
$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/FC159BECF4D911EFB4F5FC16C4F9AE02.roa
File: FC159BECF4D911EFB4F5FC16C4F9AE02.roa (raw, json)
Hash identifier: pSZyO8DRU7k04LVzxpq4jULZp/HQ6qCZD+25WSrrumg=
Subject key identifier: 32:FA:D7:4A:81:3E:9F:E0:16:5F:FE:E0:FA:B7:8E:9D:FB:4E:63:09
Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Certificate serial: 03C8
Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/FC159BECF4D911EFB4F5FC16C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:57:58 +0000
ROA not before: Sun 11 May 2025 01:07:43 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 132742
IP address blocks: 45.115.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl
rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 968 (0x3c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91702B9, serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Validity
Not Before: May 11 01:07:43 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3ff95-a339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:50:23:62:36:fa:de:df:7e:56:4a:f6:d2:
ff:a3:03:66:55:2f:12:6d:b1:95:ec:6a:ca:06:c4:
a4:58:80:cf:ae:e9:8e:9d:bf:87:c5:8f:cc:3b:71:
b6:c7:e0:38:44:18:e9:96:8d:26:f6:ab:06:11:5b:
17:a8:60:33:f6:2b:0c:51:61:77:18:b6:65:c2:51:
1f:30:3a:2b:b0:99:45:88:d2:1f:97:7b:fa:0e:ae:
dc:4c:ed:f0:23:8a:55:33:72:f7:c0:cd:d0:70:01:
ea:43:76:76:c9:02:52:2c:85:b3:ec:e0:4a:6c:e4:
03:14:c5:6e:a2:bc:3e:b8:b9:ca:69:8c:6e:95:ea:
17:9c:ce:c6:73:49:f9:58:6b:b1:f5:7a:fa:05:bb:
2a:fc:4c:82:c1:16:cd:79:b2:18:49:58:69:32:57:
89:64:eb:ae:15:01:48:a5:6d:47:cd:91:98:b6:d6:
b6:c8:9d:7b:82:73:a3:df:cb:4d:c9:5e:10:6d:c6:
b4:8d:f7:e5:01:ef:b8:95:ba:75:f9:c6:aa:d7:45:
a6:59:f7:75:e0:46:0a:f8:57:03:f2:de:17:bf:4c:
d7:9d:60:f6:43:da:b8:48:43:5f:1a:9e:3e:53:5a:
75:7e:92:8c:21:d5:44:e5:2b:d3:f1:da:b6:9a:e8:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FA:D7:4A:81:3E:9F:E0:16:5F:FE:E0:FA:B7:8E:9D:FB:4E:63:09
X509v3 Authority Key Identifier:
keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/FC159BECF4D911EFB4F5FC16C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.115.240.0/22
Signature Algorithm: sha256WithRSAEncryption
02:41:68:1e:09:17:cd:39:0e:0d:66:4d:be:fc:4b:9f:42:aa:
31:cd:48:e8:73:01:3a:5c:4d:e4:60:c8:15:f3:12:6b:df:f5:
ef:b3:dc:ef:90:28:97:00:54:8f:cb:42:8e:b3:66:99:30:e1:
49:b8:ca:a0:5c:48:34:7d:62:87:ce:02:c8:b4:5b:98:aa:00:
32:82:a1:41:b1:04:55:f2:f9:da:07:d0:31:db:42:79:79:49:
de:8d:ab:09:7b:25:67:58:62:94:3f:ea:06:38:8e:ae:43:f4:
77:84:15:95:cd:b2:02:56:10:91:82:e8:d3:6f:06:07:a1:d5:
d9:e5:b7:b5:43:fe:bf:4e:ae:be:76:22:cb:17:44:f9:ce:44:
60:cd:70:43:80:a7:00:23:d5:d4:a8:b9:00:4c:ab:23:11:e0:
b2:73:5e:71:5d:84:cd:19:fd:03:f3:04:ff:00:02:86:df:49:
9e:ff:fd:17:77:ef:3d:d7:8e:af:62:09:1d:89:23:af:da:b5:
d7:27:f4:30:fa:f3:55:f6:db:a0:30:3b:aa:9b:96:8b:55:2f:
7b:7e:08:3c:2e:e9:e1:66:61:0d:38:55:63:c2:f2:82:34:14:
e9:0b:18:73:92:34:61:82:67:0d:1b:e7:f5:24:3b:58:e3:33:
e1:0e:7e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:10:57 2026 by rpki-client