
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/FD120CC2D94411EDA95E3613C4F9AE02.roa
File: FD120CC2D94411EDA95E3613C4F9AE02.roa (raw, json)
Hash identifier: fHXngSTjkehnoyzfzZzWQmngco23iukL2koF5Ddr+ak=
Subject key identifier: 29:46:BB:4A:30:49:60:49:4B:B1:29:1A:EB:D0:A4:52:F3:ED:1C:22
Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Certificate serial: 0E32
Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/FD120CC2D94411EDA95E3613C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:27:43 +0000
ROA not before: Tue 06 May 2025 18:27:31 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138968
IP address blocks: 103.38.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3634 (0xe32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Validity
Not Before: May 6 18:27:31 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a468fe-4f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:94:7b:92:2f:54:a9:e8:bf:89:23:2f:64:
6e:cc:64:91:18:8d:3a:75:2b:4f:08:a4:f0:d1:eb:
83:62:4a:fd:26:f9:23:e6:85:87:71:ee:4a:8a:4b:
88:1e:62:40:df:97:33:ac:5c:b5:7b:5d:3c:d4:59:
5d:cf:4c:78:e4:79:78:42:6d:f1:e1:ab:6e:19:37:
25:d8:d1:62:63:1c:2c:80:28:7c:28:2a:b8:33:36:
09:12:79:50:7b:2a:8f:55:e2:f5:f8:10:d1:51:bd:
ea:82:52:f1:aa:43:9c:fe:c9:70:d8:43:8a:32:d6:
09:38:22:af:46:67:64:d0:54:55:4b:15:3b:65:3f:
29:a4:4b:ba:36:b1:a3:15:37:17:cd:aa:07:ab:ea:
cf:a4:db:cb:1e:62:76:22:22:f3:68:4e:3e:5d:86:
6e:03:45:c8:d5:44:c8:9e:5e:5f:99:59:da:3e:64:
c0:f5:1a:87:4a:f4:b2:bb:f5:4a:54:ad:7f:c6:a6:
ec:ac:2e:62:0b:b8:83:96:4e:6d:51:f8:86:dd:e8:
8f:7a:5a:88:20:2b:79:1c:1a:85:a2:89:b4:c9:cb:
2e:b1:18:c3:a5:ac:2d:7b:14:45:e0:c1:4c:87:b2:
73:09:61:55:6d:9d:39:9e:b2:1b:fb:fa:67:60:ae:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:46:BB:4A:30:49:60:49:4B:B1:29:1A:EB:D0:A4:52:F3:ED:1C:22
X509v3 Authority Key Identifier:
keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/FD120CC2D94411EDA95E3613C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.38.255.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e1:f8:be:04:3e:25:8f:80:b7:f3:4a:91:4f:eb:a0:3a:c9:
40:20:3e:28:e7:fd:a5:5c:64:fb:5d:04:e5:dd:e2:1e:dc:41:
8d:e6:8f:65:a7:a0:33:6c:4f:a3:c8:33:18:87:bb:48:1b:11:
e3:57:8b:63:61:31:34:c5:30:9a:55:48:ed:05:a0:ab:7b:f6:
8b:87:31:dc:83:d2:1a:91:24:8a:d7:61:b2:10:e6:ed:72:68:
fc:d3:3a:da:80:9e:dd:25:b2:a9:66:48:97:70:ca:27:0b:5b:
d8:39:b5:82:08:ea:e0:7b:50:4b:5d:1a:53:94:18:28:c4:12:
c4:c4:bb:71:eb:b6:b9:75:d8:65:2d:13:30:08:90:39:63:05:
c4:4f:aa:b9:2a:12:1e:7a:34:51:cf:56:ef:9c:44:b7:da:94:
e7:ff:57:0a:cd:bb:f2:b7:1a:c1:a6:0b:56:d9:3a:bf:99:87:
b1:55:14:bc:63:cc:5c:8c:2f:3d:26:d9:53:23:68:79:ed:00:
f4:3a:b8:b8:d1:3b:7a:33:20:b9:b5:5b:fd:75:95:1b:1d:ff:
57:33:78:15:01:ad:e6:2f:29:3a:e7:47:77:44:1f:6d:70:ff:
94:4f:82:44:19:38:68:95:32:fe:7d:9b:68:45:08:40:7d:81:
2e:a4:cc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:32 2026 by rpki-client