
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa
File: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (raw, json)
Hash identifier: psNUn0KVy8LcXg75lwX0oEYThtl+Fy/xxsSylBXFzFo=
Subject key identifier: 33:E6:FB:E5:28:A3:DE:6E:A2:03:1C:EA:91:BE:8B:79:54:B9:00:50
Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4
Certificate serial: 03D0
Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:01:08 +0000
ROA not before: Sun 01 Mar 2026 02:21:04 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 4768
IP address blocks: 103.162.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl
rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 976 (0x3d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4
Validity
Not Before: Mar 1 02:21:04 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a42a84-45c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:b4:30:49:ec:3d:3c:c3:0a:97:bd:22:81:
a2:07:83:63:39:3f:86:46:d1:9c:31:2b:17:b5:22:
82:d1:67:40:69:63:80:bd:d1:b8:22:c1:c1:f5:8a:
34:2e:ff:d6:d7:f3:ba:89:33:2b:99:fb:72:95:56:
db:30:ea:52:b4:1a:27:c4:3a:d6:45:b9:ab:65:d3:
e6:13:80:d1:3e:a2:68:33:a7:5f:ee:54:d4:4c:a7:
22:03:30:cd:d6:ca:de:41:9d:91:30:d7:f9:8a:9e:
73:cc:51:97:f5:65:d8:15:c8:0c:0f:7f:8f:af:15:
b5:82:17:ba:be:28:ef:b6:08:4a:f7:11:12:c1:e5:
93:50:76:1a:48:1c:4c:55:96:a7:33:22:a4:a1:47:
e1:74:78:cc:af:9b:d0:a2:2e:ea:4a:20:84:de:f2:
35:c2:8b:47:89:77:69:8d:4f:71:41:ec:ea:8e:b6:
6c:38:0e:55:9b:13:62:d4:a7:31:05:63:2c:cb:75:
f6:0d:4a:e7:cd:37:29:cf:56:d5:1d:d2:66:95:e9:
c6:91:68:b9:3d:d5:a8:46:52:43:f8:de:65:08:02:
28:a1:c7:f2:6a:e3:43:93:c1:63:d1:2d:fb:80:ee:
c9:e0:a4:f1:8a:c7:f5:46:4a:4b:ad:f0:29:ef:2f:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:FB:E5:28:A3:DE:6E:A2:03:1C:EA:91:BE:8B:79:54:B9:00:50
X509v3 Authority Key Identifier:
keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.104.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b7:c6:a7:f4:e7:b9:24:5f:dc:73:45:0e:f7:08:30:88:92:
12:d8:dd:d4:08:59:53:91:c9:47:55:8c:4b:5d:67:5c:d4:77:
5a:73:79:96:71:db:4b:e9:d4:d9:86:d4:b3:d3:f0:a3:9c:05:
96:37:2b:af:61:e6:2c:81:49:1d:ef:61:01:9d:56:49:84:e8:
fb:82:b9:73:fb:e5:ad:40:5a:ff:ac:22:77:e6:70:3d:57:89:
b4:f4:54:da:bc:b8:35:8b:6d:4c:97:8e:40:0d:d0:1b:d7:10:
bd:56:33:22:ce:46:87:03:5b:6a:08:26:13:3a:38:0a:97:ca:
fc:c2:4c:92:96:5e:f4:8c:8a:6b:d8:d6:d1:78:37:22:1e:29:
ce:8a:2d:90:69:4e:f5:60:9e:87:6a:b4:a2:8a:7f:61:aa:84:
28:da:07:8f:16:14:77:4b:23:ca:4c:51:92:42:d9:47:93:db:
4e:dc:84:2d:fd:65:99:55:6a:fc:f7:b2:d8:91:d3:05:2f:0a:
ca:34:7f:8d:4d:7f:6b:39:87:97:ae:e5:20:17:0d:8e:45:3e:
c4:04:58:92:fe:9d:de:1b:e3:0a:4b:e3:fa:2f:c9:34:2c:e4:
d2:51:6d:11:de:09:dc:14:fd:bf:c3:c9:ce:94:55:41:11:d6:
4f:14:e0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:00 2026 by rpki-client