
$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/FD678F40214E11F095B05918C4F9AE02.roa
File: FD678F40214E11F095B05918C4F9AE02.roa (raw, json)
Hash identifier: dwCv7pQVK29BHwFaFsuGflmejhNgA5PpUoP3YGaDUCo=
Subject key identifier: 47:93:9E:B4:15:D8:CD:62:88:90:14:4D:AC:C9:8E:29:58:AE:BA:8E
Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial: 022A
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/FD678F40214E11F095B05918C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:30:11 +0000
ROA not before: Sat 17 May 2025 03:41:52 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153563
IP address blocks: 103.140.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Validity
Not Before: May 17 03:41:52 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3eb03-4fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:e4:a7:90:b2:35:26:70:89:4e:65:9f:e4:
fe:fd:01:5b:41:52:47:ab:04:21:ed:67:53:30:3b:
40:82:f1:50:55:cd:09:8a:49:aa:bc:b5:88:42:a4:
af:47:b8:03:5a:c2:44:1e:18:81:e0:15:84:a2:db:
63:e9:ba:90:4c:f8:40:b4:f3:7e:1b:9b:d8:1c:d4:
b0:34:2d:46:0d:10:f7:af:8d:ab:d2:e0:2d:51:54:
24:8f:83:33:14:27:0d:b3:f4:e6:99:de:94:7d:f4:
3e:d2:10:e7:40:a0:8d:4b:dd:d1:ff:21:e5:31:2f:
4f:ad:6c:4b:04:8d:4c:d8:e1:50:ae:bf:7a:c0:f9:
83:f4:38:bc:96:9c:03:82:29:15:68:18:40:5a:6b:
d0:64:ee:7e:d0:cb:c1:54:d7:77:a0:a9:4b:66:f1:
be:43:9d:b4:c4:c6:09:fb:cd:0e:9b:91:32:0b:1c:
db:42:9a:92:19:40:2b:bc:21:cd:81:ca:31:48:32:
be:b6:7e:f7:11:64:d0:46:4e:16:20:f1:62:2e:71:
63:5e:7c:d5:04:de:ca:76:59:cf:4d:ad:e0:36:c4:
88:b4:07:22:25:51:a9:68:62:b9:55:ef:2d:c8:e3:
b7:16:1d:24:3f:7a:ce:a3:94:5c:73:6f:ce:d5:ac:
e5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:93:9E:B4:15:D8:CD:62:88:90:14:4D:AC:C9:8E:29:58:AE:BA:8E
X509v3 Authority Key Identifier:
keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/FD678F40214E11F095B05918C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.195.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:61:17:cb:58:fd:03:b3:3e:40:eb:7c:64:5b:64:50:81:cf:
bb:e5:ca:60:6b:5b:7b:e9:40:64:77:30:c8:98:95:8b:29:4c:
88:3d:60:3f:22:bc:57:74:c5:e9:05:ef:ef:ff:8e:06:96:c4:
c1:39:c0:1e:d4:e5:9d:df:26:55:c4:b9:34:e8:2e:2d:ee:43:
5c:54:69:14:c9:2b:ab:fd:94:44:68:46:9b:b4:8b:8d:b8:be:
9b:f9:e4:fc:3c:ab:94:38:b1:fd:e7:97:65:28:3c:12:5b:05:
79:21:c4:6e:79:ed:8c:df:d3:da:5a:5d:8a:e6:c9:e0:e6:08:
8f:be:f8:21:8b:fe:16:3f:43:0f:00:91:e9:58:9e:4c:4c:6f:
b9:7f:e8:b9:05:aa:ce:2d:e6:87:92:90:fb:f4:ae:cb:4a:26:
df:56:62:61:ae:30:2b:be:a0:be:f9:b7:50:8c:fd:0f:2d:f9:
80:5d:fe:50:99:dc:ae:30:c4:b8:c1:1f:46:92:39:fe:d6:c9:
c3:c9:ed:ab:79:42:10:d2:22:32:88:08:1b:ec:db:20:85:d2:
c0:76:14:2e:3d:d5:ad:7e:31:93:54:35:5f:4d:2c:5e:f0:a2:
c1:1a:d0:4c:f0:d0:dd:b5:39:f7:63:92:a1:1d:a8:ee:27:94:
e6:e4:4a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:03 2026 by rpki-client