
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/8F35765ACF5811F085DD836EC4F9AE02.roa
File: 8F35765ACF5811F085DD836EC4F9AE02.roa (raw, json)
Hash identifier: Rt4TGbr/K+WJ5nQlhD3lcCPl9EyJK1zP7OfMfktiw14=
Subject key identifier: 50:0D:2D:69:D4:2E:A5:13:45:93:FE:7B:9B:D9:0C:2A:12:C2:D0:D8
Certificate issuer: /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
Certificate serial: 70
Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/8F35765ACF5811F085DD836EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:44:22 +0000
ROA not before: Tue 02 Dec 2025 08:26:12 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 151786
IP address blocks: 202.136.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl
rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 06:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
Validity
Not Before: Dec 2 08:26:12 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a59436-165b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:fc:a3:95:31:3f:cd:e7:e5:cb:18:84:a1:
ef:12:2d:a7:25:2f:dd:78:48:ec:d3:0e:f5:ed:f6:
50:27:87:2e:23:68:50:c8:e9:e1:7e:d7:62:f9:69:
54:cd:78:8b:35:1d:a9:9b:f7:50:71:30:75:04:7a:
22:ef:b1:3e:15:46:4c:74:78:a7:f5:cc:81:98:bc:
ca:37:f8:5a:20:7d:e5:c8:71:5b:64:83:f9:2f:65:
c5:c2:9a:5f:54:1c:b9:2d:92:2d:6d:92:a3:31:44:
40:a4:5c:bc:de:61:da:0f:21:cc:41:59:dc:a2:aa:
be:33:99:5e:18:51:88:2f:d6:94:12:61:77:da:c0:
6e:1e:97:e4:15:32:64:9d:f5:b1:90:d7:74:74:38:
e8:d1:6d:61:32:2e:c2:b4:59:5c:ca:e9:f7:f8:d2:
24:23:fb:75:b5:9e:e9:ce:2d:e8:c7:94:64:39:cb:
82:55:5c:4b:c6:c6:ee:61:89:b4:0e:39:62:65:9f:
37:80:48:f8:fc:40:a7:88:04:91:f3:31:ff:92:54:
f4:06:a1:a2:79:d7:af:03:56:ff:76:88:f3:c2:c6:
af:17:27:88:49:07:0b:15:c0:46:52:c3:d5:c3:aa:
ef:42:6f:56:29:37:04:d6:94:a5:a2:ca:8a:41:aa:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0D:2D:69:D4:2E:A5:13:45:93:FE:7B:9B:D9:0C:2A:12:C2:D0:D8
X509v3 Authority Key Identifier:
keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/8F35765ACF5811F085DD836EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.136.75.0/24
Signature Algorithm: sha256WithRSAEncryption
10:4d:a5:17:c5:8f:cc:55:a1:7b:5d:e5:8a:c2:21:44:de:be:
67:32:84:39:82:e6:32:c3:04:3f:ce:2d:b3:dd:e7:b6:ee:a9:
1c:1f:b9:a8:40:b6:dd:00:34:3b:ce:99:64:34:2e:ec:a3:40:
65:7f:86:83:0f:cf:c0:81:9c:06:48:0a:22:88:ed:cc:d7:3b:
41:4c:f4:08:e4:30:38:01:cb:c5:de:4d:bd:19:07:8f:08:97:
7a:c7:d1:ab:4e:e8:6b:5d:83:32:8e:d7:69:4e:cd:45:36:6b:
26:ed:7f:bc:00:d9:16:32:f8:02:ee:bc:ad:ba:6e:39:ad:5d:
f0:c0:a8:a9:88:c3:e0:1f:f5:4a:eb:50:8f:f8:74:30:8c:9a:
72:ef:60:c1:d5:06:8b:9c:f6:d4:fa:08:89:51:2a:39:f6:53:
c6:31:74:69:6b:d6:60:81:86:e2:1c:3d:7d:8b:a3:bb:e4:f3:
1d:55:01:24:ab:a7:4e:b6:49:73:58:72:13:c4:56:4e:11:76:
6c:97:51:72:bc:66:7d:fc:4d:b8:f0:5b:62:8c:e8:0b:3e:ac:
94:7e:7d:f2:61:26:0e:35:09:e7:27:35:7a:a0:92:8a:2f:ee:
66:bb:aa:fc:ff:33:25:11:46:b1:7d:b6:d9:7b:b6:a8:b1:c5:
3a:6e:68:19
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MzA4NzExMC8GA1UEBRMoODUxMDBFNUExRkJBRTVGRTFBNjVDQkYxNTczNDEzMEE4
RTU0MUJCMjAeFw0yNTEyMDIwODI2MTJaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTU5NDM2LTE2NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClRvyjlTE/zeflyxiEoe8SLaclL914SOzTDvXt9lAnhy4jaFDI6eF+12L5aVTN
eIs1Hamb91BxMHUEeiLvsT4VRkx0eKf1zIGYvMo3+FogfeXIcVtkg/kvZcXCml9U
HLktki1tkqMxRECkXLzeYdoPIcxBWdyiqr4zmV4YUYgv1pQSYXfawG4el+QVMmSd
9bGQ13R0OOjRbWEyLsK0WVzK6ff40iQj+3W1nunOLejHlGQ5y4JVXEvGxu5hibQO
OWJlnzeASPj8QKeIBJHzMf+SVPQGoaJ5168DVv92iPPCxq8XJ4hJBwsVwEZSw9XD
qu9Cb1YpNwTWlKWiyopBqim9AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUUA0tadQu
pRNFk/57m9kMKhLC0NgwHwYDVR0jBBgwFoAUhRAOWh+65f4aZcvxVzQTCo5UG7Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMDg3LzQ4ODgzMTMyOEVB
QTExRjBCODM1Mjk0OUM0RjlBRTAyL2hSQU9XaC02NWY0YVpjdnhWelFUQ281VUc3
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaFJBT1doLTY1ZjRhWmN2eFZ6UVRDbzVVRzdJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzA4Ny80ODg4MzEzMjhFQUExMUYwQjgzNTI5NDlDNEY5QUUwMi84RjM1NzY1QUNG
NTgxMUYwODVERDgzNkVDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADKiEswDQYJKoZIhvcNAQELBQADggEBABBNpRfFj8xVoXtd5YrCIUTe
vmcyhDmC5jLDBD/OLbPd57buqRwfuahAtt0ANDvOmWQ0LuyjQGV/hoMPz8CBnAZI
CiKI7czXO0FM9AjkMDgBy8XeTb0ZB48Il3rH0atO6GtdgzKO12lOzUU2aybtf7wA
2RYy+ALuvK26bjmtXfDAqKmIw+Af9UrrUI/4dDCMmnLvYMHVBouc9tT6CIlRKjn2
U8YxdGlr1mCBhuIcPX2Lo7vk8x1VASSrp062SXNYchPEVk4RdmyXUXK8Zn38Tbjw
W2KM6As+rJR+ffJhJg41CecnNXqgkoov7ma7qvz/MyURRrF9ttl7tqixxTpuaBk=
-----END CERTIFICATE-----
Generated at Fri Mar 13 19:35:01 2026 by rpki-client