
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/FAC7FE320F0311E997412A4EC4F9AE02.roa
File: FAC7FE320F0311E997412A4EC4F9AE02.roa (raw, json)
Hash identifier: ltuiI8TZuMv/G/t/Ztpq7bP81fIn8XtBMrkmf8/fbBQ=
Subject key identifier: 46:D2:51:34:94:2B:AA:EE:41:BC:19:07:19:86:50:A9:EF:BA:5D:B9
Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
Certificate serial: 11F3
Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/FAC7FE320F0311E997412A4EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:26:27 +0000
ROA not before: Tue 18 Nov 2025 17:06:21 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 132132
IP address blocks: 103.6.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl
rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4595 (0x11f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
Validity
Not Before: Nov 18 17:06:21 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a468b3-3a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:3f:06:b7:5a:57:26:a1:bf:29:91:cf:21:
5c:bf:5d:ac:14:d0:b4:dd:43:c2:b8:5b:f9:1a:f1:
e9:f8:85:d9:b8:35:a3:68:1e:e9:b6:9b:69:04:a5:
d9:bf:3f:e0:78:77:b7:db:b3:07:7f:66:e0:77:29:
97:9b:08:30:8c:b4:81:12:6a:a7:4e:3d:f6:a8:6c:
56:b6:c6:e2:26:f9:72:dd:6e:1f:27:c7:30:88:96:
fa:45:e2:63:27:c6:14:d1:8e:01:d2:64:fd:2e:ce:
bf:92:6c:07:99:c3:55:69:3b:9d:1f:62:86:0d:24:
f4:0d:1d:c1:f8:0d:c2:e6:9a:0d:02:f4:1d:4f:4d:
01:48:f5:50:21:fa:55:cc:0a:d8:b7:ce:5d:76:28:
a6:5b:7e:72:91:04:b3:a6:50:c4:5f:03:3e:1e:bf:
3f:ad:b0:9d:02:b0:c0:71:89:45:17:06:e8:94:bc:
b8:1d:a1:b2:d5:82:93:35:3a:48:a0:28:64:55:d2:
0c:27:90:90:3c:ed:a3:99:f2:1a:67:a9:82:59:57:
4b:be:76:25:0e:28:c1:54:b8:06:0b:e2:60:ec:c7:
2e:8f:8a:c4:9c:2b:d9:e4:b8:a4:68:dd:08:b9:6d:
3c:12:09:18:17:53:56:19:bc:d6:02:71:54:a1:12:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D2:51:34:94:2B:AA:EE:41:BC:19:07:19:86:50:A9:EF:BA:5D:B9
X509v3 Authority Key Identifier:
keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/FAC7FE320F0311E997412A4EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:24:5a:3b:36:85:db:57:48:e5:07:b1:fd:ee:98:4e:b6:34:
2d:16:76:4a:e7:4e:aa:e4:2c:0f:78:60:2a:d1:46:1f:0c:32:
01:1f:1a:b6:af:55:a2:f1:d7:28:44:7f:87:1f:b1:26:56:ae:
e9:b6:23:63:89:73:6f:1b:a7:76:39:36:1a:b1:6c:fb:6d:82:
fc:1a:65:fe:4f:ec:ba:8c:64:ae:99:ac:31:cb:d2:36:fa:59:
61:40:7c:15:8c:66:36:71:1c:b9:bc:57:f8:73:49:89:7b:8e:
96:66:c6:69:03:b5:c0:bd:e0:ad:15:ca:e6:7c:c7:59:35:47:
9d:5b:f9:0c:b9:56:92:9b:31:c3:18:5c:13:36:f5:aa:f0:5e:
01:7e:b9:70:67:3b:95:48:ed:61:f8:43:e4:49:32:20:8f:55:
3c:e8:d7:bb:05:8f:2c:6f:e3:d0:b6:90:de:1f:47:1d:9c:53:
83:9d:62:1f:15:b5:7e:ff:7e:6e:e5:48:25:6b:39:5f:36:13:
ab:7d:00:54:25:61:50:f7:2e:80:5e:78:89:61:7e:54:de:8f:
3f:f0:c9:c6:5f:02:bc:02:53:12:87:df:6d:0f:7c:6b:37:34:
30:75:5c:08:f1:13:3e:5f:3c:45:4e:88:6c:28:70:76:41:e0:
a9:38:e2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:47 2026 by rpki-client