
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/35F78322157A11F1B5E2F6BC3D3D8C67.roa
File: 35F78322157A11F1B5E2F6BC3D3D8C67.roa (raw, json)
Hash identifier: 4B2gWhB5Y4ILw7gHlXuWLfEmtRcz3baNrh2+32uCSBU=
Subject key identifier: E0:CC:4C:EB:16:91:C4:0B:D6:B7:06:38:EB:C6:9D:99:05:95:58:1B
Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial: 08F3
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/35F78322157A11F1B5E2F6BC3D3D8C67.roa
Signing time: Sun 01 Mar 2026 14:23:26 +0000
ROA not before: Sun 01 Mar 2026 14:23:26 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154047
IP address blocks: 182.255.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 15:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2291 (0x8f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Validity
Not Before: Mar 1 14:23:26 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a44bde-3e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:24:9f:a2:ea:0e:34:68:92:e2:36:18:f7:1e:
b4:f5:d6:58:bb:00:13:2e:bb:a4:eb:ae:6a:cd:c4:
83:f4:76:dd:49:9c:bb:84:98:a3:ba:70:6c:ff:2e:
36:79:4c:5f:41:bd:47:de:9c:a1:65:84:80:50:fd:
4d:c9:06:0b:e9:53:14:51:8c:da:9f:2c:7e:00:fb:
b9:28:22:dc:f7:95:33:89:c5:c3:b0:2c:0a:14:84:
86:34:47:56:b7:d0:65:f6:4e:b1:c4:45:87:4b:1a:
4e:bf:3d:76:57:60:11:1a:c9:b3:04:62:a6:02:fa:
bc:9a:30:3e:1d:5b:7c:b9:ba:a5:43:12:cb:12:da:
e7:65:46:39:7c:0d:0e:f0:9a:9c:43:15:44:3a:66:
d1:bc:1a:18:e3:ce:27:d1:6d:8e:86:0f:84:a7:dc:
60:4f:d8:a2:18:4a:68:fc:78:70:c2:f0:72:b3:20:
2d:34:fd:56:a5:94:84:d9:ef:91:34:d5:43:2d:64:
a0:c4:1a:5e:e5:78:a9:3a:a6:05:c6:46:48:2d:0f:
01:88:97:86:80:e9:25:18:64:68:d9:97:66:eb:10:
70:4d:20:a9:f7:ee:79:0f:1b:f3:07:00:5c:9d:88:
de:ea:bf:7a:03:e3:a8:e8:bd:26:56:b4:9e:1b:92:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CC:4C:EB:16:91:C4:0B:D6:B7:06:38:EB:C6:9D:99:05:95:58:1B
X509v3 Authority Key Identifier:
keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/35F78322157A11F1B5E2F6BC3D3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
182.255.62.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:84:f9:75:d5:8b:11:5d:7b:aa:b7:85:b3:30:f0:53:1a:00:
1f:91:61:c5:e5:d3:62:7a:75:24:74:44:ea:c1:98:f4:ff:84:
d4:86:df:f6:da:73:80:83:cc:46:7c:80:ae:0c:b1:c3:d4:5f:
36:cb:b2:f4:9e:94:23:8c:0b:44:f3:14:aa:64:2b:fa:ae:ed:
fa:99:89:d1:f1:59:68:01:57:d6:f4:12:2a:c6:a0:76:41:35:
2e:e7:f7:18:52:5f:bb:09:c2:db:7c:38:bf:56:bf:36:96:6d:
a2:ce:1e:d4:b7:26:94:5b:2d:e2:b9:c1:87:70:e2:65:28:c9:
4e:ff:52:87:4a:f1:da:a3:f9:96:89:77:bb:32:fd:64:3e:b3:
6d:47:48:3b:24:1d:2d:b1:7a:30:75:6d:01:7b:3e:21:82:fc:
f2:87:ac:b3:7a:eb:7d:76:9e:9c:94:6f:08:9f:0e:63:93:35:
d5:6c:0a:7b:f1:d5:59:09:dd:30:25:20:26:8a:27:54:0f:cd:
69:f9:81:22:b1:53:1e:59:b0:6d:04:f3:12:c3:22:1b:5a:24:
3f:d8:9a:96:28:ee:66:cc:05:1e:28:4d:0e:0b:0d:90:90:0c:
35:ab:24:fc:2c:bb:c3:ff:45:1c:ad:ff:5c:14:b7:49:b7:4d:
e1:b8:b9:ec
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2
OTQyNDE2RDEwHhcNMjYwMzAxMTQyMzI2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGJkZS0zZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6SSfouoONGiS4jYY9x609dZYuwATLruk665qzcSD9HbdSZy7hJijunBs/y42
eUxfQb1H3pyhZYSAUP1NyQYL6VMUUYzanyx+APu5KCLc95UzicXDsCwKFISGNEdW
t9Bl9k6xxEWHSxpOvz12V2ARGsmzBGKmAvq8mjA+HVt8ubqlQxLLEtrnZUY5fA0O
8JqcQxVEOmbRvBoY484n0W2Ohg+Ep9xgT9iiGEpo/HhwwvBysyAtNP1WpZSE2e+R
NNVDLWSgxBpe5XipOqYFxkZILQ8BiJeGgOklGGRo2Zdm6xBwTSCp9+55DxvzBwBc
nYje6r96A+Oo6L0mVrSeG5LS4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFODMTOsW
kcQL1rcGOOvGnZkFlVgbMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND
OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG
dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTU0Q0YvRDhGM0FDQUNDQzhGMTFFQUJDMUYxNDQyQzRGOUFFMDIvMzVGNzgzMjIx
NTdBMTFGMUI1RTJGNkJDM0QzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBtv8+MA0GCSqGSIb3DQEBCwUAA4IBAQAahPl11YsRXXuqt4WzMPBT
GgAfkWHF5dNienUkdETqwZj0/4TUht/22nOAg8xGfICuDLHD1F82y7L0npQjjAtE
8xSqZCv6ru36mYnR8VloAVfW9BIqxqB2QTUu5/cYUl+7CcLbfDi/Vr82lm2izh7U
tyaUWy3iucGHcOJlKMlO/1KHSvHao/mWiXe7Mv1kPrNtR0g7JB0tsXowdW0Bez4h
gvzyh6yzeut9dp6clG8Inw5jkzXVbAp78dVZCd0wJSAmiidUD81p+YEisVMeWbBt
BPMSwyIbWiQ/2JqWKO5mzAUeKE0OCw2QkAw1qyT8LLvD/0Ucrf9cFLdJt03huLns
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:00 2026 by rpki-client