04:92:f7:13:f4:c8:db:68:74:9a:d9:19:
84:42:91:e8:49:7c:08:33:22:00:41:e5:ae:cc:b8:40:0c:0a:
50:53:84:f8:47:3e:fb:45:44:4d:03:d9:09:37:90:d3:0a:ac:
e4:a7:7f:50:f8:b0:50:ea:4f:f1:38:80:2c:8c:db:81:4b:54:
6d:3d:b0:49:19:a4:65:52:fb:15:15:23:30:c1:12:4d:cf:82:
5b:46:4a:1d:dc:94:f6:21:0d:e6:9e:3c:78:c2:52:af:d7:e5:
ff:e5:fc:a6:bb:2e:d3:53:04:a5:cc:11:b3:b5:b6:70:ab:fd:
59:ee:64:23:37:15:73:08:18:db:7a:08:dc:a5:1b:7b:24:14:
8c:f0:99:47:cf:54:b9:62:60:29:ac:63:4d:b9:02:d4:9c:ec:
04:f8:44:47:d1:93:74:f9:f2:33:91:b6:fd:25:3a:27:01:e0:
ad:36:f5:55:9e:82:70:53:56:04:4c:f5:20:ca:1a:c7:dd:a6:
4c:5b:22:e9:67:10:fe:64:f7:16:33:23:95:4b:1c:92:c2:f2:
6f:76:94:d2:bb:be:d7:ff:d7:c5:ad:6d:47:68:e6:ad:3f:75:
92:61:03:9e:1a:d7:60:f7:4a:de:31:14:5c:36:b0:59:45:49:
05:f7:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:34 2026 by rpki-client