
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/35575C68844811EAB301615FC4F9AE02.roa
File: 35575C68844811EAB301615FC4F9AE02.roa (raw, json)
Hash identifier: p84kXPlD9gr0uNcPrMPIN+YNKnf8ICmyXIZyV2BXrVg=
Subject key identifier: 4C:89:77:85:FD:B2:E3:52:79:2B:A8:AF:B2:C0:23:84:48:53:BB:C1
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 37DE
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/35575C68844811EAB301615FC4F9AE02.roa
Signing time: Thu 16 Apr 2026 15:14:48 +0000
ROA not before: Thu 16 Apr 2026 15:14:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15347
IP address blocks: 203.135.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14302 (0x37de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Apr 16 15:14:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e0fce8-c724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:ab:be:dd:a4:e3:ab:5e:d1:1a:6d:6c:ec:
b6:2b:2c:77:be:b2:4f:ac:2e:ab:c5:23:68:b1:8c:
ba:9d:12:42:0f:73:27:e4:83:f6:6e:56:41:c0:20:
9e:59:48:1a:b0:f3:1d:8b:51:d9:84:02:eb:b6:56:
4c:c0:73:aa:a8:dc:bb:6c:0c:e2:df:74:17:b5:04:
7a:7d:92:4a:21:06:16:28:2f:94:3d:93:ee:ad:5e:
5e:38:31:94:a8:c5:26:dd:89:10:ab:06:6d:7f:c7:
1e:02:02:e0:7b:8a:94:a8:a4:b4:cb:6e:58:7f:3d:
b0:67:be:4e:24:8a:30:7b:e9:92:5b:2d:2e:88:f5:
ca:10:39:8d:eb:3e:27:cf:08:6f:32:3e:ca:36:78:
7e:10:6f:ad:fd:e0:b5:f4:4a:5a:e9:8a:98:9e:ef:
f4:c2:a2:57:5e:eb:0f:56:75:72:b8:18:dc:a9:21:
57:a5:e8:b9:c6:3a:07:23:03:83:2b:1c:66:38:91:
7f:0e:8c:e0:c9:5c:8d:10:c7:94:b1:6f:dd:99:54:
ea:0e:6c:a2:71:27:e9:df:81:22:4a:a8:77:34:64:
d8:06:03:41:bd:bb:7c:9e:23:29:af:1d:45:2b:98:
71:d6:da:87:5e:28:f8:90:b1:e1:7e:23:77:e4:2c:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:89:77:85:FD:B2:E3:52:79:2B:A8:AF:B2:C0:23:84:48:53:BB:C1
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/35575C68844811EAB301615FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.135.1.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a3:65:cc:e5:ed:e2:0f:fd:23:4b:8e:6a:32:f2:e9:f3:30:
6d:4d:75:31:26:59:ec:85:09:77:b2:56:be:d1:14:c0:ed:84:
ee:5b:9b:99:0c:cc:31:90:b4:d3:a1:99:d0:db:fb:14:d1:bd:
8f:9a:af:bd:c1:bd:81:18:6b:96:55:94:7a:82:06:7f:7f:4f:
33:0b:29:68:85:c7:dc:15:f0:4d:48:26:68:db:59:61:3d:b3:
ba:c3:fb:d6:be:f2:02:c3:cc:0d:58:d6:90:ee:7a:fa:52:bb:
86:5b:55:a0:3d:03:f7:40:a8:f6:b2:1e:6f:d3:c1:f2:9d:21:
6d:53:f2:7f:86:7d:5a:bd:34:50:80:e7:98:02:94:3e:22:71:
5e:73:90:2c:02:f3:77:91:9b:1c:a0:03:66:db:15:8d:16:ce:
a1:2b:61:a2:7a:9b:76:f4:ae:c9:22:dc:90:d5:f2:77:d0:8f:
d2:e3:a2:15:0a:ca:51:02:92:7b:9a:72:a2:a7:4f:76:e9:b9:
b3:0a:6b:75:09:4b:a0:23:61:bf:3d:e0:75:98:b3:58:5d:b8:
11:2b:97:5d:d0:59:fb:23:d3:40:e8:f5:f3:07:89:0f:b6:90:
fc:d0:a4:f3:d7:14:f8:c4:e3:29:01:60:c3:f3:46:c1:83:5b:
33:55:76:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:16 2026 by rpki-client