
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/35941A5CF49D11EFBD8ACC0EC4F9AE02.roa
File: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (raw, json)
Hash identifier: wQKEuHToTuUnv81JQA3xZAcXZQ1kmn5Px72o26Nat+k=
Subject key identifier: 44:F5:C9:CB:D4:C4:8C:D8:28:AF:BE:74:CE:86:B1:81:0C:A5:A2:A0
Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial: 01DC
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/35941A5CF49D11EFBD8ACC0EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:00:50 +0000
ROA not before: Fri 21 Mar 2025 04:09:52 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 7575
IP address blocks: 192.245.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Validity
Not Before: Mar 21 04:09:52 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a41c61-3863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:7d:09:d0:2f:bb:8f:26:35:a1:f5:26:00:
71:15:f8:3e:6a:65:f6:8c:9f:43:dc:66:f3:23:7e:
98:2b:cf:92:93:36:9f:f8:b0:d5:71:0e:55:64:78:
7a:44:c6:b3:02:4a:fb:d5:ea:19:60:54:0c:b5:0c:
e7:ee:82:ff:30:48:99:ee:6b:7d:30:74:12:a6:43:
3b:ad:78:fe:e6:d9:44:18:64:82:c9:18:f8:11:6a:
c8:ac:78:00:3f:17:26:f1:14:db:63:d4:49:f0:b7:
b2:e1:d6:be:cb:2a:c4:da:08:e2:5e:c1:3b:4f:df:
be:eb:da:58:cd:92:9c:4a:02:ad:f9:89:09:44:a2:
eb:60:05:58:3d:d1:03:d3:75:75:20:a5:53:38:95:
0c:47:3c:cb:e4:67:39:75:1c:a0:08:72:a4:8d:bd:
36:59:fd:a9:f8:0d:70:fc:c5:d5:6d:a0:af:92:98:
09:5d:5e:f5:7f:92:7f:56:3a:25:8e:8e:96:9e:8b:
af:45:dd:4a:4c:49:9e:70:dc:05:bf:fe:22:39:27:
80:f7:af:d7:1f:92:11:8b:99:9c:d3:ca:fd:86:0e:
82:3e:01:46:f5:7a:5c:d9:ea:33:27:ef:73:22:cc:
03:5f:74:3e:e6:85:b9:7d:ec:fc:af:a3:23:cc:90:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F5:C9:CB:D4:C4:8C:D8:28:AF:BE:74:CE:86:B1:81:0C:A5:A2:A0
X509v3 Authority Key Identifier:
keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/35941A5CF49D11EFBD8ACC0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.245.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a0:36:c0:52:0e:95:58:0a:30:f9:24:07:e5:38:68:ba:36:
03:dd:c0:51:7a:08:a1:ad:72:0e:e3:47:f1:b9:74:c0:4a:37:
a6:7f:07:a9:b5:56:58:0c:87:ff:83:dc:75:f9:fa:2b:5a:e0:
02:1d:99:ac:95:90:a6:5d:47:d4:5a:31:b7:b7:99:a5:37:9e:
f1:4e:81:03:d1:54:0c:0e:50:43:25:39:d1:10:b0:00:d1:1d:
c3:b6:93:da:15:af:32:6f:57:b0:b3:e6:33:ed:a9:68:ab:60:
2f:3b:92:6c:d8:ca:7c:b6:ba:2b:79:32:ea:e3:18:13:94:43:
e1:54:90:b6:27:2e:d0:dd:cf:1c:be:ed:52:4e:36:a3:a6:61:
06:fb:7c:c1:d3:aa:ce:dd:86:ae:16:42:66:7c:a2:a4:b2:e3:
4f:fb:3e:c7:82:91:5a:97:1c:e8:bd:7c:43:44:94:5c:a7:6b:
59:fd:20:f7:90:d3:19:b0:8e:f4:3a:2b:ce:aa:3a:3c:44:8f:
db:d8:20:a1:ad:b4:d7:44:9b:b6:16:ac:fb:7b:8e:0f:c5:5d:
72:7f:21:88:71:16:b7:e6:b0:2a:56:9a:61:4f:3d:45:bf:c4:
2f:22:f5:71:a7:72:3f:96:65:80:50:80:82:7d:fd:65:e5:e0:
9d:31:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:45 2026 by rpki-client