
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/FB03B42C927411EF870E655AC4F9AE02.roa
File: FB03B42C927411EF870E655AC4F9AE02.roa (raw, json)
Hash identifier: IoNbkBQReyDzJViXMom8CAS5Le63oVygKwA1bc/GSEM=
Subject key identifier: 84:46:DB:D1:51:D8:62:B2:F1:C1:AF:D0:42:CC:1A:0D:06:93:54:5C
Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Certificate serial: 0106
Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/FB03B42C927411EF870E655AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:10:26 +0000
ROA not before: Tue 01 Jul 2025 07:43:13 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 38605
IP address blocks: 203.171.4.0/24 maxlen: 24
2001:df0:2ea::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Validity
Not Before: Jul 1 07:43:13 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a59a52-6aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:31:22:b8:2f:ef:4b:60:5b:ae:4f:f6:40:
79:3d:10:c7:a6:21:d0:a2:66:20:7f:7e:f6:61:c8:
3f:6a:57:13:11:ce:3b:8f:ea:11:b7:49:fb:fb:47:
00:5c:51:43:d0:4f:d4:58:d5:ae:65:f0:d2:12:c1:
f4:71:87:38:ac:d2:fc:98:d4:9b:99:6b:46:31:23:
ce:62:8c:0f:2b:7d:cb:bc:1c:48:b6:51:0e:0b:a2:
57:a9:f4:5d:8b:18:3c:40:bf:67:2e:db:47:e0:00:
4f:3b:fd:22:0b:9e:8b:0d:a9:ff:53:4e:76:49:bd:
aa:d2:1b:29:af:2b:49:91:44:cd:be:e3:ef:22:76:
cb:d9:ab:28:b0:4e:63:89:a7:8f:75:b0:af:74:e2:
a5:c0:cc:6b:22:d8:24:48:80:38:bc:c6:a9:28:b1:
9c:7c:5d:0f:45:b2:c7:2d:89:00:f2:fe:9e:e3:64:
25:22:76:c9:da:35:6c:d8:88:67:ec:5d:a5:ce:3b:
a3:50:c3:98:a8:ad:7f:87:e3:bf:51:44:c1:ce:cb:
23:73:4d:d1:c7:53:87:ef:fe:a8:ff:b2:57:08:04:
68:73:ba:bd:c5:83:46:84:be:77:8d:33:76:8b:c5:
a4:64:d6:4e:b2:eb:64:87:16:21:85:96:8e:cb:bd:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:46:DB:D1:51:D8:62:B2:F1:C1:AF:D0:42:CC:1A:0D:06:93:54:5C
X509v3 Authority Key Identifier:
keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/FB03B42C927411EF870E655AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.171.4.0/24
IPv6:
2001:df0:2ea::/48
Signature Algorithm: sha256WithRSAEncryption
08:aa:a7:1a:86:4d:24:b3:71:cd:e0:31:b9:7c:57:f0:64:56:
6d:0e:0c:25:ab:10:15:2e:7b:84:b7:b3:d8:0e:e0:e4:6f:8e:
7c:6a:89:e5:40:54:f9:4b:4f:52:ba:3b:4f:e0:5e:99:be:08:
5d:1e:43:e4:3e:8f:33:54:54:16:ca:a2:c3:08:2b:16:76:f7:
e5:08:ed:9f:40:3e:62:0a:7a:80:3d:7d:51:e9:ac:87:19:49:
7b:43:5a:ba:5d:0b:1a:0e:3d:cc:26:4e:17:41:77:2c:6d:18:
7a:aa:22:d3:04:d0:ee:fb:29:4e:f5:7b:48:fb:2a:7b:b7:c6:
1e:72:7a:35:5f:ca:39:2d:2b:88:5b:97:f9:ce:f1:dd:32:0f:
90:71:ab:81:23:1f:e0:21:cf:44:ed:26:7c:49:0b:29:82:c9:
56:a7:f7:f7:2e:5e:31:71:24:a1:39:26:92:15:0d:e0:87:af:
a5:79:a9:92:4c:84:bb:38:2a:5a:fe:1b:12:5e:1f:be:3c:27:
69:8d:63:33:fc:62:50:a0:c3:ad:8a:6a:7c:11:8d:e3:ec:4c:
9a:f3:64:92:76:94:6a:48:17:3c:f9:d2:cf:7c:00:38:8b:c7:
aa:c6:fa:1d:0a:58:db:03:a5:fb:b9:e6:96:b4:50:b5:c6:3f:
a2:be:75:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:29 2026 by rpki-client