
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FECE3C3C855711EF8E79C52BC4F9AE02.roa
File: FECE3C3C855711EF8E79C52BC4F9AE02.roa (raw, json)
Hash identifier: mH9aDJls4Z4vdRc3n6JwAhEgaMfwmf9djBOACp2CztQ=
Subject key identifier: BD:75:BA:5D:0D:9D:90:9D:A7:3F:C6:DD:2C:49:B3:19:AB:05:96:D5
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 0482
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FECE3C3C855711EF8E79C52BC4F9AE02.roa
Signing time: Sun 13 Sep 2026 01:51:41 +0000
ROA not before: Sun 13 Sep 2026 01:51:41 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 8708
IP address blocks: 103.243.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154 (0x482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: Sep 13 01:51:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa601ad-102b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:a6:7d:1a:3d:f7:c5:2e:99:a4:2b:e9:ed:
ba:e8:e9:19:53:19:15:c6:7b:c1:0c:1d:af:a2:8e:
1d:ff:d5:d2:5e:27:13:3d:b1:25:55:f9:b8:c9:70:
04:49:73:45:16:b1:e1:63:3c:29:b0:1f:e6:a8:e0:
e0:59:e2:0a:bb:56:0d:d0:8e:11:0f:2a:79:57:6f:
f9:c8:99:85:f0:67:63:ba:ee:91:cb:d3:1a:cb:7d:
a1:14:b9:c4:41:eb:3b:5b:ca:a3:e9:24:6f:e0:2c:
33:14:a7:8f:35:94:73:85:ff:b6:52:1e:88:7a:c1:
58:c7:37:fb:4f:f0:7f:8d:5a:7c:91:66:41:54:14:
f7:e5:8e:fc:52:29:4b:fb:44:95:aa:06:52:e8:17:
7b:93:72:22:c0:51:93:f3:1e:8f:b8:39:12:74:5e:
a8:2e:db:08:e8:96:bc:77:bc:a9:26:63:74:d2:fb:
2c:7a:b6:6b:95:b2:f3:4e:d7:1b:f4:e5:f5:7a:ae:
07:d1:81:8e:c0:28:02:d5:57:0f:b5:9f:8f:48:67:
20:8c:30:ac:3b:a6:dc:32:79:c3:8e:90:4a:1a:1c:
d0:ef:21:96:00:fc:8b:67:3f:97:a2:12:50:72:f8:
a2:63:23:cf:37:3d:90:5c:65:75:5c:d3:ce:05:32:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:75:BA:5D:0D:9D:90:9D:A7:3F:C6:DD:2C:49:B3:19:AB:05:96:D5
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FECE3C3C855711EF8E79C52BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.243.144.0/22
Signature Algorithm: sha256WithRSAEncryption
26:f7:c5:34:aa:9f:30:b3:d1:86:90:4c:1f:93:c6:01:9c:b9:
6a:b8:54:1d:e8:f5:c3:73:b2:69:a7:85:eb:0e:ad:15:ac:11:
bf:30:c7:0d:9a:8b:2b:26:c3:77:d2:6b:17:fe:31:8c:a5:f1:
b7:c4:9c:d7:a4:7d:13:7a:1b:75:52:11:e8:b9:26:ad:87:87:
4e:5b:e2:10:61:3a:30:0b:04:9b:60:b4:37:62:37:a7:d8:d4:
be:e9:bf:60:1c:c9:e5:c5:1c:59:1c:a0:c5:77:ef:6e:bf:b4:
3b:7d:d3:d5:5c:da:33:2b:a3:64:65:8e:39:e8:a8:23:97:d3:
4f:8f:fe:2c:dc:6f:15:d6:04:15:7c:73:ae:d7:f3:9a:68:ca:
1b:0b:5a:64:69:a2:09:b0:aa:fb:8d:fa:27:8e:de:e4:bc:5c:
ed:6a:d2:1d:50:4f:32:c1:1d:e0:e9:c8:de:47:18:f4:ed:07:
cd:1f:26:6c:77:08:b6:ff:0a:48:98:a0:cb:96:d8:24:45:56:
3e:3d:06:2d:e3:f4:7c:af:61:4a:36:da:76:28:c5:f2:62:dd:
1b:c5:3e:29:de:b2:09:16:7c:00:4f:d6:0e:62:60:11:bf:b8:
7c:8f:f3:88:f2:92:84:6a:c8:07:35:cd:04:4b:66:c6:5e:a9:
20:02:4f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:51:24 2026 by rpki-client