
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
File: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (raw, json)
Hash identifier: DD1ADaREQj4FZ7nnow63JObODw7KCChH9CO7F5RCGA8=
Subject key identifier: 39:48:1C:AC:34:11:75:B1:72:E8:D8:FC:8B:88:9F:F3:32:97:D7:FA
Certificate issuer: /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial: 0E28
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:50:14 +0000
ROA not before: Wed 08 Oct 2025 18:18:33 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139604
IP address blocks: 103.142.80.0/23 maxlen: 24
2001:df1:3680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3624 (0xe28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Validity
Not Before: Oct 8 18:18:33 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a44416-332f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:23:a6:c4:8b:3f:e7:dc:ae:39:c9:df:e6:
fc:af:2f:dc:69:06:fb:fb:36:20:f9:50:a0:7b:2b:
c0:a6:37:25:8b:79:5a:d3:08:33:22:bb:89:e1:00:
ce:21:0e:8a:af:cf:49:90:5b:32:db:e7:f1:96:51:
7a:a6:9e:4a:1a:6e:ac:10:1d:26:14:83:19:f0:28:
fc:d0:f0:b4:bb:9d:4d:42:01:2e:ac:0f:6d:aa:33:
73:a7:25:e8:16:a0:60:38:1b:6b:bd:36:45:03:a7:
df:06:49:af:e3:f2:e5:55:03:3d:12:85:bb:98:a3:
b9:dc:f4:89:04:8b:33:df:2a:2a:bc:0d:60:54:dc:
6e:a7:3e:a8:1f:1b:ff:35:60:ee:46:ea:b8:5e:33:
df:e5:c8:bd:0b:7d:a8:ce:4d:4e:1f:48:6c:72:c1:
98:c9:40:7a:30:6e:b1:68:20:1e:1d:7b:1d:d6:85:
0f:50:49:e8:a0:e4:3c:c7:fa:5d:a4:ff:25:af:25:
92:c5:c6:31:2c:53:6e:9f:ea:00:22:70:73:7a:74:
1c:a4:c4:dd:64:40:e7:c0:ba:03:66:ad:0f:3c:a6:
98:52:65:b6:1f:69:8c:55:eb:a5:72:93:6e:08:d2:
f0:74:f5:cc:0e:23:d5:1c:c3:7c:b3:27:cc:d4:5f:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:48:1C:AC:34:11:75:B1:72:E8:D8:FC:8B:88:9F:F3:32:97:D7:FA
X509v3 Authority Key Identifier:
keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.80.0/23
IPv6:
2001:df1:3680::/48
Signature Algorithm: sha256WithRSAEncryption
04:a8:f5:04:7c:e6:f8:a9:ab:91:7d:1c:3e:dc:7d:f9:5c:70:
48:9c:bb:75:70:5d:ef:bb:69:57:92:28:ef:b7:74:71:e5:fa:
9b:7e:14:66:a2:ab:5a:70:80:0e:c6:65:cc:85:2a:1f:e4:e7:
e7:81:78:4c:d8:9a:d6:89:fd:e8:cc:1e:0d:b3:2f:76:4c:51:
a0:52:d3:7d:28:ce:58:1e:04:75:2b:ee:8a:31:de:88:ce:b0:
bd:d6:d3:60:c2:72:7d:55:7c:85:c0:1d:80:5d:f0:c6:45:2e:
6d:d9:35:76:48:ea:7e:05:bd:0b:f7:01:6d:77:04:e3:69:4b:
34:c5:ff:85:a0:f6:fa:8d:cd:84:ad:75:7e:54:8e:51:dc:24:
10:9a:b9:03:48:10:a7:fc:00:ae:c0:1e:b3:6c:9b:8f:6c:2e:
4f:b7:2f:df:a7:40:82:ff:72:a2:e3:03:4d:ba:f3:f5:0a:bc:
7a:fa:52:19:38:1d:85:d0:5b:25:86:0e:b1:c2:25:fb:9e:ee:
0d:7f:16:66:95:f6:2d:89:92:b9:1f:59:93:2d:ca:01:db:97:
d8:84:50:5d:00:ee:df:ac:96:c1:34:a7:36:92:dd:98:79:b9:
f4:b5:03:18:96:18:26:b1:4f:93:c7:7d:a4:19:27:19:39:1f:
ae:ec:ec:38
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICDigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZCRUYxMTAvBgNVBAUTKDgxMURFMTFFN0VEQzFDMTA3NjA1NTlFRUIzOUJGRDY2
RDY5QUVBNDYwHhcNMjUxMDA4MTgxODMzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDQxNi0zMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxEIjpsSLP+fcrjnJ3+b8ry/caQb7+zYg+VCgeyvApjcli3la0wgzIruJ4QDO
IQ6Kr89JkFsy2+fxllF6pp5KGm6sEB0mFIMZ8Cj80PC0u51NQgEurA9tqjNzpyXo
FqBgOBtrvTZFA6ffBkmv4/LlVQM9EoW7mKO53PSJBIsz3yoqvA1gVNxupz6oHxv/
NWDuRuq4XjPf5ci9C32ozk1OH0hscsGYyUB6MG6xaCAeHXsd1oUPUEnooOQ8x/pd
pP8lryWSxcYxLFNun+oAInBzenQcpMTdZEDnwLoDZq0PPKaYUmW2H2mMVeulcpNu
CNLwdPXMDiPVHMN8syfM1F+qrQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDlIHKw0
EXWxcujY/IuIn/Myl9f6MB8GA1UdIwQYMBaAFIEd4R5+3BwQdgVZ7rOb/WbWmupG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkJFRi80RUE4NjZDNEM0
NDIxMUU5OTQ3N0UyMUZDNEY5QUUwMi9nUjNoSG43Y0hCQjJCVm51czV2OVp0YWE2
a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dSM2hIbjdjSEJCMkJWbnVzNXY5WnRhYTZrWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTZCRUYvNEVBODY2QzRDNDQyMTFFOTk0NzdFMjFGQzRGOUFFMDIvRkVCRDZDNjJD
NEI1MTFFOUI3RDUzQTdGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ45QMA8EAgACMAkDBwAgAQ3xNoAwDQYJKoZIhvcNAQELBQADggEB
AASo9QR85vipq5F9HD7cfflccEicu3VwXe+7aVeSKO+3dHHl+pt+FGaiq1pwgA7G
ZcyFKh/k5+eBeEzYmtaJ/ejMHg2zL3ZMUaBS030ozlgeBHUr7oox3ojOsL3W02DC
cn1VfIXAHYBd8MZFLm3ZNXZI6n4FvQv3AW13BONpSzTF/4Wg9vqNzYStdX5UjlHc
JBCauQNIEKf8AK7AHrNsm49sLk+3L9+nQIL/cqLjA0268/UKvHr6Uhk4HYXQWyWG
DrHCJfue7g1/FmaV9i2JkrkfWZMtygHbl9iEUF0A7t+slsE0pzaS3Zh5ufS1AxiW
GCaxT5PHfaQZJxk5H67s7Dg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:32 2026 by rpki-client