
$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/FD398FA0BB5D11ECA62F8674C4F9AE02.roa
File: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (raw, json)
Hash identifier: lCNfDmCO6Vy6uu5QW43aJqJrNK0XuY+KKPY1oeY2SkM=
Subject key identifier: 62:1C:7A:D4:7F:D6:72:6F:8C:66:69:C9:88:F2:F9:9E:09:A9:C3:07
Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129
Certificate serial: 03DC
Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/FD398FA0BB5D11ECA62F8674C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:57:32 +0000
ROA not before: Thu 07 Aug 2025 01:36:43 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 56286
IP address blocks: 203.222.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl
rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 988 (0x3dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129
Validity
Not Before: Aug 7 01:36:43 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3ff7b-08db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:bb:3e:cc:eb:a7:17:1c:c0:90:02:2c:cf:
78:44:85:47:b9:d3:6f:ed:9c:0a:c8:4b:c2:30:41:
91:31:cc:db:e2:51:a0:83:6c:60:46:b8:ea:be:e9:
bf:77:bb:3d:5f:95:1f:3e:50:b0:5e:fe:b8:8c:f9:
ad:a7:4c:3e:08:38:b9:18:6b:b6:b9:05:b5:10:0e:
72:33:5b:3a:4b:71:71:eb:b1:16:02:41:1f:7e:91:
d1:09:0f:c8:d6:1f:0a:9f:d4:f6:da:cc:4c:71:20:
ad:13:96:a7:17:e0:e8:4e:75:89:9c:90:bd:42:1e:
8b:ac:a3:dc:da:fe:61:fc:5e:67:c0:c6:d3:55:91:
a7:9e:8b:d1:65:f5:2b:5b:8c:5c:4c:53:d1:37:9f:
b5:87:0d:26:65:5e:97:47:d8:3e:68:3d:2b:8a:63:
21:27:dd:0f:12:b2:aa:53:65:da:39:d7:f3:65:55:
5e:52:c3:dd:5e:44:6c:a2:90:55:7e:55:86:df:56:
53:01:e2:7a:bf:54:6a:44:3f:ac:22:39:de:b5:4b:
e6:8d:be:22:4b:9a:d2:75:90:8c:ec:ba:a4:18:14:
ca:01:1a:96:20:58:3b:bc:f0:01:0b:96:d8:f1:6a:
f7:a4:7c:91:08:3a:64:72:db:9b:ef:70:a7:0c:16:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1C:7A:D4:7F:D6:72:6F:8C:66:69:C9:88:F2:F9:9E:09:A9:C3:07
X509v3 Authority Key Identifier:
keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/FD398FA0BB5D11ECA62F8674C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.222.47.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:03:1e:41:92:e0:40:2d:d9:c0:57:67:39:48:b4:15:6f:51:
d6:59:57:63:b6:34:89:b7:b7:b3:ac:49:66:df:b1:53:70:86:
2a:ed:34:30:f2:21:8d:47:4a:1f:73:77:8e:fa:46:82:e9:77:
7c:8b:52:e8:d1:7d:02:c9:80:0d:45:f7:e2:7d:25:97:39:98:
fc:b1:76:ac:8c:7b:85:c4:be:3d:e0:de:4d:e6:f4:62:7f:cc:
b1:24:d9:65:5a:c0:00:b9:77:a3:b2:03:99:24:cc:a2:c9:b1:
aa:96:b1:d1:de:35:b8:7e:ec:98:95:30:f9:53:0b:6d:44:6c:
bf:76:2b:4a:d2:c1:ec:3a:4c:35:39:c5:a8:be:b6:57:f4:08:
58:bc:85:f3:98:a7:fe:d0:04:b5:28:0c:c2:71:15:73:84:68:
6b:fc:26:06:b8:fb:0e:97:f9:ff:ec:99:6a:79:05:2c:4c:0f:
e8:f9:dc:e5:27:ac:51:8e:82:32:bc:ed:c3:dc:d4:8b:7f:28:
e7:80:fe:41:5c:d0:42:97:79:9a:c1:b1:59:cd:92:c5:72:73:
17:d2:b3:20:fe:f8:81:e3:25:9a:1f:b7:a1:e0:93:f7:f3:a9:
aa:d1:89:d8:04:42:d2:ce:b4:36:46:45:bd:f1:51:b6:dd:15:
37:e1:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:28 2026 by rpki-client