
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa
File: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (raw, json)
Hash identifier: AViHV7y6w+VuXdqb9Rg2Cx88Ixz8kcPYy8eDkaG1C5c=
Subject key identifier: 54:70:F7:51:7E:59:11:93:35:D1:07:8F:A7:B7:E1:07:84:91:EB:70
Certificate issuer: /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Certificate serial: 023A
Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa
Signing time: Mon 27 Oct 2025 03:46:13 +0000
ROA not before: Mon 27 Oct 2025 03:46:13 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 135019
IP address blocks: 103.23.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Validity
Not Before: Oct 27 03:46:13 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=68feeb04-6a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:8f:d2:14:9c:ad:b2:6b:93:72:f7:ec:fd:
1a:9f:08:25:bc:3e:f8:a2:a0:5f:63:af:1f:f2:a5:
45:de:28:14:94:61:eb:c9:a7:d2:da:0a:17:59:73:
a9:4d:76:44:88:80:83:53:39:2b:85:19:aa:43:d0:
2c:36:82:cb:44:c8:88:cd:d2:37:b9:ee:f0:cd:ab:
69:5e:8c:ed:da:47:66:0b:7c:08:d6:a7:74:11:cd:
ed:24:cf:31:85:0b:5d:86:8f:bd:fd:13:be:dd:be:
a8:fb:ad:46:b8:e4:e2:10:ed:6d:28:82:81:9b:9c:
38:86:06:c2:51:86:e0:f2:58:19:01:88:ee:d4:41:
9f:ae:70:40:27:75:3f:d7:2c:5b:76:b1:b5:bd:d2:
70:3d:e7:c1:d3:8f:7f:ec:2c:c9:ec:16:4f:26:bb:
cd:11:9c:b3:a1:15:d7:82:e6:3d:2f:1a:34:6b:61:
e6:9a:df:f5:c7:58:6a:0b:28:0d:b1:57:a6:63:7e:
c3:40:9c:e1:09:fe:bd:ba:a7:1a:3f:cf:12:39:4c:
ff:89:56:bf:2e:5f:33:32:90:99:a3:16:55:76:14:
ff:1a:00:f0:55:40:76:b2:6f:02:9d:cc:5e:a8:55:
89:c0:e7:f9:49:de:88:38:14:d6:7c:15:40:36:50:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:70:F7:51:7E:59:11:93:35:D1:07:8F:A7:B7:E1:07:84:91:EB:70
X509v3 Authority Key Identifier:
keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.255.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:52:9b:a5:7e:c7:8b:41:ba:7c:3d:65:d8:bd:53:da:ae:03:
80:7f:29:2a:57:ac:4d:74:ee:8c:d9:67:41:eb:c1:99:76:67:
39:f1:c1:6c:7d:ae:39:6a:36:79:d6:b8:de:60:13:05:f0:29:
18:c0:8a:05:03:64:5e:98:53:20:9b:d2:02:5e:a4:e8:9c:96:
53:f0:de:f7:24:ea:7a:56:24:5e:9c:3c:e8:d1:00:2d:b3:b5:
1c:96:f7:e5:da:23:cf:d1:db:3a:66:36:8d:53:db:5a:cc:60:
27:1a:00:a8:33:84:fb:a9:a5:5c:59:63:e0:86:d5:5a:e8:82:
5e:03:da:34:d0:dc:37:aa:8a:e6:27:89:86:27:26:9e:35:4f:
50:55:57:da:46:9c:77:41:a4:a4:73:8e:0a:e6:c0:32:7e:d4:
9a:fa:b3:e3:90:6c:5d:ab:a9:75:4d:84:10:59:ee:23:0c:aa:
f5:9c:07:35:92:39:93:3b:88:a6:91:39:70:83:75:aa:4a:dc:
3d:91:f8:50:c7:11:40:d1:48:e3:ed:35:7e:80:21:03:f1:0e:
6f:04:44:55:cb:93:1d:ab:c7:1e:c2:00:35:7c:e5:13:34:8c:
41:89:15:ee:89:17:5a:43:68:e7:6d:a4:e8:c3:b4:b8:1c:6c:
c9:c7:a8:e6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVCQjExMTAvBgNVBAUTKEVBNDE5QTc5NjI5OTYyNUEwNzRBNjVCN0NBQ0VGRjE4
QjgwNjZDOEIwHhcNMjUxMDI3MDM0NjEzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGZlZWIwNC02YTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs9yP0hScrbJrk3L37P0anwglvD74oqBfY68f8qVF3igUlGHryafS2goXWXOp
TXZEiICDUzkrhRmqQ9AsNoLLRMiIzdI3ue7wzatpXozt2kdmC3wI1qd0Ec3tJM8x
hQtdho+9/RO+3b6o+61GuOTiEO1tKIKBm5w4hgbCUYbg8lgZAYju1EGfrnBAJ3U/
1yxbdrG1vdJwPefB049/7CzJ7BZPJrvNEZyzoRXXguY9Lxo0a2Hmmt/1x1hqCygN
sVemY37DQJzhCf69uqcaP88SOUz/iVa/Ll8zMpCZoxZVdhT/GgDwVUB2sm8Cncxe
qFWJwOf5Sd6IOBTWfBVANlBEuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFRw91F+
WRGTNdEHj6e34QeEketwMB8GA1UdIwQYMBaAFOpBmnlimWJaB0plt8rO/xi4BmyL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJCMS82N0JFQTQwNjUz
OUMxMUVEQUUwMDRFMTdDNEY5QUUwMi82a0dhZVdLWllsb0hTbVczeXM3X0dMZ0di
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZrR2FlV0taWWxvSFNtVzN5czdfR0xnR2JJcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkVCQjEvNjdCRUE0MDY1MzlDMTFFREFFMDA0RTE3QzRGOUFFMDIvRkVERTYxQjZF
RDJDMTFFRUJGOEYzRTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnF/8wDQYJKoZIhvcNAQELBQADggEBAH9Sm6V+x4tBunw9
Zdi9U9quA4B/KSpXrE107ozZZ0HrwZl2ZznxwWx9rjlqNnnWuN5gEwXwKRjAigUD
ZF6YUyCb0gJepOicllPw3vck6npWJF6cPOjRAC2ztRyW9+XaI8/R2zpmNo1T21rM
YCcaAKgzhPuppVxZY+CG1Vrogl4D2jTQ3DeqiuYniYYnJp41T1BVV9pGnHdBpKRz
jgrmwDJ+1Jr6s+OQbF2rqXVNhBBZ7iMMqvWcBzWSOZM7iKaROXCDdapK3D2R+FDH
EUDRSOPtNX6AIQPxDm8ERFXLkx2rxx7CADV85RM0jEGJFe6JF1pDaOdtpOjDtLgc
bMnHqOY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:05:10 2025 by rpki-client