
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/FBCDF210490B11EC8E4D1136C4F9AE02.roa
File: FBCDF210490B11EC8E4D1136C4F9AE02.roa (raw, json)
Hash identifier: 47wblHNUHR8QOKJUoT7iYPHs3BqPfi5JcNUXRdRFnRQ=
Subject key identifier: 44:E5:8D:A0:4D:99:8F:6D:EA:7F:FD:B5:9E:5D:A2:FA:F4:B5:49:10
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 37DA
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/FBCDF210490B11EC8E4D1136C4F9AE02.roa
Signing time: Thu 16 Apr 2026 15:14:41 +0000
ROA not before: Thu 16 Apr 2026 15:14:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141450
IP address blocks: 39.34.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14298 (0x37da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Apr 16 15:14:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e0fce1-e7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f2:a9:bc:a6:17:c1:f2:97:34:37:3d:91:41:
9d:df:9c:58:f1:58:e0:17:97:ba:ba:d0:60:ef:3e:
ce:14:a5:83:cb:c4:f8:0e:9b:5d:45:d2:94:1b:33:
8a:e3:c4:59:b1:41:cc:22:49:33:5b:94:a9:38:73:
85:31:ce:49:1d:66:4a:ab:e9:92:98:62:bb:6c:72:
bb:90:bd:e9:09:b5:84:02:6a:11:31:bf:37:5e:34:
93:94:28:b7:cb:ae:5f:1b:1e:80:6d:ba:0b:71:77:
7e:c9:d9:cc:ea:60:3d:6a:8b:09:93:5e:ea:b3:80:
6d:7d:46:c0:0e:e5:f6:0c:26:19:b1:84:3d:66:c1:
15:82:f3:c5:fc:6f:02:9b:97:4b:4b:2f:47:f7:41:
c4:3b:dc:2b:97:24:41:bf:c7:d8:23:e0:79:80:3b:
fd:41:e3:97:c4:6f:9a:7b:38:ad:71:24:79:b0:cb:
fb:48:97:f3:59:34:a1:ee:63:48:22:4a:36:bf:8b:
3d:93:4e:86:0e:b8:d0:84:9d:bc:db:ca:5b:c3:a8:
ff:49:1c:62:24:55:6c:00:5f:9c:24:88:8b:85:c5:
4f:17:df:e8:03:a5:4a:81:aa:82:7e:0f:79:d2:90:
4c:2b:cc:af:45:b0:02:22:be:ef:0c:bc:64:c4:3c:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E5:8D:A0:4D:99:8F:6D:EA:7F:FD:B5:9E:5D:A2:FA:F4:B5:49:10
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/FBCDF210490B11EC8E4D1136C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
39.34.160.0/20
Signature Algorithm: sha256WithRSAEncryption
05:1c:35:ee:d6:e9:68:b1:86:19:c1:34:50:a6:78:42:cc:16:
9e:a0:e3:6e:4c:11:2a:4b:da:ab:18:7a:f7:28:b5:8f:fc:a3:
d5:d4:46:77:aa:9b:b1:b7:f3:d1:3a:68:44:db:03:33:a7:10:
30:14:d9:8b:4d:35:d9:70:4c:52:bf:09:1b:4c:c7:b1:7a:af:
51:30:ea:66:ce:b8:c9:49:82:ce:c1:1e:c4:cc:41:ff:6f:fc:
c5:2a:d2:fd:df:9e:7b:ad:d6:1a:49:02:7a:b2:51:74:4b:1c:
b6:f3:aa:23:ed:b3:68:f9:bc:b8:03:6c:8a:a4:95:2f:c6:a0:
cb:8c:98:f9:c2:55:af:63:66:ce:20:bc:b5:40:c3:54:8b:dc:
8e:6f:19:4c:85:76:0e:87:74:87:8e:0b:ac:c8:66:f4:57:b9:
ed:3c:17:7d:24:c4:43:47:62:c9:d8:6c:62:de:c8:2d:e7:8c:
fd:0a:c7:55:59:6d:4f:31:ee:ec:4a:04:95:a3:a1:8c:fc:d1:
f5:ca:5b:89:79:60:ae:3d:5f:73:6a:33:3b:60:58:42:9f:a8:
b0:7f:2d:0a:31:a1:58:9e:ff:81:34:2c:bf:88:2d:72:3f:ad:
40:5f:c3:58:72:28:31:9b:39:bd:2f:f7:6a:37:12:0c:03:f9:
56:f0:10:53
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICN9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA4MzIxMTAvBgNVBAUTKDlFRDkwNTUxMDdDNzBGODVCQjkxQThEQTAyNzBCNUNB
NzYwQUVCNTQwHhcNMjYwNDE2MTUxNDQxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWUwZmNlMS1lN2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7/KpvKYXwfKXNDc9kUGd35xY8VjgF5e6utBg7z7OFKWDy8T4DptdRdKUGzOK
48RZsUHMIkkzW5SpOHOFMc5JHWZKq+mSmGK7bHK7kL3pCbWEAmoRMb83XjSTlCi3
y65fGx6AbboLcXd+ydnM6mA9aosJk17qs4BtfUbADuX2DCYZsYQ9ZsEVgvPF/G8C
m5dLSy9H90HEO9wrlyRBv8fYI+B5gDv9QeOXxG+aezitcSR5sMv7SJfzWTSh7mNI
Iko2v4s9k06GDrjQhJ2828pbw6j/SRxiJFVsAF+cJIiLhcVPF9/oA6VKgaqCfg95
0pBMK8yvRbACIr7vDLxkxDxdsQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFETljaBN
mY9t6n/9tZ5dovr0tUkQMB8GA1UdIwQYMBaAFJ7ZBVEHxw+Fu5Go2gJwtcp2CutU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDgzMi85REFGNzgwRTFE
OTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0VzdrYWphQW5DMXluWUs2
MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL250a0ZVUWZIRDRXN2thamFBbkMxeW5ZSzYxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTA4MzIvOURBRjc4MEUxRDk0MTFFMjk5MDFGM0Y4MDhCMDJDRDIvRkJDREYyMTA0
OTBCMTFFQzhFNEQxMTM2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQEJyKgMA0GCSqGSIb3DQEBCwUAA4IBAQAFHDXu1ulosYYZwTRQpnhC
zBaeoONuTBEqS9qrGHr3KLWP/KPV1EZ3qpuxt/PROmhE2wMzpxAwFNmLTTXZcExS
vwkbTMexeq9RMOpmzrjJSYLOwR7EzEH/b/zFKtL93557rdYaSQJ6slF0Sxy286oj
7bNo+by4A2yKpJUvxqDLjJj5wlWvY2bOILy1QMNUi9yObxlMhXYOh3SHjgusyGb0
V7ntPBd9JMRDR2LJ2Gxi3sgt54z9CsdVWW1PMe7sSgSVo6GM/NH1yluJeWCuPV9z
ajM7YFhCn6iwfy0KMaFYnv+BNCy/iC1yP61AX8NYcigxmzm9L/dqNxIMA/lW8BBT
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:55:09 2026 by rpki-client