
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/FBDB9F4A57F911F0B7986D41C4F9AE02.roa
File: FBDB9F4A57F911F0B7986D41C4F9AE02.roa (raw, json)
Hash identifier: e4UjmrKJitpM4Vxaxw9KuUtr2QIytzgyUGtC5yL1UHY=
Subject key identifier: DB:8A:E6:E9:8F:CE:9D:E6:C4:D3:C6:EC:20:F5:7E:12:08:E1:DF:9D
Certificate issuer: /CN=A91BD614/serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0
Certificate serial: D0
Authority key identifier: 4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/FBDB9F4A57F911F0B7986D41C4F9AE02.roa
Signing time: Wed 29 Jul 2026 03:51:38 +0000
ROA not before: Wed 29 Jul 2026 03:51:38 +0000
ROA not after: Sat 28 Nov 2026 00:00:00 +0000
asID: 150797
IP address blocks: 103.109.8.0/23 maxlen: 24
2400:e8a0::/32 maxlen: 32
2400:e8a0::/36 maxlen: 36
2400:e8a0:1000::/36 maxlen: 36
2400:e8a0:2000::/36 maxlen: 36
2400:e8a0:3000::/36 maxlen: 36
2400:e8a0:4000::/36 maxlen: 36
2400:e8a0:5000::/36 maxlen: 36
2400:e8a0:6000::/36 maxlen: 36
2400:e8a0:7000::/36 maxlen: 36
2400:e8a0:8000::/36 maxlen: 36
2400:e8a0:9000::/36 maxlen: 36
2400:e8a0:a000::/36 maxlen: 36
2400:e8a0:b000::/36 maxlen: 36
2400:e8a0:c000::/36 maxlen: 36
2400:e8a0:d000::/36 maxlen: 36
2400:e8a0:e000::/36 maxlen: 36
2400:e8a0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl
rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD614, serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0
Validity
Not Before: Jul 29 03:51:38 2026 GMT
Not After : Nov 28 00:00:00 2026 GMT
Subject: CN=6a6978ca-6d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:0c:2f:f8:c7:5e:cd:bc:64:17:63:f3:da:
bd:f1:9d:85:65:9a:93:24:56:29:2e:e8:d0:d5:9d:
e7:27:18:9d:38:c8:92:31:f3:29:17:60:97:ea:50:
6f:99:fc:7a:0c:5b:81:6c:f6:5d:d6:3d:a5:71:f9:
27:54:06:ec:f0:8a:7d:72:88:27:d2:65:dc:98:32:
de:03:63:b1:9e:f7:61:5c:98:1e:43:96:b7:a6:5f:
95:4e:af:c5:18:6b:d6:ee:73:e2:27:d2:e1:3d:ff:
67:15:d4:cc:00:72:57:ef:b8:61:88:44:a8:f4:51:
6b:26:c2:3d:d2:e7:19:15:bc:64:2e:d0:08:6b:1d:
58:87:77:9b:de:ea:75:fa:e1:cf:71:7c:3d:74:a0:
c0:92:e9:49:9b:9a:aa:54:56:78:be:bd:9c:71:9d:
e5:b9:97:0b:8c:d6:16:c3:54:ef:b3:16:57:6e:93:
7c:91:12:fd:aa:5c:e8:ff:5c:05:3f:1e:63:d7:fd:
88:d7:b6:3f:db:8e:af:46:93:31:22:9d:61:69:be:
1c:33:e4:b5:1d:fb:09:86:9e:76:26:6c:8a:8c:ef:
13:61:b7:9d:89:60:e4:dc:8b:f1:42:70:45:6d:51:
53:61:21:c0:c3:3f:24:b7:7a:ea:42:28:6e:c9:05:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8A:E6:E9:8F:CE:9D:E6:C4:D3:C6:EC:20:F5:7E:12:08:E1:DF:9D
X509v3 Authority Key Identifier:
keyid:4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/FBDB9F4A57F911F0B7986D41C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.109.8.0/23
IPv6:
2400:e8a0::/32
Signature Algorithm: sha256WithRSAEncryption
b9:80:51:ed:a7:00:ce:8c:5d:80:6b:39:7b:d9:4c:5e:05:3d:
5f:e9:c1:99:ec:76:89:e6:03:60:6e:35:fe:f8:c4:71:c3:7c:
f7:2a:02:32:46:c5:53:8c:ad:b4:04:ee:6a:a0:5d:4c:16:95:
37:5d:0f:f6:83:3f:17:cb:9d:39:53:13:f8:81:a5:02:be:10:
78:20:ec:82:45:9a:60:aa:36:ab:81:c6:5a:35:1a:47:ce:fc:
d3:73:b1:3a:04:df:e2:f7:ae:1b:a2:f0:82:38:9b:b2:42:e1:
4a:e9:91:ba:14:fa:d9:94:46:b6:32:b3:6e:ef:ae:2d:ae:1a:
dc:17:47:42:05:34:ac:7a:bb:69:09:e2:4c:61:ef:42:bf:70:
83:30:42:7f:96:a8:8e:52:96:1d:b9:50:9b:61:a8:6e:18:ae:
c7:06:81:78:82:e4:2f:e2:10:ac:be:12:9e:e5:c9:01:9f:44:
96:d0:65:a5:70:7d:3a:74:57:38:20:10:7d:8f:52:8b:92:48:
b9:a8:09:f2:ea:16:1d:09:55:de:9e:57:a4:a1:c8:41:54:7e:
48:90:2d:80:47:19:8d:26:93:19:49:5f:06:a2:25:20:da:97:
0c:1c:dd:2f:9a:b7:72:b9:94:c3:07:93:cd:25:4f:2e:b7:ad:
ce:e5:69:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:42:23 2026 by rpki-client