
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/9F57DB96B42211F09BF7B44BC4F9AE02.roa
File: 9F57DB96B42211F09BF7B44BC4F9AE02.roa (raw, json)
Hash identifier: 3p0nFpTgLXLE0Q21DG6d1p4bn54BO2lrmxsZHMI9Xjw=
Subject key identifier: FD:A2:C9:B8:26:BC:99:D4:11:48:86:1E:5A:39:27:56:7E:C4:C1:A0
Certificate issuer: /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Certificate serial: 5B
Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/9F57DB96B42211F09BF7B44BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 11:54:19 +0000
ROA not before: Tue 28 Oct 2025 17:22:51 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 152098
IP address blocks: 155.35.34.0/24 maxlen: 24
155.35.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl
rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Validity
Not Before: Oct 28 17:22:51 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a57a6a-87e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:7e:2b:57:f0:cf:9d:ad:14:70:86:94:c0:
44:f5:61:08:b7:ee:a0:82:17:9e:15:de:78:9b:9f:
5b:81:63:1e:24:93:94:e9:ac:e3:4b:b9:ae:d5:6a:
ad:c9:fc:4a:11:e6:b9:d1:d8:cf:b7:8d:e2:2a:04:
d4:2e:05:75:04:37:6a:58:bc:5f:4d:ee:fa:25:76:
39:d5:3a:06:49:83:ec:28:f3:a4:03:ee:62:07:9b:
14:52:ac:8a:92:aa:8c:b8:1f:d6:f9:89:c4:50:83:
82:51:72:1a:68:69:1a:90:67:67:74:c1:c3:59:1d:
10:25:49:4f:af:d5:a4:c3:c1:17:2e:29:45:c8:cc:
cf:c8:63:d7:f0:a5:1d:19:e5:11:df:00:df:35:73:
70:9d:52:ba:71:c1:9f:be:c3:e4:fb:8f:4d:c0:d9:
8c:83:7d:11:9f:51:c8:84:a5:f7:bf:5f:16:a8:c0:
e1:09:49:e4:ff:3a:6b:44:90:5d:7b:fc:cf:78:f7:
3f:70:1e:13:1c:65:5a:0d:ac:ad:78:b8:94:28:f0:
7b:9c:c6:69:f5:b4:37:56:e4:22:c7:58:74:69:09:
ed:b6:4f:d3:5b:a2:12:a3:7f:ad:ab:c9:ce:4d:3c:
a1:50:a5:0c:2a:df:2b:df:31:21:91:95:0d:97:31:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A2:C9:B8:26:BC:99:D4:11:48:86:1E:5A:39:27:56:7E:C4:C1:A0
X509v3 Authority Key Identifier:
keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/9F57DB96B42211F09BF7B44BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
155.35.34.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:ec:ac:74:20:8f:69:54:e5:35:00:65:2f:22:56:42:c7:b7:
04:f2:d3:38:92:59:af:41:57:af:28:c4:4d:e0:f9:1b:8f:48:
94:5d:3f:7f:a7:17:f8:8c:c0:82:f5:45:32:5f:09:20:5f:08:
f2:e0:6e:13:8d:b1:6e:12:e3:4d:51:2f:7c:89:69:cb:f7:f2:
b0:3e:fa:77:3f:3c:28:81:6f:52:c7:dd:b5:d7:7f:fb:cc:2b:
fd:34:74:31:1e:70:b6:64:d2:ae:ff:cf:fc:44:37:94:20:7e:
0b:67:94:fe:f2:e4:a0:f6:e0:10:94:d6:5d:3a:ec:f7:ba:88:
31:42:49:25:73:20:25:f3:1f:13:ba:03:a1:ef:e2:cf:41:7a:
f3:ef:b6:1b:db:b0:1f:17:0d:f3:7e:ee:78:bf:84:41:34:cc:
7c:e7:dd:d2:d8:cf:cc:04:ae:c8:de:64:e3:91:54:c8:4c:62:
c2:99:c1:34:c1:e2:82:11:db:aa:d9:06:05:b8:20:70:b4:4f:
70:51:e5:b3:76:56:1d:ec:db:d1:2b:bc:35:be:df:d2:0a:39:
83:76:78:fa:1a:63:c7:da:9d:ab:95:8d:65:34:58:4b:c7:91:
32:9e:38:a2:4f:60:e0:13:44:92:1d:45:d3:bd:e5:a4:d2:8a:
67:a0:90:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:15 2026 by rpki-client