
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FEC94566DA1511EF96499F70C4F9AE02.roa
File: FEC94566DA1511EF96499F70C4F9AE02.roa (raw, json)
Hash identifier: gJtx5w9gXiGi093eja20it1cinQV6CtCRx7zWDsQ0nI=
Subject key identifier: C8:EC:A1:48:30:20:37:44:7F:3B:23:5C:66:4E:C8:BB:51:F5:38:20
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2BB7
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FEC94566DA1511EF96499F70C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:22:56 +0000
ROA not before: Fri 02 Jan 2026 16:13:01 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 135067
IP address blocks: 27.254.8.0/24 maxlen: 24
27.254.14.0/24 maxlen: 24
27.254.229.0/24 maxlen: 24
203.172.68.0/24 maxlen: 24
2405:9800:ca06::/48 maxlen: 48
2405:9800:ca07::/48 maxlen: 48
2405:9800:ca08::/48 maxlen: 48
2405:9800:ca09::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11191 (0x2bb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jan 2 16:13:01 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a49210-292d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6a:f1:bc:15:1e:09:f0:98:f1:aa:22:ad:b7:
94:25:da:c4:a9:86:f2:32:8f:7c:db:5e:9b:c7:48:
2c:5a:82:e8:3f:8e:1e:6d:ab:dc:04:06:87:b2:a0:
97:de:1d:5d:6a:01:0d:63:8d:95:cd:b4:bc:f1:bd:
a1:d6:cc:2c:7e:51:2a:66:df:82:cf:31:e4:25:83:
6f:09:8c:1d:a2:1a:b2:d0:b4:58:5b:e5:90:65:1a:
f1:b5:6c:a8:62:e4:8e:03:5e:0f:21:9d:ee:d0:1f:
a2:36:bb:c0:c4:65:1c:90:c5:15:27:48:5e:e1:8a:
ff:2d:42:fb:a0:69:7c:95:3b:5a:9f:74:48:bf:9d:
18:8b:90:a2:a0:aa:a2:fb:93:4d:bb:07:21:eb:bc:
eb:86:bf:a4:08:6f:fe:be:92:6a:98:e8:a3:cf:79:
36:ce:f4:f7:3f:71:bd:e9:91:29:c3:ab:cd:50:59:
e5:20:b1:c2:2e:c2:cc:21:20:91:f0:f8:62:3b:a2:
73:50:03:4e:17:70:47:5f:13:05:ff:98:b7:b3:01:
e6:87:85:99:5b:02:32:e9:22:f7:8c:d4:13:8a:b0:
b5:9d:0d:c8:db:f4:9d:86:67:89:cf:95:d7:88:3e:
90:92:95:ef:4b:77:ff:06:36:56:2a:a3:8d:8d:c6:
b8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EC:A1:48:30:20:37:44:7F:3B:23:5C:66:4E:C8:BB:51:F5:38:20
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FEC94566DA1511EF96499F70C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.254.8.0/24
27.254.14.0/24
27.254.229.0/24
203.172.68.0/24
IPv6:
2405:9800:ca06::-2405:9800:ca09:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
02:0e:0c:d0:fe:34:0e:c7:eb:c4:66:25:fe:5e:3e:e5:e8:6a:
d8:cf:fc:25:d1:69:cc:c1:eb:91:82:fe:7d:e2:96:ad:12:d1:
2a:c1:2c:56:9e:ba:39:9b:2f:36:6d:9e:3c:f4:6d:03:d3:2e:
cd:e4:c7:05:37:ca:7a:69:ce:fb:76:4b:b8:95:35:1d:37:f0:
93:e3:e9:48:cd:18:95:c4:4f:49:2f:6e:6a:88:93:21:13:e1:
78:9a:9d:e5:5a:68:84:e6:77:0f:e2:39:6e:ee:6e:39:9b:e7:
ac:43:3a:76:5d:17:70:4f:ee:9e:eb:5c:2e:a3:5d:60:13:4e:
0f:0e:a2:42:a5:fb:59:47:c7:ff:8e:1a:38:b2:5d:9e:0d:98:
e4:2d:24:ed:08:0d:12:73:11:bd:f1:de:e5:af:ed:84:ef:35:
82:01:b2:45:0b:92:9a:b7:02:28:04:22:61:1e:9d:64:ee:ab:
de:18:52:31:a5:05:c0:7a:04:cc:dc:12:aa:f4:2f:3d:b7:bb:
01:f9:17:cf:a5:9f:28:e9:55:4f:f5:af:ab:71:06:5a:a5:b6:
55:08:0c:30:77:d0:fd:4a:85:3b:7f:96:18:12:5a:28:95:0f:
2b:f5:a4:16:ca:88:76:8e:39:6d:9e:6a:12:55:6e:fd:a6:62:
fc:35:cc:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:28 2026 by rpki-client