
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa
File: FFE0F998101511EDA7D8F271C4F9AE02.roa (raw, json)
Hash identifier: jTUM3+hgZdZwFqiulWHi9w/wa+hX10kkKTchcYY5bx0=
Subject key identifier: 3D:DA:BB:4C:17:6B:15:37:BE:B5:85:50:A7:7E:AD:1E:C9:42:E4:C5
Certificate issuer: /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Certificate serial: 19C1
Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa
Signing time: Sat 28 Feb 2026 17:14:11 +0000
ROA not before: Sat 28 Feb 2026 17:14:11 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 149781
IP address blocks: 103.101.175.0/24 maxlen: 24
2001:df0:d00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6593 (0x19c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBA26, serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Validity
Not Before: Feb 28 17:14:11 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a32263-cdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6e:8e:5f:13:26:b6:ca:12:37:b8:24:be:f1:
5c:b0:00:9e:31:8c:df:13:d0:66:5f:d9:3c:aa:53:
29:e7:18:90:cb:2b:58:53:81:44:13:6d:f4:eb:2d:
78:9b:98:e9:a1:8d:1c:3b:34:26:07:04:c2:81:6c:
ae:cb:c9:7d:a7:2c:66:3e:26:c8:e0:ce:c1:63:e2:
ef:a8:6e:fb:d4:5c:62:3a:23:ee:ba:e9:03:a8:ef:
79:51:33:6b:8d:ff:14:93:60:a4:c0:21:1c:4f:ee:
cb:f1:f2:51:33:81:58:3b:f1:f0:93:61:e2:04:37:
3e:e8:81:d4:a6:1a:0d:20:9c:bf:ea:02:56:57:26:
f3:d2:5f:51:a0:25:5d:53:c6:2f:3f:bc:1f:4d:1f:
7b:78:f9:5b:de:68:d0:b6:31:5a:e9:af:97:d4:75:
55:9b:ec:ee:1d:30:9b:36:b5:e9:70:55:cd:5c:44:
ba:fa:0e:fd:7a:1c:9c:57:52:d5:0b:d9:fd:ca:7a:
92:6d:c6:1a:4c:3e:04:d6:6b:c3:2d:b1:74:22:d7:
12:b4:ad:8b:72:e6:07:33:71:84:03:2a:a6:0c:74:
45:f9:4a:a0:fc:1e:5b:c3:97:1e:3a:17:b4:a0:10:
e2:7e:bb:ac:c1:99:ff:26:08:e1:20:67:6f:09:bf:
52:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DA:BB:4C:17:6B:15:37:BE:B5:85:50:A7:7E:AD:1E:C9:42:E4:C5
X509v3 Authority Key Identifier:
keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.101.175.0/24
IPv6:
2001:df0:d00::/48
Signature Algorithm: sha256WithRSAEncryption
6e:4d:a2:2c:a5:09:97:5a:43:de:51:4e:ef:7f:9e:71:b3:bb:
75:72:47:c9:f7:54:48:a0:45:0e:24:d8:ce:18:00:60:da:06:
3a:b9:ec:1c:a7:48:b5:59:c7:d7:61:47:3e:05:79:38:b8:54:
e9:65:db:82:c6:ad:b8:57:ec:db:5a:3d:c6:7a:2d:b4:4c:ab:
0d:28:79:33:2b:71:cf:00:3f:fa:61:9b:b7:76:3c:22:52:dd:
2c:8a:07:1a:38:0d:fe:17:d2:df:07:b7:58:cd:45:d6:07:a6:
61:da:a6:25:78:38:87:e5:a5:cc:95:24:fc:bb:cd:f9:2a:ae:
cf:89:a3:76:47:f0:e5:8a:02:3f:f6:8d:05:49:d9:46:98:b4:
7a:38:8e:97:58:0a:f7:ca:29:62:85:a5:c2:3f:77:43:a5:07:
08:a6:0a:93:01:91:d2:a4:95:5a:92:40:5c:2f:d7:45:f6:88:
36:a4:46:46:b0:44:03:29:50:94:a8:47:6c:fd:10:2e:cc:0f:
c6:af:15:6b:d3:ba:a8:5f:81:e7:9b:13:be:80:65:8a:c2:9c:
f0:8a:c6:a4:ef:fb:7b:5f:99:70:34:78:0b:cf:5f:bd:c7:16:
1d:95:8d:cf:16:3d:af:8a:30:71:9f:11:87:3c:fc:90:a9:dd:
59:35:bc:be
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICGcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JBMjYxMTAvBgNVBAUTKDFBRkQ0MjY1RTYzRDBDQkY3NTIzNkVEOTY4NkFFNEYw
MDE1NUZGN0UwHhcNMjYwMjI4MTcxNDExWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OWEzMjI2My1jZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2W6OXxMmtsoSN7gkvvFcsACeMYzfE9BmX9k8qlMp5xiQyytYU4FEE2306y14
m5jpoY0cOzQmBwTCgWyuy8l9pyxmPibI4M7BY+LvqG771FxiOiPuuukDqO95UTNr
jf8Uk2CkwCEcT+7L8fJRM4FYO/Hwk2HiBDc+6IHUphoNIJy/6gJWVybz0l9RoCVd
U8YvP7wfTR97ePlb3mjQtjFa6a+X1HVVm+zuHTCbNrXpcFXNXES6+g79ehycV1LV
C9n9ynqSbcYaTD4E1mvDLbF0ItcStK2LcuYHM3GEAyqmDHRF+Uqg/B5bw5ceOhe0
oBDifruswZn/JgjhIGdvCb9SdwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFD3au0wX
axU3vrWFUKd+rR7JQuTFMB8GA1UdIwQYMBaAFBr9QmXmPQy/dSNu2Whq5PABVf9+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkEyNi9DQTY0Q0JGQTgy
NUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURMOTFJMjdaYUdyazhBRlZf
MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d2MUNaZVk5REw5MUkyN1phR3JrOEFGVl8zNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0JBMjYvQ0E2NENCRkE4MjVEMTFFNzkxMzIwOTFEQzRGOUFFMDIvRkZFMEY5OTgx
MDE1MTFFREE3RDhGMjcxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ2WvMA8EAgACMAkDBwAgAQ3wDQAwDQYJKoZIhvcNAQELBQADggEB
AG5NoiylCZdaQ95RTu9/nnGzu3VyR8n3VEigRQ4k2M4YAGDaBjq57BynSLVZx9dh
Rz4FeTi4VOll24LGrbhX7NtaPcZ6LbRMqw0oeTMrcc8AP/phm7d2PCJS3SyKBxo4
Df4X0t8Ht1jNRdYHpmHapiV4OIflpcyVJPy7zfkqrs+Jo3ZH8OWKAj/2jQVJ2UaY
tHo4jpdYCvfKKWKFpcI/d0OlBwimCpMBkdKklVqSQFwv10X2iDakRkawRAMpUJSo
R2z9EC7MD8avFWvTuqhfgeebE76AZYrCnPCKxqTv+3tfmXA0eAvPX73HFh2Vjc8W
Pa+KMHGfEYc8/JCp3Vk1vL4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:50:02 2026 by rpki-client