
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F35347DC721311EFA9D7CA3AC4F9AE02.roa
File: F35347DC721311EFA9D7CA3AC4F9AE02.roa (raw, json)
Hash identifier: UKke8OeB+p7yp6L3xMVU+tuxkR9Lw43TvuvyxlaIfBk=
Subject key identifier: 3F:03:45:8C:5A:AA:10:C5:7A:E0:28:03:AD:B0:D6:2E:CA:BD:A7:DF
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 025E
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F35347DC721311EFA9D7CA3AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:17:04 +0000
ROA not before: Wed 31 Dec 2025 04:24:31 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 150107
IP address blocks: 202.29.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 04:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:31 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a490b0-3d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:73:a0:96:f8:6c:47:3d:d7:07:1e:19:a8:
4d:c1:a3:3d:2e:59:80:78:a7:9c:64:fc:80:ab:ad:
4e:6b:97:1a:51:a4:f4:fe:ae:35:a4:1a:3e:20:db:
2f:e5:35:ea:63:8c:36:f6:00:bd:20:b3:e3:c5:90:
93:45:fe:ab:05:f9:84:a5:dd:d4:bc:70:48:d2:29:
e8:f6:c6:f2:c8:0c:e9:0c:94:2b:90:d6:a7:97:b6:
7c:d6:44:b4:0d:46:45:c9:da:e7:21:47:65:62:58:
c1:60:b2:82:70:b9:bc:3e:f6:b4:e5:fe:85:8f:68:
80:4c:d8:9c:3b:e4:1f:48:57:b9:aa:07:c7:86:8b:
20:9f:a5:37:ec:99:94:c4:a6:a8:7f:ee:2c:7b:4a:
2e:c1:1f:d9:26:8d:e2:d9:d2:f4:f6:9c:1a:3b:9b:
ec:28:cf:fc:90:a2:b1:e9:99:4d:7b:0a:29:55:83:
c0:6f:f5:9d:e1:8a:ef:12:e9:9b:79:8b:66:26:0e:
f6:78:bb:be:ce:1e:0b:3c:e0:aa:2a:2f:83:6a:9e:
15:35:b7:ec:49:d4:23:68:53:d2:64:66:46:1d:50:
ab:bd:3a:22:6e:64:98:b8:ad:23:05:1b:e2:0e:3e:
23:f9:10:aa:a6:af:eb:c0:99:b2:36:8b:5c:9a:6a:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:03:45:8C:5A:AA:10:C5:7A:E0:28:03:AD:B0:D6:2E:CA:BD:A7:DF
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F35347DC721311EFA9D7CA3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.29.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ff:0d:32:eb:c7:ad:af:7b:5e:b3:aa:c8:67:42:07:74:36:
d4:bd:20:c7:8a:1a:b4:f2:01:6b:62:78:87:8b:d6:2e:61:4e:
58:36:78:0b:f6:4b:ce:9c:a1:e9:db:a9:2f:a3:00:37:b9:56:
b1:fe:d9:0d:95:f5:1e:42:ce:b4:a2:c4:dc:76:1d:af:e4:73:
a0:4e:43:12:59:8e:5a:ed:2e:35:3e:89:1f:77:02:86:4a:bf:
1c:00:03:2a:32:4d:ea:08:98:5d:17:d9:b0:30:28:0a:a1:cf:
73:17:6d:dd:97:19:2b:0d:ba:18:58:3b:8e:af:f3:21:41:37:
f5:3d:f8:84:bc:4b:e1:55:39:3f:2e:be:00:e3:14:19:ce:35:
0a:d5:4e:80:5e:b7:92:e9:8c:e8:e7:fe:f5:89:79:fc:e3:d7:
c4:0b:5e:14:09:1d:b3:04:8a:25:f3:cf:db:b6:72:cc:f7:7e:
d6:60:9a:81:d9:19:95:bb:e2:e9:68:71:66:6d:c8:6a:5e:85:
42:0c:08:25:f0:89:bb:28:3e:3d:86:b8:34:ef:8d:57:3a:25:
cc:5f:cb:71:f7:40:be:23:d8:1e:c6:a4:be:b6:35:13:85:ed:
f1:c2:54:c8:b7:36:76:85:3c:03:e5:d1:e0:29:c5:35:25:ad:
4a:93:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:53:24 2026 by rpki-client