
$ rpki-client -vvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/FEB0698C941C11EE89E27567C4F9AE02.roa
File: FEB0698C941C11EE89E27567C4F9AE02.roa (raw, json)
Hash identifier: a+RIiZqMp/fVJY+AvxuouvP96FqCt281LrQilfoncLo=
Subject key identifier: D9:AD:9A:F2:D5:E6:4A:15:E2:12:F8:4E:1B:D2:7B:83:15:53:1D:16
Certificate issuer: /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Certificate serial: 01B5
Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/FEB0698C941C11EE89E27567C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:27:00 +0000
ROA not before: Sat 03 Jan 2026 03:25:29 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152180
IP address blocks: 210.79.184.0/23 maxlen: 23
210.79.184.0/24 maxlen: 24
210.79.185.0/24 maxlen: 24
2401:5660:100::/40 maxlen: 40
2401:5660:fc00::/40 maxlen: 40
2401:5660:fd00::/40 maxlen: 40
2401:5660:fe00::/40 maxlen: 40
2401:5660:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91109A3, serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Validity
Not Before: Jan 3 03:25:29 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a41474-0c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:6c:b7:64:6b:2f:f8:32:83:10:d7:3f:79:
dc:25:74:b4:e1:ec:c4:d8:eb:25:95:e7:38:46:69:
62:ab:89:2d:70:8e:80:09:70:c6:7b:52:12:4d:87:
13:0a:b5:75:da:52:3b:53:ff:fd:78:ed:c9:8a:9c:
e5:f7:da:91:55:27:7f:03:37:23:1e:8a:84:4f:f3:
16:0c:43:a8:a3:8a:2d:14:2b:04:e3:14:df:2e:56:
34:2e:5c:c3:98:48:1e:34:fe:e6:75:0e:da:9a:76:
b5:24:2a:c3:6d:5c:65:66:e9:db:56:a0:17:83:b6:
db:ad:9f:fd:4a:86:5d:f1:6d:c8:26:7c:98:a7:f8:
14:20:f2:98:ff:be:76:de:80:93:e4:0e:5a:93:16:
7a:bb:84:ec:e1:6b:a1:27:bd:c2:59:77:f2:e3:0c:
67:3f:85:28:7e:c0:9d:f4:ab:bf:0b:17:25:db:01:
c6:e6:14:2e:87:bb:23:c6:a2:e4:41:fb:39:54:61:
62:3b:01:1a:8e:d8:11:99:e5:9a:8c:cd:cc:40:76:
dc:37:23:5a:62:a3:8e:69:04:e3:10:62:6e:76:58:
b4:71:ef:7f:69:fb:4c:c7:6f:39:4b:64:3a:46:72:
df:03:a3:5c:02:c3:81:56:4e:fe:11:ec:b8:5e:a9:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AD:9A:F2:D5:E6:4A:15:E2:12:F8:4E:1B:D2:7B:83:15:53:1D:16
X509v3 Authority Key Identifier:
keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/FEB0698C941C11EE89E27567C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.79.184.0/23
IPv6:
2401:5660:100::/40
2401:5660:fc00::/38
Signature Algorithm: sha256WithRSAEncryption
a2:9c:af:da:ff:9e:4a:c0:9a:07:9a:59:22:9a:ef:35:7e:cb:
d0:d9:65:ed:ea:41:90:ea:14:7e:7e:d2:1d:37:38:c7:34:6c:
a7:8f:8a:a5:49:06:95:05:f3:a9:1d:2a:5d:5f:27:08:af:92:
1e:d7:ec:6b:39:15:f1:0f:f9:d2:1f:66:ae:14:13:a8:0f:e2:
b3:a3:43:81:24:38:9c:33:4e:62:ce:81:19:f5:5a:98:a8:5b:
7c:33:38:0e:48:c6:23:e3:be:c2:7a:fe:ae:c7:71:8e:d4:36:
35:85:a4:9c:62:7e:52:11:37:87:26:98:0d:05:aa:84:89:f6:
98:5c:2a:a8:8d:8d:96:c7:bb:7c:49:6a:a9:48:57:07:ea:6e:
ee:8e:be:15:68:90:38:04:26:26:0d:d0:85:3f:10:aa:28:a8:
07:80:ca:cf:15:90:ae:45:26:27:05:38:71:2a:a7:ed:a2:5f:
3c:66:32:02:23:49:b3:64:20:c9:9f:5c:3f:9b:26:1c:1f:36:
9c:06:9f:d1:d7:66:34:d1:7b:f7:fe:c2:32:7e:a3:9f:2c:b7:
51:25:d3:8c:18:cc:34:2b:b8:e6:33:ef:bb:26:f9:4b:95:d7:
85:bc:d6:92:e5:f5:1b:38:a2:fc:ad:ea:c8:83:9a:7d:60:20:
d9:97:9b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:41 2026 by rpki-client