
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/FEB624F6B94911EE897F7947C4F9AE02.roa
File: FEB624F6B94911EE897F7947C4F9AE02.roa (raw, json)
Hash identifier: ZqgPOrVGAVhmIWvwXmsHVZQruBjCO1WrYjc/KjSm8/Q=
Subject key identifier: 06:16:E0:00:5B:74:D6:4E:85:F6:FB:72:D1:69:A8:76:5E:9C:2B:0A
Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Certificate serial: 0D90
Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/FEB624F6B94911EE897F7947C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:34:27 +0000
ROA not before: Wed 30 Jul 2025 18:28:20 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 395363
IP address blocks: 103.80.4.0/24 maxlen: 24
103.80.5.0/24 maxlen: 24
2400:4840::/48 maxlen: 48
2400:4840:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl
rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3472 (0xd90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Validity
Not Before: Jul 30 18:28:20 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a45c83-eadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:42:eb:fa:c3:b0:50:4e:89:2e:78:81:0d:
89:27:0b:fa:c2:89:48:a7:26:9e:22:60:9f:40:2c:
f5:47:0d:7a:be:12:e0:3e:a7:0a:3a:c3:9a:f3:f3:
10:ab:74:bb:7a:5b:6f:c4:91:3e:13:3f:69:3f:98:
03:3b:4a:3a:b2:90:8d:7c:9b:01:a4:71:84:57:72:
ca:03:74:b9:cb:28:53:56:85:8a:8a:47:27:e0:bb:
3e:a4:48:18:6f:01:1d:1f:27:4d:49:21:0f:ab:a5:
b9:24:ae:1a:66:83:c3:22:6f:53:72:1e:82:0f:45:
07:fe:5d:2e:76:43:cd:e4:80:a4:c0:b0:45:a5:66:
7f:e9:f9:1a:79:17:13:82:93:46:d2:37:47:da:56:
c0:4c:c0:77:4c:b5:85:75:e0:5e:ae:0e:e5:fc:ce:
eb:70:f2:51:ad:13:34:39:22:b5:b4:c4:d6:e7:d6:
2c:5b:ed:32:70:00:78:3e:db:20:2f:ad:44:e2:09:
c6:f0:d9:72:28:9c:eb:a4:ce:47:1d:a1:11:a0:a1:
e9:59:33:a8:e8:33:9e:0c:f5:7e:88:af:41:ac:0b:
a7:65:76:b9:76:38:0e:82:4b:ba:d5:69:3b:95:fe:
2e:b9:60:aa:dc:0b:05:9d:15:38:75:86:07:e7:7e:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:16:E0:00:5B:74:D6:4E:85:F6:FB:72:D1:69:A8:76:5E:9C:2B:0A
X509v3 Authority Key Identifier:
keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/FEB624F6B94911EE897F7947C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.4.0/23
IPv6:
2400:4840::/48
2400:4840:10::/48
Signature Algorithm: sha256WithRSAEncryption
a2:1c:2e:61:3c:83:9c:74:65:03:bc:b2:02:62:d8:3d:35:cf:
22:06:99:46:53:72:a7:1e:f3:3b:13:15:eb:8a:b6:c0:3b:28:
12:17:c6:05:3b:0a:71:ab:7e:0c:42:5a:89:29:dc:3a:af:bb:
29:c1:84:cc:7a:3b:d3:11:55:72:cc:99:30:49:46:1a:a5:3e:
56:30:c8:74:d7:c6:20:27:d8:65:72:cd:4d:84:ec:5a:96:f4:
4b:4c:00:68:53:86:d7:5b:6a:a4:aa:28:d1:6e:49:1c:d5:1b:
43:c4:b6:c1:13:2f:84:67:92:aa:88:91:9a:b0:60:cf:fe:98:
65:61:b2:5e:10:47:f1:c8:b9:cf:65:84:e0:57:31:f1:40:2b:
f7:2e:9c:ee:1c:15:cd:03:f1:5f:c2:24:fc:b9:94:22:10:42:
2e:a9:6a:c6:a0:3c:83:81:4e:2b:f6:00:c8:18:88:b3:d3:97:
55:cf:42:5f:4f:48:6b:f0:d9:5f:12:8c:40:af:1c:92:29:b4:
42:46:c2:7d:0c:62:8c:42:a0:58:28:06:86:f6:9c:e3:99:7f:
5a:e0:41:19:9b:de:a7:21:c4:6e:41:1e:d4:02:eb:11:be:ae:
cd:f4:a0:b5:a5:b3:d4:f5:f4:36:c0:8b:c5:75:f0:9a:1a:b9:
c7:d7:1b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:29 2026 by rpki-client