
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/FCDECBBE538711EA81ECEB2EC4F9AE02.roa
File: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (raw, json)
Hash identifier: S/dafMyGnoaScUVOEOAthiDLiY0z9mFaUx5kMMduICQ=
Subject key identifier: 08:0E:27:F1:D3:77:60:AF:79:91:A0:51:BE:C8:D8:6D:BE:D3:A2:F8
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 19D3
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/FCDECBBE538711EA81ECEB2EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:50:46 +0000
ROA not before: Fri 20 Feb 2026 17:14:54 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 24375
IP address blocks: 49.255.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6611 (0x19d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Feb 20 17:14:54 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a48a86-4fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:f6:d4:eb:d4:a0:c9:28:c9:04:e0:73:28:
3b:7f:41:3c:03:b3:52:ca:1d:52:15:44:9a:ef:12:
e3:f5:93:15:bb:78:06:ce:6a:93:c0:e7:75:ae:d3:
23:e1:71:34:12:3d:79:1b:bf:58:4e:26:3b:20:c6:
44:d1:6c:ac:c2:2e:42:4e:3c:4d:92:28:bd:df:5d:
9e:3b:1e:cf:6e:3c:31:09:87:f5:8d:bb:a6:f3:c4:
61:10:b6:95:68:d1:80:8d:1e:6e:a0:aa:3b:8f:1d:
fd:6c:2d:3a:20:3f:68:15:3b:0f:a4:fa:da:ac:d5:
bd:31:3d:dd:82:12:98:a5:d0:2a:b5:bd:b0:3e:db:
27:36:1c:78:69:70:a2:3c:f7:03:7a:c0:87:b7:06:
c8:09:80:db:50:6d:0b:86:98:2b:09:8d:9e:59:d5:
dd:4b:69:2c:f3:13:6e:28:f4:c3:7c:29:fc:20:65:
4d:73:4c:91:7f:df:13:4e:16:0b:9b:26:6f:aa:06:
ed:b3:e9:64:56:41:c7:43:8d:e1:73:35:65:61:03:
c0:8e:56:84:e8:50:59:46:31:59:7e:55:e6:c0:24:
6e:3f:ca:fc:60:34:27:e1:19:24:f6:ff:a0:75:01:
4c:46:15:f2:e4:d7:34:46:21:ef:39:06:02:8c:9f:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0E:27:F1:D3:77:60:AF:79:91:A0:51:BE:C8:D8:6D:BE:D3:A2:F8
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/FCDECBBE538711EA81ECEB2EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.255.163.0/24
Signature Algorithm: sha256WithRSAEncryption
49:56:dd:e1:27:56:74:34:ad:54:9a:23:2d:ab:cd:0a:a2:fa:
fd:89:ac:61:f1:28:4c:73:9b:10:ca:d5:11:eb:7b:eb:14:72:
cc:3f:7d:79:52:4d:6b:e4:4b:f2:b3:01:e7:4e:dc:29:d0:57:
a5:53:78:c0:c6:d4:86:bc:b7:14:79:36:83:0f:d5:ef:77:a0:
6f:c3:c9:06:fa:04:2c:e1:c8:b6:80:40:8f:5c:3d:e9:10:c5:
8b:04:c3:1c:1f:4a:d2:34:a5:38:5c:dc:3a:82:8f:fc:42:43:
48:5a:59:e1:ed:67:68:35:24:ff:c5:ec:54:1c:4c:e3:f9:87:
b4:4a:d1:0b:ca:8f:3f:b6:d5:64:ac:28:51:d8:b4:b9:83:4d:
95:92:0f:4e:a8:93:47:1e:d0:86:04:b3:20:e4:86:3e:44:86:
f8:06:d2:3f:b0:50:54:c5:43:c9:7b:00:7f:29:f6:48:1a:22:
8d:6e:1b:92:e0:ec:5e:ac:14:d2:56:0f:35:42:73:40:39:16:
ef:84:3b:26:6d:78:61:16:b0:8a:ad:c9:fa:17:39:46:58:de:
ef:2e:a2:4b:dd:a0:cb:08:88:03:0d:8e:82:01:5d:b1:e6:d0:
0d:6f:a6:7d:06:53:19:c2:e4:b8:a4:8b:1b:50:f9:6d:a1:d2:
0d:28:ba:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:49 2026 by rpki-client