
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/FE4992F25C3411EBA2B9004DC4F9AE02.roa
File: FE4992F25C3411EBA2B9004DC4F9AE02.roa (raw, json)
Hash identifier: q6f3I/pDthdLdMLSxBp5iyTcTb4DHogkmy15HWS90s0=
Subject key identifier: 48:5A:08:C4:86:6B:A1:13:1C:B5:62:A1:53:DD:2A:99:74:70:4F:8E
Certificate issuer: /CN=A91F5FA2/serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79
Certificate serial: 0760
Authority key identifier: 79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/FE4992F25C3411EBA2B9004DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:35:46 +0000
ROA not before: Sat 20 Sep 2025 22:11:48 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 131292
IP address blocks: 103.68.208.0/22 maxlen: 24
2405:e680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl
rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 21:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888 (0x760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5FA2, serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79
Validity
Not Before: Sep 20 22:11:48 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a5a042-bdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:21:ff:4c:be:e7:da:be:c8:2f:ad:ff:8f:
87:a3:aa:f2:68:01:7a:23:43:be:d8:aa:7b:cf:8c:
24:ab:4d:ac:38:f1:1f:d4:18:6e:2a:ad:41:6c:4e:
cf:d0:29:28:b2:be:db:3f:7b:a8:d7:5e:f0:63:76:
d7:84:0f:62:aa:e2:a5:ba:70:0a:57:a6:1a:e3:2f:
e4:6b:a4:90:94:6d:9a:f6:f4:9d:51:35:6f:65:85:
f1:a4:0f:bc:0a:1b:f5:fd:b1:38:25:8d:a8:91:14:
3d:b9:98:a0:7c:b8:9c:4c:2a:e4:a8:fc:5b:7b:c7:
dd:40:38:98:11:57:b2:90:4a:09:45:6a:81:01:ba:
a9:f2:f2:6d:f9:06:d1:03:a3:89:29:8b:30:b5:b4:
02:56:57:2b:b6:62:69:d7:85:8e:f5:0a:a7:ad:19:
7c:a2:83:f9:90:16:b2:15:e3:59:1b:52:45:b7:34:
8b:7b:19:4a:65:2b:b7:56:79:75:0b:d6:5b:ee:4a:
9b:c5:d9:e3:3d:09:ba:ee:c2:fd:b7:03:73:b4:f1:
73:85:cc:a5:1d:03:df:eb:14:64:07:46:6d:cf:c3:
cb:e7:26:8f:ff:fe:80:6a:7d:41:eb:a4:53:b0:83:
2f:f8:94:94:07:ff:62:18:30:c4:a3:10:10:99:7b:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5A:08:C4:86:6B:A1:13:1C:B5:62:A1:53:DD:2A:99:74:70:4F:8E
X509v3 Authority Key Identifier:
keyid:79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/FE4992F25C3411EBA2B9004DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.208.0/22
IPv6:
2405:e680::/32
Signature Algorithm: sha256WithRSAEncryption
88:cc:a6:18:9a:66:9d:e3:33:ae:a6:80:eb:44:3b:5d:ec:ad:
72:0f:be:ca:09:f9:a6:6a:6e:7d:74:57:c7:77:31:0c:24:73:
c3:d4:0d:a5:4d:d5:ae:e1:b1:27:ca:39:8b:ff:25:80:68:61:
b8:fb:96:78:fc:a1:40:31:ec:ee:3c:78:a5:19:76:2c:a2:79:
50:bb:6e:c1:02:1d:3e:ff:bd:c0:41:bf:d6:e0:5d:bc:e1:1d:
f5:df:5e:37:91:66:1b:3c:55:35:c7:18:1c:e7:0c:f9:f0:89:
e6:6b:b0:73:c4:6c:16:3a:3c:67:0f:17:0f:22:96:b2:32:17:
3c:7f:73:1c:24:01:19:5c:91:a8:75:84:68:a6:34:61:30:3c:
fd:98:7d:1f:69:12:a6:9c:bc:07:ac:ca:8c:5a:2f:99:11:16:
bb:0e:d6:11:99:c9:22:28:74:9e:3c:78:53:2e:80:b8:c8:af:
46:91:03:46:12:28:42:71:c9:91:79:7b:fe:4a:64:d4:78:e8:
66:bf:5c:b9:b5:af:8b:c2:b0:23:06:ca:05:f9:b5:10:02:35:
3d:c6:6e:00:8c:91:d0:5f:9e:d6:06:73:79:97:94:3b:18:82:
a7:94:26:6b:49:30:63:33:55:01:82:fc:97:ed:6a:05:5a:ff:
f5:81:66:4f
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjVGQTIxMTAvBgNVBAUTKDc5QTk0RDI4RTU0MjQ3MzgwOTEzODNENUY0OTc1QkZE
QkNFQUFFNzkwHhcNMjUwOTIwMjIxMTQ4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTA0Mi1iZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArEQh/0y+59q+yC+t/4+Ho6ryaAF6I0O+2Kp7z4wkq02sOPEf1BhuKq1BbE7P
0Ckosr7bP3uo117wY3bXhA9iquKlunAKV6Ya4y/ka6SQlG2a9vSdUTVvZYXxpA+8
Chv1/bE4JY2okRQ9uZigfLicTCrkqPxbe8fdQDiYEVeykEoJRWqBAbqp8vJt+QbR
A6OJKYswtbQCVlcrtmJp14WO9QqnrRl8ooP5kBayFeNZG1JFtzSLexlKZSu3Vnl1
C9Zb7kqbxdnjPQm67sL9twNztPFzhcylHQPf6xRkB0Ztz8PL5yaP//6Aan1B66RT
sIMv+JSUB/9iGDDEoxAQmXtCIQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEhaCMSG
a6ETHLVioVPdKpl0cE+OMB8GA1UdIwQYMBaAFHmpTSjlQkc4CROD1fSXW/286q55
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUZBMi8wMzI1NDQ0MDVD
MzIxMUVCOTdCRjdDNDVDNEY5QUUwMi9lYWxOS09WQ1J6Z0pFNFBWOUpkYl9ienFy
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VhbE5LT1ZDUnpnSkU0UFY5SmRiX2J6cXJuay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjVGQTIvMDMyNTQ0NDA1QzMyMTFFQjk3QkY3QzQ1QzRGOUFFMDIvRkU0OTkyRjI1
QzM0MTFFQkEyQjkwMDREQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ0TQMA0EAgACMAcDBQAkBeaAMA0GCSqGSIb3DQEBCwUAA4IBAQCI
zKYYmmad4zOupoDrRDtd7K1yD77KCfmmam59dFfHdzEMJHPD1A2lTdWu4bEnyjmL
/yWAaGG4+5Z4/KFAMezuPHilGXYsonlQu27BAh0+/73AQb/W4F284R313143kWYb
PFU1xxgc5wz58Inma7BzxGwWOjxnDxcPIpayMhc8f3McJAEZXJGodYRopjRhMDz9
mH0faRKmnLwHrMqMWi+ZERa7DtYRmckiKHSePHhTLoC4yK9GkQNGEihCccmReXv+
SmTUeOhmv1y5ta+LwrAjBsoF+bUQAjU9xm4AjJHQX57WBnN5l5Q7GIKnlCZrSTBj
M1UBgvyX7WoFWv/1gWZP
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:40:20 2026 by rpki-client