
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/FD0DCDCA41E111EC98FA0C0AC4F9AE02.roa
File: FD0DCDCA41E111EC98FA0C0AC4F9AE02.roa (raw, json)
Hash identifier: y73S8++lP8l3+TCAjF9+DFuZKIlJNrek0vx4sh6FeCE=
Subject key identifier: 4E:DE:C2:30:B5:7F:44:24:35:C2:A2:C3:AF:79:8F:CA:01:72:2C:BE
Certificate issuer: /CN=A91F6ADE/serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE
Certificate serial: 0518
Authority key identifier: 70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/FD0DCDCA41E111EC98FA0C0AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:45:27 +0000
ROA not before: Tue 16 Dec 2025 23:19:58 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 23747
IP address blocks: 103.143.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl
rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1304 (0x518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6ADE, serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE
Validity
Not Before: Dec 16 23:19:58 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a434e6-f83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:f3:57:30:a7:8b:51:b5:1b:41:af:75:a7:
67:20:0e:24:51:89:c7:b9:6e:a1:d2:2d:5f:92:05:
4a:22:81:2c:0b:31:4a:61:cb:09:39:43:f1:fa:e3:
ee:f1:2c:b2:16:05:b3:77:54:6b:0e:a3:ad:c8:3c:
64:3f:bd:e3:c4:c0:c9:27:48:7d:cb:21:40:4b:07:
00:2d:72:a7:14:16:3e:72:6c:6d:71:a7:f8:7c:bc:
c9:de:cb:0c:a9:6f:76:db:50:0c:cd:ff:8e:7f:82:
04:85:89:30:e1:34:2d:57:f5:ce:ae:b4:11:6f:9d:
a4:b6:51:ea:9f:6a:32:17:7e:a7:bf:df:ae:6d:ed:
34:3a:5d:1f:0b:76:65:2f:a1:49:59:9f:04:a3:bc:
33:05:5a:8f:1e:6b:ff:36:cb:fd:5a:ee:88:d8:f7:
ef:0b:68:76:6f:9a:7d:aa:b4:f2:bf:11:69:3d:c9:
8e:5f:a1:5a:ac:1d:36:86:34:f2:dd:a3:83:e9:39:
d4:a4:d8:e3:1c:77:2f:b0:d6:15:08:7b:75:a8:ed:
aa:e6:54:f5:a0:55:13:c7:cf:43:74:57:11:f4:31:
b6:0e:c3:73:79:8f:f9:4b:07:a4:1e:19:b4:fc:3c:
46:8d:80:eb:c1:d4:c6:97:60:f5:a5:a7:c1:02:1f:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DE:C2:30:B5:7F:44:24:35:C2:A2:C3:AF:79:8F:CA:01:72:2C:BE
X509v3 Authority Key Identifier:
keyid:70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/FD0DCDCA41E111EC98FA0C0AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.250.0/23
Signature Algorithm: sha256WithRSAEncryption
49:ed:c0:c7:96:52:a7:12:7d:e5:b8:e9:cf:df:51:7c:9c:1f:
6b:b3:e3:c1:f1:2e:5b:05:ac:72:e4:aa:2f:24:d3:9b:03:53:
cd:66:c1:63:62:c8:85:8a:18:b7:0f:35:f3:a5:e9:f7:23:58:
77:b1:09:95:f4:b3:03:23:85:6c:58:83:a2:50:52:7e:7e:b9:
b4:ee:89:56:5e:03:e0:76:e5:b9:4e:cf:51:1f:f4:9f:52:92:
32:8c:40:df:63:47:8b:9c:f1:a4:d6:bf:5d:a6:f3:35:43:01:
ec:09:ae:09:84:6d:83:b6:6a:11:1b:f8:02:bd:bd:74:58:79:
65:5d:76:70:22:16:93:70:4c:95:2f:2c:34:eb:31:e6:cc:33:
aa:da:91:c1:87:b0:3a:b8:81:66:e7:a8:d6:64:9d:86:80:3d:
58:da:27:93:25:39:b8:d5:4e:5c:bb:84:90:b4:07:5f:66:b9:
2a:8e:09:90:07:e9:0e:d2:97:b1:12:3f:10:82:5b:e0:07:16:
d6:35:aa:93:6b:d8:e0:82:00:b1:e0:93:7b:b9:db:6a:44:b4:
bc:c7:19:a0:ba:95:e7:41:3e:f1:75:03:d8:c2:4e:e5:79:42:
55:6a:d1:9f:7f:53:fb:c0:bc:4d:b7:e2:dd:21:3f:b8:48:4b:
14:52:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:52:57 2026 by rpki-client