
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/35A169488D8611E9B1106E6FC4F9AE02.roa
File: 35A169488D8611E9B1106E6FC4F9AE02.roa (raw, json)
Hash identifier: Z++rBUNrYhvgRo99autUox/H1JSZhgsbn5NwK7G+bPg=
Subject key identifier: C5:8C:58:8C:ED:6B:89:2C:C8:2C:CF:16:57:34:CD:46:E6:2D:33:F9
Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Certificate serial: 104E
Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/35A169488D8611E9B1106E6FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:37:36 +0000
ROA not before: Fri 02 May 2025 17:57:36 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138978
IP address blocks: 103.138.32.0/24 maxlen: 24
103.139.90.0/24 maxlen: 24
2404:bb40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:56:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4174 (0x104e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Validity
Not Before: May 2 17:57:36 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a44f30-ead5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:42:b9:9e:0d:b2:8d:61:50:c1:cf:00:8b:
19:dd:5a:a7:30:79:d7:a0:40:c1:9c:b7:fa:c9:0b:
b3:7e:80:90:c2:70:05:78:03:b5:98:b8:04:1e:0a:
89:48:ce:14:8c:95:a1:32:11:c5:e4:ed:fd:54:44:
09:3c:6a:2d:1f:86:72:c3:b7:2a:d2:f3:1f:8a:2f:
0f:a6:24:e5:fe:32:32:ec:2a:99:a9:fb:af:6b:53:
f3:e6:93:b8:76:85:9e:63:17:86:09:f2:24:e3:a0:
4b:23:e5:84:fc:24:6d:33:89:d8:ea:c8:ef:eb:3a:
7f:01:ba:3f:58:8f:36:9d:19:3e:7e:4d:5a:5d:ed:
1c:14:7b:5a:24:93:be:72:a6:9f:0e:6a:81:22:81:
82:26:ad:d0:3d:f3:0c:4c:3e:e0:3f:86:7c:3b:15:
d8:86:4e:7c:d6:ce:81:1c:ce:80:a6:ce:eb:80:94:
2a:80:36:f2:52:37:c2:c9:41:ee:24:63:44:95:26:
5c:b2:65:7a:78:f0:ac:8b:59:4a:52:d0:2c:f3:bc:
15:74:5f:49:2b:d5:87:8c:58:73:c1:05:b3:94:f9:
10:bd:8f:ce:f5:f3:b3:9f:ff:fe:a6:30:70:eb:d6:
6a:2e:81:6d:47:67:cd:03:f7:e7:e6:6b:b1:a0:42:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8C:58:8C:ED:6B:89:2C:C8:2C:CF:16:57:34:CD:46:E6:2D:33:F9
X509v3 Authority Key Identifier:
keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/35A169488D8611E9B1106E6FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.32.0/24
103.139.90.0/24
IPv6:
2404:bb40::/32
Signature Algorithm: sha256WithRSAEncryption
6a:19:b3:5b:86:81:8e:97:5d:22:01:ef:2b:c0:a0:9f:0b:c1:
ac:b1:03:6f:c6:08:11:c6:f5:03:a6:80:ba:21:4c:c3:81:b6:
7a:94:43:70:56:c7:83:d7:5a:65:58:a2:21:ba:fa:e8:79:92:
ce:ce:fd:a8:58:cd:5d:e8:23:93:13:80:7e:c2:7e:1f:99:61:
da:7d:1d:18:b4:55:83:7e:4c:2f:18:82:52:13:43:c6:99:87:
c6:85:36:45:8b:8b:0c:e4:db:ee:a8:34:6b:f0:2b:50:bb:1f:
b7:99:85:14:51:27:bb:0d:8f:d6:e7:ca:57:a2:1a:27:2e:0d:
06:ac:4e:b6:98:48:aa:d5:88:98:f2:f7:c5:2a:9a:24:44:14:
79:d1:c4:3b:10:46:ee:1f:19:e3:70:b8:43:69:f3:6d:57:c7:
5c:fc:17:a5:ab:87:7d:6d:f3:68:ae:b2:ea:08:da:9b:75:c0:
8d:2d:f4:81:74:22:d9:91:d9:cc:a7:6a:4b:10:10:36:aa:de:
d7:fc:2e:b6:6a:9f:6f:3a:d2:fd:3e:59:5b:50:bf:45:ad:c0:
c6:9f:a3:e5:7a:5c:36:34:93:ef:73:de:e1:3a:b1:aa:5d:2d:
7b:82:11:dd:5b:8d:dd:1c:7a:3c:ab:15:7f:1b:e5:27:0f:3f:
7f:b0:a9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:41 2026 by rpki-client