
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/FCF7126E310711ECBFFF5E62C4F9AE02.roa
File: FCF7126E310711ECBFFF5E62C4F9AE02.roa (raw, json)
Hash identifier: JeUrYB0TpZZfGPutMqhHCJeUmYH749wNTaQ/Ii/GQOc=
Subject key identifier: 91:C1:28:44:92:FE:D6:7A:72:13:68:1C:70:1F:F1:DB:80:C0:4B:DF
Certificate issuer: /CN=A91EC38C/serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95
Certificate serial: 0548
Authority key identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/FCF7126E310711ECBFFF5E62C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:47:38 +0000
ROA not before: Tue 18 Nov 2025 22:44:44 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 147176
IP address blocks: 103.174.190.0/24 maxlen: 24
103.174.191.0/24 maxlen: 24
2001:df7:d280::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl
rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1352 (0x548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC38C, serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95
Validity
Not Before: Nov 18 22:44:44 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a45f9a-ce63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:a4:76:21:d7:3f:35:98:fd:6a:53:81:29:
fd:a8:86:2c:3f:d6:c5:93:58:3a:fd:2c:5c:6c:0f:
0a:17:85:62:80:7e:80:6a:ee:23:90:de:3d:06:b4:
46:d8:62:f6:52:4c:ad:2a:23:0b:44:84:86:18:2b:
de:a8:1d:51:f7:f7:d3:f5:cd:de:31:5c:ac:ee:8e:
a6:7c:1f:8f:5f:0b:af:93:e6:36:02:e0:9b:bb:e2:
b7:2d:1c:b1:fa:83:96:00:4a:35:4e:5c:85:1b:48:
4c:35:92:d6:57:e7:2c:6c:6f:a8:57:2f:41:74:d0:
ac:39:ad:7e:74:72:41:b2:1a:a2:63:03:d9:7b:fe:
9d:e5:82:f6:c8:fc:9b:a1:16:8c:35:8b:51:c7:7e:
1e:1e:ae:cb:f9:aa:ea:cb:27:8c:4c:9c:36:1b:1b:
13:f1:45:95:96:b6:df:22:9f:23:36:c5:37:eb:f1:
b3:2a:82:eb:e6:df:7d:8e:d4:91:bd:5e:dc:7c:9a:
97:04:f0:15:75:a0:8f:c0:9a:d0:d0:25:10:aa:cf:
e0:30:b3:53:a9:a2:82:26:e1:b2:8f:2e:a2:be:98:
ba:0f:9a:89:b0:d8:1f:d6:92:f2:75:f2:ae:5c:b1:
97:14:ff:b4:8e:a7:8c:94:c5:02:16:bb:ed:11:72:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C1:28:44:92:FE:D6:7A:72:13:68:1C:70:1F:F1:DB:80:C0:4B:DF
X509v3 Authority Key Identifier:
keyid:C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/FCF7126E310711ECBFFF5E62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.190.0/23
IPv6:
2001:df7:d280::/48
Signature Algorithm: sha256WithRSAEncryption
1c:b6:1f:6d:f0:fb:e8:5f:37:d9:ac:eb:0d:dc:44:d7:a8:43:
e7:4a:0b:6e:cc:4f:39:18:cb:78:1b:23:c4:c1:1b:84:fb:93:
cd:92:9e:68:a0:85:cb:b5:a8:c9:e3:9d:8e:58:1b:46:1b:86:
6b:a0:84:92:9a:a1:74:f6:5a:83:8c:e0:1e:b0:4a:14:f6:d6:
56:7e:20:4b:7e:ab:eb:a4:68:da:41:4a:3b:fd:45:02:4b:c4:
c8:2c:32:37:90:3c:f2:70:5f:cd:f9:40:8c:84:ba:10:25:a5:
62:aa:a8:f7:ea:dc:d0:a0:36:89:ba:d4:b4:3b:2a:b8:e8:fd:
e2:32:8d:8e:22:44:04:6f:cb:b8:8b:8e:c7:f7:87:90:b0:80:
38:4c:09:28:ab:eb:da:de:89:f7:12:69:71:94:8a:dc:02:5b:
dd:78:ca:b1:ac:92:4b:60:c9:33:85:0d:ec:eb:02:fc:4d:02:
8b:ff:6e:75:9f:c3:36:45:04:77:38:15:8d:81:2e:da:fd:5f:
93:06:68:a6:51:9a:48:cb:d6:6a:aa:6d:14:b0:16:23:52:6c:
21:17:74:d5:e1:ec:b0:1c:ab:38:41:15:6a:7e:33:fa:7b:5f:
1b:20:b3:1a:eb:26:4b:9f:a8:5e:f0:55:6c:21:0f:df:cf:fb:
9e:b9:21:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:30 2026 by rpki-client