
$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DB386CDAB0F811E595E0F761C4F9AE02.roa
File: DB386CDAB0F811E595E0F761C4F9AE02.roa (raw, json)
Hash identifier: iAjJeW7mv0SQMiUZA706Y7e5Dpr+uJ1EKTAhmx1r1Ho=
Subject key identifier: 29:E2:83:1E:3C:19:36:81:12:E2:5F:F9:F4:57:A2:BC:A1:C5:4A:66
Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial: 35AB
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DB386CDAB0F811E595E0F761C4F9AE02.roa
Signing time: Sat 04 Apr 2026 15:10:15 +0000
ROA not before: Sat 04 Apr 2026 15:10:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45315
IP address blocks: 27.50.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13739 (0x35ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Validity
Not Before: Apr 4 15:10:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d129d7-4643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:71:cd:61:5a:ec:11:64:c3:58:df:8e:26:c8:
04:77:99:0d:8b:44:03:5a:bc:bb:40:b8:11:73:89:
87:c2:11:8f:35:6f:34:c9:4f:1b:92:f4:e3:3a:2c:
ab:9f:58:7c:9a:66:4c:57:88:48:0e:69:71:29:2d:
19:40:f9:d2:d0:bc:9d:6f:52:4b:26:11:61:e1:41:
14:2b:5b:de:f2:56:56:2d:52:a2:6a:67:f9:d1:9c:
e8:b9:1d:14:11:02:da:53:f1:2f:34:2c:c5:aa:64:
41:2e:e5:37:a4:22:a1:8d:20:dc:6e:f7:fc:6f:31:
47:b7:67:3c:96:15:86:b9:28:29:a3:f3:30:8a:7f:
b9:24:dc:5b:df:d9:73:ee:4c:16:4f:e2:bc:f2:c3:
dd:9d:93:5c:28:90:00:9b:34:1d:b4:78:c3:c6:bd:
24:13:35:a2:58:1f:c8:89:08:cd:96:ff:0a:9e:ff:
7d:99:42:06:1c:e9:4e:a8:33:be:87:fb:c9:43:db:
b4:3a:9e:46:91:fc:68:02:c7:09:91:d1:e6:3d:c7:
26:0c:2c:e9:11:d0:88:8f:b0:df:8f:b7:39:26:cf:
e7:15:fd:0b:5f:56:ce:d5:a6:db:67:ea:07:93:ff:
81:38:4d:66:23:6c:c2:ae:7b:ea:dd:3a:a3:8f:b4:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E2:83:1E:3C:19:36:81:12:E2:5F:F9:F4:57:A2:BC:A1:C5:4A:66
X509v3 Authority Key Identifier:
keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DB386CDAB0F811E595E0F761C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.50.35.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b0:13:e7:9a:a7:b8:83:32:6a:d9:14:99:ca:d3:ca:c9:a3:
cd:a2:f5:90:e4:89:38:fa:0a:62:65:d1:96:1c:41:45:1e:35:
9b:21:fd:cb:8d:91:87:e0:c5:07:6f:eb:b7:0a:81:af:26:ea:
61:b3:92:1e:36:33:87:23:30:b2:de:f7:4f:12:06:d6:da:06:
bd:1d:9a:c7:9f:17:07:0f:cc:1b:ca:60:34:0a:12:03:03:ac:
b0:55:b6:45:18:1a:4b:a0:c3:e0:d6:cf:53:8f:f4:41:b5:31:
21:12:a2:4e:c0:e8:bd:b1:a1:2f:87:5c:17:b8:45:59:a7:c0:
2a:36:cd:db:c2:e3:62:2a:72:62:90:1a:2a:d2:8b:fc:d5:97:
ac:c7:c1:3d:2c:d9:d5:f1:49:c6:5d:e1:01:14:92:04:96:0f:
24:89:15:a9:45:ef:fd:a0:6c:9e:b5:2b:7b:db:a2:ec:3a:9e:
be:60:3f:12:75:6c:6f:29:f1:7c:1b:a4:90:00:bb:3b:d5:58:
5c:2a:61:6d:9d:c0:5c:d8:64:5d:64:3c:b7:d5:e5:85:35:24:
da:c7:0f:4c:4d:b5:1f:7c:00:c1:8e:73:18:07:b6:0b:28:26:
cb:dc:4a:fa:0f:dc:e6:0b:ef:7a:1e:54:67:4b:64:79:dc:d2:
6f:3b:53:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:51 2026 by rpki-client