
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/FB03B42C927411EF870E655AC4F9AE02.roa
File: FB03B42C927411EF870E655AC4F9AE02.roa (raw, json)
Hash identifier: tfiaKNp+pGPKNwRyzqNWpYJfVlj5qFTe6lmSja9GxH4=
Subject key identifier: 40:56:54:DA:E3:F9:E6:E3:96:90:4A:14:7C:D1:0F:5E:45:64:0D:55
Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Certificate serial: 0147
Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/FB03B42C927411EF870E655AC4F9AE02.roa
Signing time: Fri 03 Jul 2026 06:33:09 +0000
ROA not before: Fri 03 Jul 2026 06:33:09 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38605
IP address blocks: 203.171.4.0/24 maxlen: 24
2001:df0:2ea::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 05:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Validity
Not Before: Jul 3 06:33:09 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4757a5-5634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:72:65:7f:e2:b0:d0:0a:f9:ca:f7:c2:05:
6f:5a:eb:e0:fe:2b:fc:ad:b2:07:2e:7d:b0:a0:38:
da:ef:92:78:81:0d:4f:1b:34:b3:26:71:3f:76:33:
de:b5:59:8c:46:bb:56:ee:6f:5f:aa:e7:df:8f:71:
b8:fb:d9:0a:47:99:7a:2a:fe:ee:a7:23:a5:98:ce:
32:c0:50:85:fa:39:c7:2a:90:11:74:03:6b:0b:1f:
cd:0c:63:7d:8f:9c:75:06:ea:7a:1a:55:2f:56:18:
cf:90:e0:d9:30:b6:f7:7c:0d:d3:d5:a3:9f:ca:a9:
cb:f7:dc:9d:19:97:55:7e:bb:2f:e8:ef:25:ab:f0:
15:ff:da:03:54:bf:5e:f4:18:99:f1:10:2e:36:75:
0b:45:3d:78:45:61:b4:79:d9:4f:52:1c:46:90:02:
8b:45:9f:e9:ec:b8:20:e4:96:48:f0:bd:8a:06:21:
32:c2:29:7b:29:83:a0:98:d8:f6:40:e6:68:e9:bf:
b4:08:03:c6:34:00:18:23:8a:94:4e:3b:4a:bd:03:
a5:fb:76:9c:82:26:35:6d:87:4d:6b:0b:d0:95:12:
2e:3f:51:f9:a1:02:b4:ee:71:f9:51:e9:5d:e3:17:
2d:c9:e1:fe:ba:57:41:58:1f:e8:25:8c:d8:77:a2:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:56:54:DA:E3:F9:E6:E3:96:90:4A:14:7C:D1:0F:5E:45:64:0D:55
X509v3 Authority Key Identifier:
keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/FB03B42C927411EF870E655AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.171.4.0/24
IPv6:
2001:df0:2ea::/48
Signature Algorithm: sha256WithRSAEncryption
32:52:c3:dd:67:ab:c4:58:62:1c:52:ff:fb:84:59:63:ff:98:
53:67:d6:3c:73:71:4a:ea:81:97:9d:7d:28:78:eb:f4:93:86:
46:ab:82:47:12:09:9e:dc:d4:32:93:1a:de:d2:c0:38:f6:61:
7e:9f:6a:70:f7:d8:ac:dc:76:c5:57:e9:f4:d3:64:d6:ce:03:
f0:b4:67:b3:97:11:b1:a4:27:7f:72:c0:99:22:c1:ed:02:c3:
57:1c:75:94:98:bc:df:33:60:13:e4:f6:78:84:d5:77:1b:c1:
e3:a9:7b:ef:7a:41:bc:8b:78:fb:ed:a2:1c:da:ac:f1:a1:b6:
3c:5a:9a:6a:28:2c:b2:4f:b6:28:e7:57:01:d6:5f:e9:b6:e1:
dd:51:3c:9a:f4:ba:37:f7:d2:32:e9:c5:8b:71:89:b8:12:19:
b5:65:f3:c4:b1:db:5d:8e:31:13:e8:28:de:83:21:1c:ea:6a:
79:17:b6:7b:7e:6b:34:c6:1b:7a:ba:76:ef:05:2e:a7:cc:fd:
76:13:ff:83:50:a3:6a:1f:7b:b6:39:f0:7d:0a:b9:8d:7b:45:
9a:08:7a:85:8e:99:a3:45:ee:21:ec:79:83:db:69:de:2a:74:
10:13:06:47:d5:2f:b7:6d:d0:24:ff:aa:f0:5a:3e:d8:c0:9f:
a8:b9:13:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:36:18 2026 by rpki-client