
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/1FCC64AC719511F090F7F83BC4F9AE02.roa
File: 1FCC64AC719511F090F7F83BC4F9AE02.roa (raw, json)
Hash identifier: HDz+1GzuPpUTidanGB4G4ykVBkwdTS/Q6fpag6ihvfc=
Subject key identifier: 31:A3:6A:25:33:57:8E:69:BF:02:7B:44:C6:90:99:63:8D:02:EC:3A
Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial: 0BE5
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/1FCC64AC719511F090F7F83BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:22:23 +0000
ROA not before: Sun 02 Nov 2025 19:08:54 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 17408
IP address blocks: 103.14.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3045 (0xbe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Validity
Not Before: Nov 2 19:08:54 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a483df-9227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:7f:d6:b7:c5:1b:65:92:b7:64:72:9d:7c:
58:ed:e8:46:ae:71:23:31:09:df:f6:fc:08:bb:fb:
0b:d5:69:60:3d:8d:0d:b7:38:39:94:94:01:b4:c2:
46:21:ed:15:ff:50:88:9d:f9:98:47:92:35:ad:c4:
76:2e:d2:4f:22:c5:c2:78:e3:58:b6:8f:a2:9c:a2:
25:9d:86:85:68:04:8f:48:1b:aa:79:b9:ab:f3:11:
f2:4d:1a:c8:a2:af:5b:77:0b:d5:f2:8f:8d:b9:77:
e5:4b:a1:f6:1b:c8:d2:e1:be:49:fd:fd:ab:b5:e5:
7d:c7:9b:4c:cc:1c:b0:df:13:d6:8b:95:48:9c:c9:
cd:13:ae:58:1f:21:6d:97:b5:15:02:9c:23:ea:8d:
11:fa:53:6e:15:fc:ee:e5:eb:73:d8:a4:51:e0:1c:
22:4e:cd:8b:6b:3e:47:85:c9:8a:2b:03:3f:fb:94:
09:13:db:3d:1b:e7:38:87:3c:24:c2:6d:ff:32:7e:
3e:90:e6:68:36:e8:46:70:43:f4:7a:a4:b2:3d:c7:
f9:1e:fd:3c:89:a6:e5:fc:d9:94:fd:e5:e0:fe:7f:
9c:19:74:26:65:a7:2b:de:5b:02:ac:36:ff:6e:be:
4c:1f:ed:55:09:c8:1a:67:aa:50:66:82:5e:be:41:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A3:6A:25:33:57:8E:69:BF:02:7B:44:C6:90:99:63:8D:02:EC:3A
X509v3 Authority Key Identifier:
keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/1FCC64AC719511F090F7F83BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.176.0/22
Signature Algorithm: sha256WithRSAEncryption
67:66:85:fb:fe:5d:4f:32:bf:c6:b3:6a:ce:e5:c1:02:d4:e6:
5f:8b:25:b5:eb:ac:8e:c5:60:53:6a:c6:24:b4:69:1c:d6:1f:
7c:72:38:56:5a:ee:2b:f8:81:5f:f2:bf:71:df:f2:52:f0:44:
1d:36:ac:81:68:d4:a0:80:35:8e:0a:50:44:33:cc:80:b3:c8:
dd:ad:45:25:ee:be:21:3d:ad:30:67:a3:d6:e6:b3:6c:d0:ab:
d4:77:56:08:07:7e:d5:c6:4f:48:24:e7:c9:b3:5b:32:b4:d5:
a9:88:3f:45:8c:eb:11:ac:a6:4e:75:87:a5:8f:0d:98:c2:47:
be:64:dc:4b:7b:f4:c2:0e:09:d6:ed:6f:ab:83:9b:1d:7c:33:
a7:4d:a2:f0:4f:18:92:39:6a:5d:29:f2:f3:b3:dc:d2:47:e3:
d9:60:fb:80:fb:90:37:41:90:4b:be:d6:2b:9c:df:b1:45:a7:
27:c4:cd:3f:63:f7:53:0c:80:96:96:54:7f:ac:ee:22:26:48:
3c:23:2b:79:81:33:a5:db:a6:12:0a:3d:fb:18:f6:6e:84:b4:
d1:ec:5a:5e:bb:ef:6f:ef:07:93:de:56:fe:d4:4d:d3:49:cf:
9a:52:e3:36:7e:72:bf:f0:a2:e7:86:cd:99:a4:bf:51:f6:ae:
8f:0a:5d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:40 2026 by rpki-client