
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/FFA62018DF1811E6805D922AC4F9AE02.roa
File: FFA62018DF1811E6805D922AC4F9AE02.roa (raw, json)
Hash identifier: LosHJIBt5WarpW9JWkXHdELntSSpgp+cyDuKpJhnO9Y=
Subject key identifier: 82:F1:25:8D:71:9E:58:C0:EA:FB:C1:A1:81:14:62:AC:A9:97:75:FE
Certificate issuer: /CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C
Certificate serial: 1CF6
Authority key identifier: C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/FFA62018DF1811E6805D922AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:28:54 +0000
ROA not before: Mon 16 Feb 2026 16:13:40 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 64093
IP address blocks: 103.252.80.0/23 maxlen: 23
103.252.82.0/24 maxlen: 24
103.252.83.0/24 maxlen: 24
110.232.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl
rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7414 (0x1cf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1729, serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C
Validity
Not Before: Feb 16 16:13:40 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a45b36-d9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:3b:ef:55:8a:bf:f4:b6:f8:df:b5:b4:23:
47:43:c0:48:02:79:dc:76:d8:dd:b3:c7:77:b6:82:
53:ee:05:ae:83:5c:f0:4c:7a:81:3b:f0:8d:d3:ee:
af:27:de:45:2b:e5:72:7f:3d:03:47:1d:3c:cd:52:
63:e3:05:a5:5f:71:49:9c:15:17:a1:a0:0e:6d:ee:
1a:b9:39:78:07:15:d1:5c:f8:57:f0:38:2c:25:4b:
f7:1e:0d:a1:c0:77:89:0f:df:66:7c:a6:a6:03:d7:
38:5d:bd:6e:3a:32:1c:00:f1:4c:27:19:84:d2:35:
b3:a9:2e:7e:00:13:4b:45:62:52:72:17:ab:78:d0:
01:41:c9:32:a5:a3:8f:06:2e:ce:a2:b2:9a:00:df:
07:10:91:ef:38:3c:cd:a1:ed:26:44:77:60:52:bf:
62:03:cd:86:ff:57:01:42:e1:8a:57:c7:1d:6e:01:
47:ec:5c:a2:6a:bb:06:ff:7f:d5:45:67:3e:2a:5f:
70:f5:f6:78:43:05:65:eb:2a:0a:33:18:b1:a1:93:
b8:1b:3d:94:b5:1e:26:00:de:74:ee:dc:4e:93:89:
2e:eb:f3:34:d7:ea:6c:ae:dc:6a:5c:e4:7e:1f:88:
66:0a:6c:a9:07:64:62:75:79:fd:bd:0e:92:81:15:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F1:25:8D:71:9E:58:C0:EA:FB:C1:A1:81:14:62:AC:A9:97:75:FE
X509v3 Authority Key Identifier:
keyid:C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/FFA62018DF1811E6805D922AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.252.80.0/22
110.232.188.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:b5:36:ac:5d:bd:ba:91:80:82:9a:54:31:45:31:6f:c7:22:
62:f5:3d:3a:7c:48:97:73:7b:23:40:d6:74:3f:a6:4a:f3:8e:
3c:14:02:0c:ea:bc:d0:a1:58:ed:54:1c:4b:89:b6:6e:27:02:
08:ad:e8:49:7b:79:97:ac:ed:95:b9:da:bd:c3:78:82:b4:88:
35:13:aa:6f:4e:d6:8d:df:0e:c0:03:a8:98:d1:62:51:ec:17:
50:fe:e6:4f:d5:b2:5b:b0:52:3f:a8:db:de:08:aa:1b:e3:7a:
41:1a:46:82:00:a3:f4:4f:58:bc:36:90:7c:39:cb:dd:97:32:
50:e2:7d:77:3f:c0:bf:af:d9:65:93:4d:81:1b:99:aa:94:d8:
83:a4:dc:9e:28:8d:c4:46:b6:9c:3c:c1:e3:c1:a4:ee:42:e2:
52:6c:e7:29:c5:22:87:a5:70:0c:04:b0:88:a1:99:1b:3c:24:
77:6a:ce:75:20:7c:33:3b:28:55:fa:6e:29:62:38:50:20:3a:
d9:28:e7:6f:c3:2c:39:6e:71:aa:2c:3b:6c:ee:56:72:b1:8f:
db:5e:c1:12:8f:5c:03:d7:f1:3e:79:49:77:22:46:81:8d:af:
47:87:cb:ca:f8:7b:ca:e2:43:05:3e:51:93:bf:aa:8c:4a:1e:
47:1e:cc:f1
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICHPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE3MjkxMTAvBgNVBAUTKEMxQkI4MjJCMjU4QTYwRkNEMkY2QzgwOEE1NTE2NzQ5
OEE1MDc1NEMwHhcNMjYwMjE2MTYxMzQwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWIzNi1kOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq4Q771WKv/S2+N+1tCNHQ8BIAnncdtjds8d3toJT7gWug1zwTHqBO/CN0+6v
J95FK+Vyfz0DRx08zVJj4wWlX3FJnBUXoaAObe4auTl4BxXRXPhX8DgsJUv3Hg2h
wHeJD99mfKamA9c4Xb1uOjIcAPFMJxmE0jWzqS5+ABNLRWJSchereNABQckypaOP
Bi7OorKaAN8HEJHvODzNoe0mRHdgUr9iA82G/1cBQuGKV8cdbgFH7FyiarsG/3/V
RWc+Kl9w9fZ4QwVl6yoKMxixoZO4Gz2UtR4mAN507txOk4ku6/M01+psrtxqXOR+
H4hmCmypB2RidXn9vQ6SgRWwYwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFILxJY1x
nljA6vvBoYEUYqypl3X+MB8GA1UdIwQYMBaAFMG7gislimD80vbICKVRZ0mKUHVM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcyOS9BN0ExQTI5QURG
MTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQelM5c2dJcFZGblNZcFFk
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3didUNLeVdLWVB6UzlzZ0lwVkZuU1lwUWRVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTE3MjkvQTdBMUEyOUFERjE2MTFFNkJBQkMwRTI2QzRGOUFFMDIvRkZBNjIwMThE
RjE4MTFFNjgwNUQ5MjJBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ/xQAwQBbui8MA0GCSqGSIb3DQEBCwUAA4IBAQChtTasXb26kYCC
mlQxRTFvxyJi9T06fEiXc3sjQNZ0P6ZK8448FAIM6rzQoVjtVBxLibZuJwIIrehJ
e3mXrO2Vudq9w3iCtIg1E6pvTtaN3w7AA6iY0WJR7BdQ/uZP1bJbsFI/qNveCKob
43pBGkaCAKP0T1i8NpB8OcvdlzJQ4n13P8C/r9llk02BG5mqlNiDpNyeKI3ERrac
PMHjwaTuQuJSbOcpxSKHpXAMBLCIoZkbPCR3as51IHwzOyhV+m4pYjhQIDrZKOdv
wyw5bnGqLDts7lZysY/bXsESj1wD1/E+eUl3IkaBja9Hh8vK+HvK4kMFPlGTv6qM
Sh5HHszx
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:15 2026 by rpki-client