
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/FE892768620711F0BE75F534C4F9AE02.roa
File: FE892768620711F0BE75F534C4F9AE02.roa (raw, json)
Hash identifier: w6R9tkWMN6zGFTVsCrdtlZOXuO5ohHrK0PqrImTn4O4=
Subject key identifier: 34:EA:56:1E:E4:A0:00:6F:BD:96:F8:38:8A:08:54:67:D4:0A:1E:CB
Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Certificate serial: 87
Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/FE892768620711F0BE75F534C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:33:14 +0000
ROA not before: Thu 29 Jan 2026 06:28:56 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 38835
IP address blocks: 203.16.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Validity
Not Before: Jan 29 06:28:56 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a44019-a107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:11:54:24:ab:d8:41:34:e0:4f:70:af:8a:9f:
d3:f8:a9:76:4d:20:71:7f:5f:e0:48:28:67:d4:f0:
99:b7:47:f1:59:66:c9:af:68:25:a8:68:72:60:40:
22:1b:5e:a9:bb:d3:12:19:6e:47:f9:4c:f1:c5:03:
08:08:da:1e:44:b6:58:c5:f0:21:b6:5c:0e:88:e4:
7c:93:1e:ac:cf:78:97:2e:63:19:23:33:42:3c:c8:
7c:f0:ff:6e:8c:a8:6d:61:af:9b:7c:a1:5f:4c:de:
31:1f:23:c3:0a:86:39:9f:01:70:d0:5c:50:a6:96:
02:57:c4:9f:96:5f:1f:13:66:ca:7a:84:2e:55:35:
7b:d6:d4:3f:50:ec:63:b0:be:c4:17:ab:73:cd:08:
c7:ce:6a:67:99:e2:91:82:bf:dc:12:4d:63:62:51:
5e:54:26:be:47:db:06:ac:c7:42:2f:2d:a3:26:3a:
1e:1e:97:8a:bf:95:58:e3:84:20:ed:10:9b:43:c6:
5b:02:74:84:b2:4c:3f:2d:0e:5d:a2:84:28:05:40:
ec:e6:1d:7e:57:5b:3d:56:8e:a8:31:3a:8d:22:0e:
15:87:a8:84:ab:c6:3e:cc:f2:5c:a6:06:43:3e:88:
1f:ed:a7:4d:1b:ea:ad:c7:fa:42:f9:96:e1:2a:2e:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EA:56:1E:E4:A0:00:6F:BD:96:F8:38:8A:08:54:67:D4:0A:1E:CB
X509v3 Authority Key Identifier:
keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/FE892768620711F0BE75F534C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.16.232.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:0a:02:c8:5a:8f:03:fa:67:31:49:af:e3:a7:b2:6f:09:e7:
46:7f:83:96:a6:e8:74:b7:2f:83:ba:ee:5a:10:cb:5e:d4:25:
b1:b3:8b:76:e8:df:9d:62:80:fe:b1:ed:d0:b5:33:e0:ed:ad:
ec:93:e6:4b:56:c6:eb:98:3e:01:2a:a2:d3:0e:83:5e:47:ab:
01:9d:de:e0:c4:ba:c3:9a:a4:85:ab:65:29:1d:9b:fe:19:4d:
f3:a2:20:6c:27:90:38:c2:ca:aa:e4:55:33:4c:0a:f2:f4:52:
5e:fe:17:e2:24:5a:48:6a:d6:ce:e3:92:4a:c8:5d:04:75:f3:
51:f3:55:e4:51:f8:71:ee:c7:fd:5b:bd:60:fa:e9:39:44:02:
71:9b:dc:b7:a3:af:cb:19:d3:5b:5e:22:61:1f:52:b6:02:33:
03:8c:d4:ba:36:4f:21:5a:82:a9:ce:78:6b:ee:86:16:6a:36:
a9:a8:7a:b4:85:62:b2:d8:f8:7a:51:a9:8c:1e:0b:b8:fc:c1:
ec:ad:23:f3:1c:99:71:a9:67:68:56:59:ee:81:d8:b3:7b:30:
d4:0e:06:dd:c4:38:c0:e7:e4:ef:57:b5:da:29:b1:02:c4:57:
28:e3:97:fe:37:13:18:8c:49:c5:d1:30:09:7b:00:04:0c:ba:
82:c1:c0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:40 2026 by rpki-client