
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/35C008E818C811F0BF9E881FC4F9AE02.roa
File: 35C008E818C811F0BF9E881FC4F9AE02.roa (raw, json)
Hash identifier: EwTXYjhkuYmnK5REc5ttyfrL9ha6tGMNAAZThk/k3Bo=
Subject key identifier: 08:88:18:DA:E5:13:9B:7B:D8:7F:95:83:4C:B0:0D:A2:74:55:42:7B
Certificate issuer: /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Certificate serial: F5
Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/35C008E818C811F0BF9E881FC4F9AE02.roa
Signing time: Sat 25 Jul 2026 08:56:58 +0000
ROA not before: Sat 25 Jul 2026 08:56:58 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 149872
IP address blocks: 203.4.164.0/22 maxlen: 22
203.4.164.0/24 maxlen: 24
203.4.165.0/24 maxlen: 24
203.4.166.0/24 maxlen: 24
203.4.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Validity
Not Before: Jul 25 08:56:58 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a647a5a-4062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c1:85:24:73:d9:1f:4b:54:6f:66:27:38:4a:
a7:37:05:8a:61:55:62:0e:e3:6c:31:2a:c8:8c:c4:
64:e9:f8:95:1d:8d:8b:ca:5b:eb:79:ba:61:cc:9b:
57:c3:1b:d7:5d:16:81:18:21:99:05:a6:55:5f:0d:
a6:32:6a:4f:8a:9d:91:09:c5:e0:9f:03:0b:66:0a:
43:66:37:12:00:30:f8:bc:92:c0:25:87:59:6d:8d:
c8:77:a1:42:40:71:6c:17:64:99:bb:80:c6:88:ef:
f1:51:24:f3:93:77:94:35:07:ba:eb:fc:ab:75:98:
0c:54:24:f0:22:e7:0e:50:bf:01:44:4d:49:a6:a6:
d0:9f:d2:75:b4:a0:5f:a4:11:b9:49:66:c2:71:6e:
16:c1:27:6f:21:6e:f3:cf:ec:88:1f:af:10:ec:51:
b6:2a:fd:fb:e9:7c:e0:14:e5:6d:52:5a:37:4e:1f:
c4:77:7e:c8:9b:14:8c:30:78:b9:d2:86:e7:9c:51:
2f:7b:ff:67:92:27:35:c7:1d:8b:fd:3d:ee:4f:87:
e9:3a:94:98:eb:18:b6:1a:7b:38:30:f1:35:54:b5:
2d:d6:3d:e6:d9:c8:7b:ee:9c:25:1d:6d:a4:0f:21:
b9:26:da:6a:74:1e:fd:2f:a1:7f:72:c5:19:1e:f6:
6c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:88:18:DA:E5:13:9B:7B:D8:7F:95:83:4C:B0:0D:A2:74:55:42:7B
X509v3 Authority Key Identifier:
keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/35C008E818C811F0BF9E881FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.4.164.0/22
Signature Algorithm: sha256WithRSAEncryption
81:6b:11:30:d9:2d:df:71:83:52:0c:ad:4c:1c:72:b5:ce:d0:
67:b8:8c:ff:55:92:cf:64:85:47:12:c2:6b:e0:f2:3e:1a:f8:
cc:b1:13:75:7a:04:75:52:f5:f9:69:7e:f6:76:8a:53:8e:e2:
74:bf:5b:6b:9f:23:f4:ea:73:9b:ff:95:33:cc:26:aa:20:71:
a9:00:94:7d:58:42:56:9c:04:a8:be:3e:71:e8:22:62:bb:d0:
dc:5e:b2:2e:1a:8d:f5:aa:95:93:b4:86:9f:7d:32:67:5a:fb:
16:b9:fc:ac:ed:46:c3:05:6e:e0:9e:c6:53:7c:f9:6f:16:54:
73:57:0c:4d:9a:83:41:a4:80:41:8b:e4:cc:66:ac:ec:20:ed:
25:47:ee:07:04:f1:56:46:61:6f:a5:99:c2:64:6e:e2:85:97:
cd:db:72:ec:84:66:78:e5:c9:79:70:d8:48:1a:29:0d:d5:0e:
2d:62:2a:02:f0:65:b2:9d:54:40:ba:24:3d:ef:d4:03:01:a6:
72:bc:84:27:3d:cb:fd:0e:26:6d:9e:54:36:c9:0f:e2:53:df:
54:ed:36:a6:02:e7:80:0b:22:44:f3:d9:40:32:78:60:61:0e:
cc:10:27:cd:1e:fc:d1:93:36:ad:92:d7:e9:44:a4:1b:62:d0:
f8:a6:1d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:28:38 2026 by rpki-client