
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/FC72B9529F0311EAB6B8EA87C4F9AE02.roa
File: FC72B9529F0311EAB6B8EA87C4F9AE02.roa (raw, json)
Hash identifier: US7l9IRW6KnysaR3hgfIHQKP61jxpaRsUq+BQajlvlE=
Subject key identifier: 84:2E:C5:BB:D9:12:BF:E5:F3:52:16:12:B8:FB:B1:E8:C3:4E:8E:75
Certificate issuer: /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Certificate serial: 360C
Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/FC72B9529F0311EAB6B8EA87C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:18:11 +0000
ROA not before: Fri 27 Nov 2020 14:20:06 +0000
ROA not after: Mon 31 Mar 2031 00:00:00 +0000
asID: 18366
IP address blocks: 202.12.31.0/24 maxlen: 24
2001:dd8:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13836 (0x360c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC5BE, serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Validity
Not Before: Nov 27 14:20:06 2020 GMT
Not After : Mar 31 00:00:00 2031 GMT
Subject: CN=69a474d3-8a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6f:cb:73:40:6d:23:89:eb:48:33:c7:89:d5:
71:99:32:6f:af:8a:91:1c:53:47:73:d6:ee:b6:60:
00:de:8f:4d:97:70:32:25:1e:15:55:79:5d:be:e5:
65:23:88:0c:ce:61:24:c1:11:87:ed:32:c6:40:2e:
36:d8:4b:34:28:00:1b:ce:c8:c9:0f:33:8f:2b:b3:
94:8c:06:cf:0d:78:5b:be:ef:ea:f1:03:a6:ff:7e:
a7:04:88:4b:ab:05:af:1e:0c:6b:96:d4:05:de:99:
59:ab:7f:c0:77:5a:cc:77:59:05:d9:8e:ae:40:b6:
8c:11:87:08:c8:38:2f:11:22:76:2d:09:61:1b:73:
58:e8:7c:99:4d:b7:1a:e5:89:dd:12:00:3f:09:22:
90:44:5c:bc:43:39:77:5b:65:c1:77:57:5e:89:70:
4a:07:64:58:54:f4:43:c0:d9:63:f1:b8:ab:9a:20:
ce:a7:5c:55:a0:68:8f:56:15:e6:4a:e9:25:fc:11:
23:f0:de:ec:2a:6e:6b:b5:9a:67:f3:25:ca:52:e9:
2d:88:0f:7e:39:ee:3e:8d:8e:5a:b0:84:60:a1:29:
5c:c4:11:68:d0:46:9d:e8:d9:4e:03:c0:39:3e:25:
2e:ee:68:bf:fa:2b:9e:10:b0:d4:82:28:be:0c:ea:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2E:C5:BB:D9:12:BF:E5:F3:52:16:12:B8:FB:B1:E8:C3:4E:8E:75
X509v3 Authority Key Identifier:
keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/FC72B9529F0311EAB6B8EA87C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.12.31.0/24
IPv6:
2001:dd8:12::/48
Signature Algorithm: sha256WithRSAEncryption
10:5e:c0:e5:da:b6:d6:32:92:06:41:5b:0f:5a:02:f6:e6:f5:
2b:c7:ec:ec:29:9d:d3:85:45:93:d6:02:cf:1b:b5:be:d6:02:
fd:9e:9a:e2:ca:4a:d2:25:8c:d0:09:be:03:3d:ba:3d:1e:26:
16:ee:81:96:d6:24:b4:99:80:e8:5c:fe:3b:21:77:bd:b9:24:
87:2a:eb:9e:36:9e:d4:7a:bd:7b:e6:c2:34:a3:54:16:e9:b0:
05:3d:ef:5a:ef:ea:59:a5:e6:e4:99:6c:44:e4:9e:ab:fa:bc:
f4:ae:09:b0:0e:1d:2d:3e:63:5b:06:c8:34:f1:d2:b1:4a:5e:
37:29:70:cd:1a:c3:06:82:ae:0e:29:1e:1d:e4:1e:ea:28:9f:
01:b0:75:79:7f:e8:8e:32:1f:b0:ee:e2:d9:ad:fe:da:f5:df:
17:16:16:1f:d3:da:b0:d9:15:89:e3:66:21:2b:6a:83:33:83:
c7:06:4e:1d:ad:1c:a9:10:e7:1a:d5:c7:4e:e8:3e:8b:63:7c:
d2:58:1d:38:f6:e0:e6:cd:63:ed:41:29:e5:60:3a:da:ed:ff:
6f:d3:59:b5:a3:fb:58:91:9b:24:3c:ba:0d:e0:50:34:c4:23:
4e:fe:dc:b7:83:6c:19:07:05:aa:d5:cc:64:e8:e0:d3:ab:e1:
ce:25:d8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:06 2026 by rpki-client