
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/32091726626D11ED87BDAC82C4F9AE02.roa
File: 32091726626D11ED87BDAC82C4F9AE02.roa (raw, json)
Hash identifier: tRzDK1lpJPb8snKHWE5J6PryQiVB6dEqDWNN+haxi1k=
Subject key identifier: 71:FC:E4:08:E3:54:46:03:86:1B:38:18:08:43:F8:77:ED:26:95:AD
Certificate issuer: /CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507
Certificate serial: 025C
Authority key identifier: 91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/32091726626D11ED87BDAC82C4F9AE02.roa
Signing time: Thu 29 Jan 2026 01:21:37 +0000
ROA not before: Thu 29 Jan 2026 01:21:37 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 150406
IP address blocks: 103.35.176.0/23 maxlen: 23
103.35.176.0/24 maxlen: 24
103.35.177.0/24 maxlen: 24
2001:df1:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl
rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F4D3, serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507
Validity
Not Before: Jan 29 01:21:37 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=697ab621-019a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:9c:c6:cb:6d:1d:a5:5d:de:41:52:5e:9d:
bc:39:86:51:96:55:9f:19:74:32:32:2a:3f:4f:61:
06:a2:f1:73:10:bc:14:6d:c9:d8:5d:1f:ab:db:00:
df:ec:c2:77:c5:28:43:e3:54:6c:72:e1:ef:85:2e:
a6:6b:20:56:56:48:af:55:47:89:f4:b4:92:14:69:
db:1f:81:39:fc:1a:fd:68:8e:a3:e3:5e:3e:e8:c6:
d3:e0:2b:d9:88:ac:3d:ee:54:9e:74:2b:50:d6:63:
9e:5e:fd:50:c5:be:ff:c8:67:ee:57:4e:79:b7:24:
1d:fd:e8:5e:7e:56:34:96:4e:bd:1c:4f:c2:37:ba:
90:05:3a:7c:eb:37:e2:f7:e7:bb:59:e2:a1:b4:d6:
a2:e8:78:58:fe:b7:57:d8:13:4e:87:55:11:c1:00:
33:46:2a:8b:01:0d:fc:55:0b:e8:a4:5f:10:d7:20:
29:f9:85:f3:0f:0e:1e:98:74:f2:25:07:86:35:16:
4d:cb:34:b2:06:d8:8e:db:8a:80:5a:0d:0d:61:16:
92:5a:e8:93:a1:85:09:9b:58:fa:c4:08:9f:d7:7b:
09:25:aa:39:e3:8a:f2:11:e2:d9:c1:bf:4c:51:8a:
d0:c3:ca:fe:0e:db:32:86:2c:c7:68:6b:ac:23:ca:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FC:E4:08:E3:54:46:03:86:1B:38:18:08:43:F8:77:ED:26:95:AD
X509v3 Authority Key Identifier:
keyid:91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/32091726626D11ED87BDAC82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.35.176.0/23
IPv6:
2001:df1:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
22:5f:ad:8e:8b:09:e7:ff:ea:b1:7f:40:48:48:dd:8c:b2:51:
fa:14:87:31:bb:b9:1b:65:4f:38:95:8b:39:3a:fc:ad:bb:1d:
eb:28:50:7e:ab:94:80:e5:3d:c1:c2:f1:6a:a5:43:c7:3a:95:
17:ed:31:ad:1f:d8:b6:db:b2:a6:12:87:d9:ea:52:05:4e:03:
23:d8:e7:fd:5e:93:75:6c:7b:78:16:ff:89:fb:74:ad:8f:26:
57:db:05:f7:20:aa:7e:af:04:2b:81:14:e7:37:ba:6a:a3:80:
d4:29:7e:4f:73:b0:e9:54:04:32:26:4a:34:23:6a:05:a4:8d:
44:dd:3a:c7:fa:db:a9:a9:12:8d:de:de:10:17:c1:37:c4:1d:
21:45:9c:b1:50:be:4e:88:26:e4:ae:f7:11:3c:ac:7f:01:d2:
01:f0:55:e4:c1:4b:b2:95:85:04:0f:aa:ba:ef:46:32:61:5d:
92:e6:90:3f:ea:f2:49:8c:42:9a:96:66:47:6a:3c:8b:30:f0:
6c:05:7b:a1:ca:b4:93:82:27:f7:df:de:42:ff:27:9b:04:6e:
12:c2:7d:a4:14:c1:0a:bc:bc:6c:24:bc:19:1f:4c:83:68:62:
4c:37:0f:fa:0b:aa:c2:73:29:50:70:e6:d1:6f:7e:c2:cd:2f:
9f:35:9a:ff
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
N0Y0RDMxMTAvBgNVBAUTKDkxMjZFRkU1MEQ1RTNCNTMxRkVFRTQ1NDlBQjMwQkZF
N0E1NDU1MDcwHhcNMjYwMTI5MDEyMTM3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdhYjYyMS0wMTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArV2cxsttHaVd3kFSXp28OYZRllWfGXQyMio/T2EGovFzELwUbcnYXR+r2wDf
7MJ3xShD41RscuHvhS6mayBWVkivVUeJ9LSSFGnbH4E5/Br9aI6j414+6MbT4CvZ
iKw97lSedCtQ1mOeXv1Qxb7/yGfuV055tyQd/eheflY0lk69HE/CN7qQBTp86zfi
9+e7WeKhtNai6HhY/rdX2BNOh1URwQAzRiqLAQ38VQvopF8Q1yAp+YXzDw4emHTy
JQeGNRZNyzSyBtiO24qAWg0NYRaSWuiToYUJm1j6xAif13sJJao544ryEeLZwb9M
UYrQw8r+DtsyhizHaGusI8pGLwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHH85Ajj
VEYDhhs4GAhD+HftJpWtMB8GA1UdIwQYMBaAFJEm7+UNXjtTH+7kVJqzC/56VFUH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjREMy82ODAzNEM2ODYy
NjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8xTWY3dVJVbXJNTF9ucFVW
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tTYnY1UTFlTzFNZjd1UlVtck1MX25wVVZRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0Y0RDMvNjgwMzRDNjg2MjY2MTFFRDgyNDJDNzg2QzRGOUFFMDIvMzIwOTE3MjY2
MjZEMTFFRDg3QkRBQzgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnI7AwDwQCAAIwCQMHACABDfGAwDANBgkqhkiG9w0BAQsF
AAOCAQEAIl+tjosJ5//qsX9ASEjdjLJR+hSHMbu5G2VPOJWLOTr8rbsd6yhQfquU
gOU9wcLxaqVDxzqVF+0xrR/YttuyphKH2epSBU4DI9jn/V6TdWx7eBb/ift0rY8m
V9sF9yCqfq8EK4EU5ze6aqOA1Cl+T3Ow6VQEMiZKNCNqBaSNRN06x/rbqakSjd7e
EBfBN8QdIUWcsVC+Togm5K73ETysfwHSAfBV5MFLspWFBA+quu9GMmFdkuaQP+ry
SYxCmpZmR2o8izDwbAV7ocq0k4In99/eQv8nmwRuEsJ9pBTBCry8bCS8GR9Mg2hi
TDcP+guqwnMpUHDm0W9+ws0vnzWa/w==
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:42:22 2026 by rpki-client