
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa
File: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (raw, json)
Hash identifier: ASL8/2HCWAJCmthowgFWIUdkitcmGIEB/XyIsZpt42w=
Subject key identifier: 08:07:29:47:54:11:35:09:CD:67:B2:6C:30:19:D3:A8:A0:11:67:77
Certificate issuer: /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Certificate serial: F3
Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:49:54 +0000
ROA not before: Wed 04 Jun 2025 23:03:13 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 142285
IP address blocks: 160.250.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Validity
Not Before: Jun 4 23:03:13 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a40bc2-302d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:ee:32:37:31:78:95:d6:94:82:4a:b1:e8:
62:5c:ee:41:32:79:f1:c7:8c:8c:65:ad:75:59:19:
08:b3:80:6e:22:60:59:23:69:31:03:8d:2d:d6:60:
44:0f:67:19:13:76:d6:fd:d7:f8:0a:43:f8:51:ee:
90:9d:7c:80:d3:6d:78:ae:f2:55:ba:4a:83:a8:78:
2e:13:fc:03:5a:9d:1a:92:0d:a8:48:1c:a2:df:6e:
46:e2:9b:ea:ca:11:6a:b5:dd:1d:36:3d:58:93:dd:
5c:59:ec:11:aa:a1:56:c3:f2:69:ef:01:19:24:3a:
04:ba:6b:08:18:06:6b:22:9d:b1:bc:82:7e:09:fd:
85:eb:b8:ff:09:7d:18:8f:6a:64:0f:c2:45:1d:f6:
a2:03:f5:f4:63:b1:9c:41:14:01:ec:c7:6a:78:81:
5c:9c:ff:86:0a:0c:e7:dd:eb:9d:c2:6d:47:a5:b2:
a5:da:ff:52:71:bc:8d:cf:eb:e4:b1:17:27:57:86:
ba:e2:39:ed:c7:a4:c4:dd:df:de:24:74:61:e9:6a:
a3:ce:ee:be:8f:e7:cf:db:ce:0b:6a:59:a7:2c:5e:
d4:cb:a7:cf:3d:30:5e:d7:76:86:65:ac:e1:1e:a5:
2d:32:c8:ec:81:3d:8d:a6:4c:90:14:c3:76:da:4d:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:07:29:47:54:11:35:09:CD:67:B2:6C:30:19:D3:A8:A0:11:67:77
X509v3 Authority Key Identifier:
keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.73.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ff:9d:70:f7:1f:23:af:07:76:08:eb:54:65:ce:66:31:34:
58:35:72:f9:bb:24:9a:bb:4e:4c:6d:7d:21:13:b9:47:f6:09:
ab:ed:de:33:31:e5:86:8c:cb:15:2d:6f:73:c0:a2:57:ec:d3:
40:ed:59:db:97:57:b9:8d:d3:8a:b1:28:93:c3:67:e1:de:5e:
65:8d:14:e3:81:d6:ee:a2:fe:21:4e:8d:7d:df:ee:73:8e:94:
eb:c8:f2:ee:31:db:00:5d:52:54:d0:8c:93:c0:ed:4c:e8:63:
f0:9d:11:24:50:5b:96:4c:e2:5a:b4:07:d2:d7:75:52:ef:6e:
3e:bc:eb:01:6b:59:b5:ae:b8:fb:a9:17:00:78:fd:b9:96:2a:
f1:74:34:f5:29:b8:24:62:91:4f:5c:16:39:30:52:7b:5f:f3:
5a:1a:5b:fe:d7:ff:be:cd:d4:d0:11:ca:3b:11:f8:90:64:71:
f9:6e:8b:69:47:36:4c:4e:16:15:d3:60:42:3d:d9:1f:a0:5a:
60:1c:a9:96:42:16:cd:00:97:57:b5:84:3a:3c:bf:15:7b:1c:
a9:58:2c:38:03:fc:14:1d:5f:27:5e:66:16:4c:1d:d8:5a:dd:
51:6d:95:5c:41:a9:91:fd:da:aa:84:17:66:65:7a:62:a2:3e:
fe:62:4f:2f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZGMkQxMTAvBgNVBAUTKEFGNjcyREE4QzVEMUQ2QzgwRDUwNjE3OEM5RTdDQjc0
NEY2RTM4RTYwHhcNMjUwNjA0MjMwMzEzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGJjMi0zMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArUDuMjcxeJXWlIJKsehiXO5BMnnxx4yMZa11WRkIs4BuImBZI2kxA40t1mBE
D2cZE3bW/df4CkP4Ue6QnXyA0214rvJVukqDqHguE/wDWp0akg2oSByi325G4pvq
yhFqtd0dNj1Yk91cWewRqqFWw/Jp7wEZJDoEumsIGAZrIp2xvIJ+Cf2F67j/CX0Y
j2pkD8JFHfaiA/X0Y7GcQRQB7MdqeIFcnP+GCgzn3eudwm1HpbKl2v9ScbyNz+vk
sRcnV4a64jntx6TE3d/eJHRh6Wqjzu6+j+fP284LalmnLF7Uy6fPPTBe13aGZazh
HqUtMsjsgT2NpkyQFMN22k1x1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAgHKUdU
ETUJzWeybDAZ06igEWd3MB8GA1UdIwQYMBaAFK9nLajF0dbIDVBheMnny3RPbjjm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkYyRC82RjgyMTE3OEFC
ODgxMUVGODBDNzVBNzRDNEY5QUUwMi9yMmN0cU1YUjFzZ05VR0Y0eWVmTGRFOXVP
T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3IyY3RxTVhSMXNnTlVHRjR5ZWZMZEU5dU9PWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTZGMkQvNkY4MjExNzhBQjg4MTFFRjgwQzc1QTc0QzRGOUFFMDIvRkJFMEFCNTZB
QzY1MTFFRkFFQUE4QTNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoPpJMA0GCSqGSIb3DQEBCwUAA4IBAQCe/51w9x8jrwd2COtUZc5m
MTRYNXL5uySau05MbX0hE7lH9gmr7d4zMeWGjMsVLW9zwKJX7NNA7Vnbl1e5jdOK
sSiTw2fh3l5ljRTjgdbuov4hTo193+5zjpTryPLuMdsAXVJU0IyTwO1M6GPwnREk
UFuWTOJatAfS13VS724+vOsBa1m1rrj7qRcAeP25lirxdDT1KbgkYpFPXBY5MFJ7
X/NaGlv+1/++zdTQEco7EfiQZHH5botpRzZMThYV02BCPdkfoFpgHKmWQhbNAJdX
tYQ6PL8VexypWCw4A/wUHV8nXmYWTB3YWt1RbZVcQamR/dqqhBdmZXpioj7+Yk8v
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:16 2026 by rpki-client