
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/FE1FDB12BCD011EC8283681EC4F9AE02.roa
File: FE1FDB12BCD011EC8283681EC4F9AE02.roa (raw, json)
Hash identifier: D7POOiqxGTRBfPXL5kT6B+2budcwWwPlgdAg9UBfD4U=
Subject key identifier: DE:BA:C7:A3:82:D2:27:72:E9:AC:FB:FF:D2:B2:7D:09:75:39:16:41
Certificate issuer: /CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1
Certificate serial: 0872
Authority key identifier: A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/FE1FDB12BCD011EC8283681EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 21:25:36 +0000
ROA not before: Mon 02 Mar 2026 21:25:36 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 63962
IP address blocks: 43.231.112.0/22 maxlen: 24
103.50.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl
rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 20:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA024, serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1
Validity
Not Before: Mar 2 21:25:36 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a60050-f5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:19:88:10:1a:c7:df:c8:c4:42:2a:84:f5:
72:8f:61:a6:c5:e0:ff:1c:a8:83:0f:3c:0d:38:07:
d6:24:52:ae:05:a6:fb:1f:a0:ca:09:f4:ef:45:70:
59:e4:42:dd:5b:b6:3e:d1:77:2a:5c:0d:ee:2c:39:
8b:bb:f7:19:56:d3:fb:48:56:75:11:67:2f:2d:8a:
0c:33:c3:6d:e1:3e:b8:80:9e:9a:75:b0:58:ff:19:
a0:ea:12:41:47:af:bc:b6:a9:93:3a:0f:0a:56:9c:
e6:0e:12:01:27:5f:4d:69:38:fe:dc:a7:c8:f1:9d:
c7:29:2b:c9:7d:ff:1f:d9:69:d6:7e:59:c8:5b:d3:
f3:59:ef:3b:96:b4:49:28:77:1c:de:e8:35:39:79:
b9:5e:07:a7:a0:44:24:5d:4f:ec:75:31:98:88:dc:
fc:08:39:d6:c4:fa:a2:64:c1:a6:02:86:8f:ab:71:
81:0a:a3:8c:b4:1c:68:b2:34:54:56:9c:0a:6c:66:
1d:19:db:9b:ee:25:c7:00:93:cc:ad:a3:3e:db:81:
1c:f5:31:21:d0:fc:fa:24:23:cd:69:56:20:e5:9d:
89:d4:6a:d3:77:8c:6b:21:8d:c6:2a:f6:af:ea:c2:
ba:fc:14:76:da:c9:b1:b8:96:2b:a6:b8:1e:74:3e:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:C7:A3:82:D2:27:72:E9:AC:FB:FF:D2:B2:7D:09:75:39:16:41
X509v3 Authority Key Identifier:
keyid:A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/FE1FDB12BCD011EC8283681EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.231.112.0/22
103.50.204.0/22
Signature Algorithm: sha256WithRSAEncryption
91:ef:bf:d5:f9:ec:cd:59:92:b1:1a:07:89:5b:59:1e:d6:4e:
58:6f:8d:fe:29:6e:f6:2f:42:44:d8:1a:6b:19:30:3a:e8:de:
81:a5:82:5a:fa:c6:39:ea:28:b5:43:b3:26:41:11:70:1b:43:
08:fd:b6:83:df:33:fb:61:52:4a:2e:11:cf:a7:94:3d:69:eb:
04:9d:ae:b5:59:13:f8:15:ba:16:ce:a4:4c:59:7d:3e:cb:d7:
c3:01:ca:7c:85:1a:cd:23:27:d2:d5:28:22:8b:3c:00:18:22:
2c:3c:73:52:23:4a:ef:e8:48:25:13:14:6c:41:ce:e0:63:6c:
84:87:95:b7:ca:ae:3e:2a:88:35:d0:2f:fd:ab:d9:89:ac:79:
6f:6d:e4:90:c6:52:3e:b8:26:71:06:fd:0f:8d:d1:c3:c0:51:
e1:2d:fc:7a:0e:a4:28:12:e5:76:e5:36:dc:31:f5:31:48:33:
42:d6:00:2e:4d:92:ae:41:24:d6:58:3c:bd:af:5a:a9:08:5e:
10:16:e9:10:c0:4b:5f:72:87:c0:cd:88:e1:9f:c4:10:2b:f3:
33:62:f4:57:46:4d:a3:fb:3d:19:ad:5d:78:a3:1c:e8:6b:28:
26:ee:a0:55:b6:bc:74:44:05:e8:f0:b9:d9:96:09:1e:bd:ff:
fc:b1:d3:bc
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkEwMjQxMTAvBgNVBAUTKEEwQUM0MjdFOTU3QjM3NEQwMjY3RkE3NjQ4REQzRkY4
NTcwMkRBQjEwHhcNMjYwMzAyMjEyNTM2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MDA1MC1mNWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjncZiBAax9/IxEIqhPVyj2GmxeD/HKiDDzwNOAfWJFKuBab7H6DKCfTvRXBZ
5ELdW7Y+0XcqXA3uLDmLu/cZVtP7SFZ1EWcvLYoMM8Nt4T64gJ6adbBY/xmg6hJB
R6+8tqmTOg8KVpzmDhIBJ19NaTj+3KfI8Z3HKSvJff8f2WnWflnIW9PzWe87lrRJ
KHcc3ug1OXm5XgenoEQkXU/sdTGYiNz8CDnWxPqiZMGmAoaPq3GBCqOMtBxosjRU
VpwKbGYdGdub7iXHAJPMraM+24Ec9TEh0Pz6JCPNaVYg5Z2J1GrTd4xrIY3GKvav
6sK6/BR22smxuJYrprgedD6eKQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFN66x6OC
0idy6az7/9KyfQl1ORZBMB8GA1UdIwQYMBaAFKCsQn6VezdNAmf6dkjdP/hXAtqx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAyNC9EMzNBNDc5NEYx
ODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04wMENaX3AyU04wXy1GY0My
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29LeENmcFY3TjAwQ1pfcDJTTjBfLUZjQzJyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkEwMjQvRDMzQTQ3OTRGMTg4MTFFQTlFODBGNzFFQzRGOUFFMDIvRkUxRkRCMTJC
Q0QwMTFFQzgyODM2ODFFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCK+dwAwQCZzLMMA0GCSqGSIb3DQEBCwUAA4IBAQCR77/V+ezNWZKx
GgeJW1ke1k5Yb43+KW72L0JE2BprGTA66N6BpYJa+sY56ii1Q7MmQRFwG0MI/baD
3zP7YVJKLhHPp5Q9aesEna61WRP4FboWzqRMWX0+y9fDAcp8hRrNIyfS1SgiizwA
GCIsPHNSI0rv6EglExRsQc7gY2yEh5W3yq4+Kog10C/9q9mJrHlvbeSQxlI+uCZx
Bv0PjdHDwFHhLfx6DqQoEuV25TbcMfUxSDNC1gAuTZKuQSTWWDy9r1qpCF4QFukQ
wEtfcofAzYjhn8QQK/MzYvRXRk2j+z0ZrV14oxzoaygm7qBVtrx0RAXo8LnZlgke
vf/8sdO8
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:12:32 2026 by rpki-client