
$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/FC2AD5EE3F1E11F1AB154A9A91833773.roa
File: FC2AD5EE3F1E11F1AB154A9A91833773.roa (raw, json)
Hash identifier: frhSCj6zrH57k5fmrn6Ce1RuAMTqn30tY/7R+v5CiOg=
Subject key identifier: 24:67:A9:A1:42:49:BE:0F:5B:20:5F:BD:12:BD:35:86:FB:35:F3:2A
Certificate issuer: /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
Certificate serial: 0678
Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/FC2AD5EE3F1E11F1AB154A9A91833773.roa
Signing time: Thu 23 Apr 2026 14:16:14 +0000
ROA not before: Thu 23 Apr 2026 14:16:14 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 142157
IP address blocks: 103.167.18.0/23 maxlen: 23
103.167.18.0/24 maxlen: 24
103.167.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl
rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1656 (0x678)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91944AB, serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
Validity
Not Before: Apr 23 14:16:14 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69ea29ae-f808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:f7:c9:59:f2:c7:18:3e:c4:ac:2c:e5:32:
46:73:d2:37:76:e5:87:a4:6c:fe:6c:d9:85:2d:41:
50:09:0f:74:d5:ff:f3:40:bf:d7:36:67:c0:09:50:
2b:85:ba:ee:72:ac:30:04:d3:48:4b:05:79:f0:ff:
19:ab:1e:89:9c:03:06:a4:4a:5b:d2:7e:87:98:61:
a2:15:ee:e5:3c:8e:9c:c4:d4:dd:72:ed:bc:2b:13:
ad:7e:cc:0f:11:69:27:aa:d9:c1:7a:d9:ca:09:96:
72:3f:fc:f0:a8:3e:8c:8a:5c:82:d1:d0:bd:a8:d1:
15:e3:84:99:51:9f:2c:c2:7f:e1:f6:77:ee:2c:a9:
ad:a1:a7:09:1c:5f:57:55:0b:a0:f9:2b:55:1b:33:
9e:57:81:a2:4a:85:5e:62:67:34:eb:63:aa:e6:6f:
65:0b:04:b3:c7:3a:6b:ae:ea:d4:67:b0:41:a6:27:
56:57:10:ad:a1:e7:aa:81:8f:1e:a3:e5:52:dc:fe:
90:12:1c:59:c2:1d:ee:d9:de:a9:8f:36:e5:2e:f5:
89:6d:46:65:c9:92:f6:98:38:8c:95:14:9e:db:4d:
8f:17:e9:76:cf:27:7d:4b:ff:ca:d4:e9:a2:53:02:
ec:7c:e1:e8:d0:f4:77:82:63:9a:04:7a:11:5f:c6:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:67:A9:A1:42:49:BE:0F:5B:20:5F:BD:12:BD:35:86:FB:35:F3:2A
X509v3 Authority Key Identifier:
keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/FC2AD5EE3F1E11F1AB154A9A91833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.18.0/23
Signature Algorithm: sha256WithRSAEncryption
54:af:a6:5f:20:e8:3b:b0:3f:6f:e3:35:79:97:a1:8d:9f:2b:
29:69:14:df:83:aa:8c:37:5d:51:d7:93:d0:4f:47:29:0a:46:
3b:e3:20:4f:a3:0e:a5:0b:17:3b:6b:f7:8c:a6:cc:ce:45:59:
a6:05:33:30:83:5e:97:67:8a:93:f0:98:b1:a3:eb:8f:22:46:
4d:9e:45:b5:93:66:2e:d8:06:90:7d:12:a4:68:8b:5a:2a:32:
a5:a1:ee:3a:1c:8d:73:08:b2:e5:51:03:8b:37:fb:8e:98:78:
02:95:f6:16:a1:f8:ee:06:f4:d1:ea:55:50:4e:1b:cd:88:34:
7b:57:78:9b:c5:b4:bb:ed:86:99:b4:95:30:0a:a9:e7:a6:bd:
22:b3:5d:25:44:18:8f:05:d3:0f:b2:d3:1c:5b:fd:66:66:41:
01:aa:68:87:ba:04:53:98:80:54:d5:95:47:a8:ad:3c:70:f6:
c6:9b:e0:a2:79:80:cb:63:ac:4c:b8:9c:b0:ac:11:39:b8:41:
76:04:02:ad:56:ad:e9:4d:05:a6:1b:6f:b8:e5:4a:25:b3:7d:
76:a2:33:8e:e2:a9:46:20:d4:ea:e6:b1:9c:ce:59:3a:5e:f9:
d6:f1:b3:6d:09:5d:39:f6:6b:8f:ee:8a:6b:52:65:9e:a5:ef:
dc:d1:52:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:22 2026 by rpki-client