
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/D035B7BE5BC711F097260D5EC4F9AE02.roa
File: D035B7BE5BC711F097260D5EC4F9AE02.roa (raw, json)
Hash identifier: OCIfPT6csLAtAeWTDBTvsXbrYBJPIHeFKZh9yC7jO40=
Subject key identifier: AF:43:5D:FA:6F:1C:06:F7:1D:8D:A5:90:C3:6A:D4:3D:2D:69:0F:5B
Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
Certificate serial: 018E
Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/D035B7BE5BC711F097260D5EC4F9AE02.roa
Signing time: Fri 27 Feb 2026 04:23:35 +0000
ROA not before: Fri 27 Feb 2026 04:23:35 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152469
IP address blocks: 2001:df3:73c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl
rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
Validity
Not Before: Feb 27 04:23:35 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a11c47-e738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:17:c3:81:14:7d:f4:c4:42:e8:e9:a4:0f:
47:08:16:32:09:cd:08:df:ec:71:97:f2:42:0b:91:
80:94:d6:4d:f4:52:ed:bd:07:be:63:e1:40:fa:8f:
8d:cc:4e:43:15:cd:f2:8c:87:76:4b:cd:4f:70:16:
99:5d:ce:2a:e3:63:60:4a:d6:84:7a:8c:74:6c:0a:
6b:7f:a2:e4:c6:59:8a:e4:2f:0f:52:db:6d:7f:62:
f4:bf:6e:cc:e7:75:58:93:d8:7c:14:fd:ab:75:13:
4c:fe:12:00:51:5d:eb:dd:ae:c6:1c:ae:3d:85:3e:
8b:91:ea:2d:29:4c:53:ca:02:2f:bc:28:ba:8f:a7:
5f:a9:fb:2b:26:97:33:8c:c2:19:87:d2:72:1a:2d:
3a:b8:89:f9:0a:c9:bc:ae:a7:31:dc:e7:f7:0a:6c:
52:24:4a:05:28:bd:48:b7:92:8d:01:04:38:4f:f4:
61:b3:c6:29:ad:01:40:3a:25:44:79:62:6c:e0:e4:
6e:3b:78:8d:e3:a4:1a:13:61:a4:fc:bd:b8:2f:ac:
3d:59:09:d8:ea:8c:8a:32:10:0c:9c:e2:be:58:8e:
cb:9a:92:a4:45:76:89:2f:73:70:3d:b9:5c:ae:38:
87:c2:91:ed:f5:08:76:2e:57:9e:34:ed:06:7b:b9:
ac:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:43:5D:FA:6F:1C:06:F7:1D:8D:A5:90:C3:6A:D4:3D:2D:69:0F:5B
X509v3 Authority Key Identifier:
keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/D035B7BE5BC711F097260D5EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:73c0::/48
Signature Algorithm: sha256WithRSAEncryption
05:28:d3:bb:52:11:65:f2:44:8c:08:07:53:2d:e4:d3:e6:6a:
d4:4f:64:a4:36:8d:85:0e:31:d6:ab:2d:37:6a:4d:32:22:83:
a3:be:b4:3f:f3:51:a4:8f:7f:d8:b0:42:24:0d:0a:25:9d:74:
ac:85:ab:54:b5:e8:08:c2:bd:8f:f1:11:b7:0d:66:46:fb:5b:
4a:2c:eb:ef:8b:9c:6f:b4:71:67:ef:ec:90:e6:28:55:13:51:
eb:db:df:2a:35:69:7e:15:8b:b2:f6:75:94:de:0b:95:6d:db:
9e:5d:1c:2e:9d:7c:65:66:61:f9:6d:3d:37:5c:b2:31:7d:29:
a5:b3:dc:75:78:31:84:48:69:b7:5c:23:7d:68:b1:5e:16:56:
69:3b:3a:ce:09:68:ad:ff:c1:5d:ad:c4:b1:45:51:f4:e9:60:
73:fd:a0:84:08:0e:02:fb:d9:2d:76:92:56:5c:9b:66:81:c2:
de:e8:04:30:75:32:a9:fc:77:91:0b:ff:99:17:12:82:bf:07:
da:9f:a5:72:05:62:c8:f0:d7:7a:db:00:b0:93:7b:be:91:32:
e3:41:3b:dc:be:c1:22:7f:cc:12:78:01:16:4c:55:8e:9e:f1:
86:bd:8c:f5:ca:c1:69:65:24:ec:0a:81:9c:05:d8:d8:4d:75:
23:f2:64:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:19 2026 by rpki-client