
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/C735E33E1CB511EAB25B4768C4F9AE02.roa
File: C735E33E1CB511EAB25B4768C4F9AE02.roa (raw, json)
Hash identifier: lgr8DtsUKJkJkisCQuG7lau3AEMsxOnGwC/QoSLAc10=
Subject key identifier: 5E:96:EA:43:2F:A5:85:B6:88:89:F5:4F:C0:6F:FF:30:97:F9:19:EC
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 1001
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/C735E33E1CB511EAB25B4768C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:47:07 +0000
ROA not before: Wed 14 Jan 2026 18:15:10 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 393513
IP address blocks: 61.14.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4097 (0x1001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Jan 14 18:15:10 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a489ab-ea31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:32:3e:91:9d:cf:06:b1:db:77:a0:69:f3:
ae:91:5e:1f:5b:84:fc:02:e6:89:dc:8a:4a:68:fa:
3d:93:f0:b9:f2:bd:9f:81:52:5f:b0:f0:7e:f4:e0:
f4:33:68:91:97:23:03:0d:f7:16:b9:0c:b5:d9:82:
a0:18:ef:68:fa:ac:cb:0d:dc:b4:a5:7c:77:c6:ee:
4a:a1:47:64:9b:da:98:26:49:53:a6:7a:6d:1d:8e:
0d:11:4e:a3:5f:37:b2:6a:64:be:c1:8d:6c:80:ee:
22:bd:d8:39:47:19:ad:e7:c7:cb:74:23:09:2d:a9:
b6:e7:e9:08:d5:fa:b2:51:08:34:d3:4f:0d:2a:66:
5d:d1:95:12:cc:6c:6a:3c:24:53:7f:a7:4c:bb:75:
0e:88:f5:39:0d:6a:d3:d1:c9:7f:cd:08:7f:47:d8:
7e:ca:9f:16:62:bf:c3:f0:bc:66:53:ba:34:54:7c:
39:aa:f9:4b:41:81:1c:2d:06:5b:33:29:0a:07:2f:
fe:5b:5e:14:7e:87:b6:e1:55:c7:42:ba:20:6f:22:
f6:5a:a1:74:41:ef:c4:f3:63:89:a8:0d:14:19:dd:
b2:25:08:16:a2:f0:c6:34:85:78:c4:42:61:8a:51:
74:a3:c1:2e:48:34:09:f4:65:2f:17:10:2a:71:7b:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:96:EA:43:2F:A5:85:B6:88:89:F5:4F:C0:6F:FF:30:97:F9:19:EC
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/C735E33E1CB511EAB25B4768C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.14.164.0/24
Signature Algorithm: sha256WithRSAEncryption
50:bd:b7:0a:62:27:07:ce:29:fc:a7:2c:bd:a7:65:f6:72:9d:
a9:ef:29:8d:a8:00:5e:56:d1:97:2d:ea:0a:33:be:3a:7f:1a:
06:2d:4b:82:70:3a:7b:60:9d:36:d0:e7:87:00:b0:3f:f2:7b:
99:0a:c3:10:ee:0f:49:cc:7e:2b:91:c9:f0:2f:02:e8:37:60:
97:83:0f:c9:d7:ee:2f:bc:65:d8:2c:62:2f:75:6f:1e:fb:4f:
d9:eb:77:c2:db:82:69:44:3c:63:6d:ed:25:a1:ae:14:0d:1c:
87:dc:9e:3a:aa:35:49:f7:5e:01:6f:7c:ae:16:80:71:71:00:
5a:1e:b9:6c:42:df:da:3d:64:36:c3:65:bd:bf:2a:8f:ea:f7:
d8:55:88:ad:93:b7:54:ad:d9:e8:86:91:d4:e0:bd:77:b3:ab:
18:55:3d:80:56:db:f3:7b:02:b6:78:3f:35:84:52:a0:26:6c:
25:5f:7c:36:68:8c:c6:88:f2:df:d7:26:01:a0:82:06:05:d6:
88:87:86:ff:51:b9:6c:1e:1e:7f:41:24:ee:c9:05:bf:dc:ba:
d0:a2:5d:22:ba:a7:72:b2:8d:67:6a:f0:a5:9e:72:7d:e2:fb:
00:52:df:a3:c8:ab:8b:36:d8:22:b4:b1:f7:92:df:86:15:e0:
69:6c:e4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:30:13 2026 by rpki-client