
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/FEE1AED6C77311EEB751AE2CC4F9AE02.roa
File: FEE1AED6C77311EEB751AE2CC4F9AE02.roa (raw, json)
Hash identifier: 8HV+CF2QY+0SGwOprpixMRQUP+H8yDOrQpL48BXye6E=
Subject key identifier: A1:A5:45:09:FC:66:09:AD:72:18:1E:44:B1:3C:E4:41:52:18:32:6F
Certificate issuer: /CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
Certificate serial: 055B
Authority key identifier: 54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/FEE1AED6C77311EEB751AE2CC4F9AE02.roa
Signing time: Thu 10 Sep 2026 23:49:00 +0000
ROA not before: Thu 10 Sep 2026 23:49:00 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 141987
IP address blocks: 103.170.206.0/23 maxlen: 23
2001:df7:2980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl
rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:15:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1371 (0x55b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEBFF, serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
Validity
Not Before: Sep 10 23:49:00 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa341ec-fe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:42:b5:7f:f0:9c:1a:b1:04:06:61:2f:4e:
41:94:db:fa:e9:4a:8f:5d:cf:62:2f:b7:f5:f3:2e:
f1:53:49:eb:ec:40:36:38:eb:6d:86:d4:99:6d:2e:
21:e2:60:5d:5f:18:57:b1:e5:45:bf:7f:97:13:62:
e4:a4:8a:bf:db:bd:8f:a9:20:45:14:3f:18:a2:44:
0f:92:e3:01:e2:6f:83:d1:4d:b4:e1:df:82:7d:2a:
b9:40:3c:b6:0b:6e:c1:54:7e:14:f8:4d:88:1c:68:
9b:3f:a3:1b:17:58:31:2d:c4:05:6a:e9:84:92:30:
95:fc:28:d4:05:ca:05:1f:96:ff:a2:0b:eb:1f:db:
f4:1d:f2:03:c2:86:ec:e5:b5:95:97:42:95:95:3a:
17:0e:89:ad:1b:7d:ef:7f:8c:fa:3f:25:08:26:8a:
42:09:9b:89:8a:2c:33:0e:eb:73:6d:42:ac:5e:17:
ca:d9:56:07:f4:0e:2b:69:7b:6d:e6:80:42:36:bc:
04:dd:76:c5:20:44:63:f7:12:65:52:bb:42:56:1a:
e9:0a:96:8d:61:36:5f:d7:4f:10:fc:14:69:e3:e9:
77:80:6d:3b:e2:83:5e:8c:ea:29:72:ff:9e:7a:ee:
04:c7:83:f9:bb:cc:ac:72:2b:8f:a3:42:30:5d:f5:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A5:45:09:FC:66:09:AD:72:18:1E:44:B1:3C:E4:41:52:18:32:6F
X509v3 Authority Key Identifier:
keyid:54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/FEE1AED6C77311EEB751AE2CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.206.0/23
IPv6:
2001:df7:2980::/48
Signature Algorithm: sha256WithRSAEncryption
76:1f:7c:55:31:fc:f7:9b:ea:b8:34:16:23:0e:31:20:99:f9:
41:2f:df:28:56:16:ef:76:af:bb:46:47:07:fb:de:6a:1e:03:
0c:3c:88:20:5b:be:77:8b:58:52:ab:0a:ac:28:8b:32:5c:cf:
83:70:c6:33:f7:69:21:93:cb:f3:71:2b:e0:fe:01:bb:63:2b:
a4:ef:66:1b:d2:01:cc:25:00:24:c2:48:ee:38:d4:b1:82:0f:
e1:5b:0e:1e:50:a4:cf:a6:85:d9:36:91:32:88:89:b4:b9:16:
0e:2b:27:1a:a7:74:7d:4c:f5:ec:29:4e:aa:e8:87:58:71:cc:
dc:86:98:43:33:5b:98:29:7c:ad:30:35:b5:e8:12:9e:53:52:
97:78:a9:ff:d2:c0:54:ef:46:e0:07:ff:ed:ee:b7:ca:1b:51:
61:74:0e:34:05:3b:4a:ea:9a:57:04:4a:17:f3:3c:d7:c1:fd:
d5:3c:21:de:14:94:5a:2c:0c:5f:ee:70:d9:be:a4:c4:66:6c:
7c:de:12:d7:4e:cb:7e:bb:0f:19:92:ae:5b:9c:b1:19:99:8c:
dd:70:6e:1b:b1:0c:46:45:de:e0:64:0b:44:3c:76:c7:65:06:
6b:23:f3:c3:bf:c7:ce:50:8e:e3:27:3d:0f:ea:5e:7d:8f:53:
48:09:d9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:12:16 2026 by rpki-client