
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/FE1FDB12BCD011EC8283681EC4F9AE02.roa
File: FE1FDB12BCD011EC8283681EC4F9AE02.roa (raw, json)
Hash identifier: r37tIom0PQWmaxr5fhR0abZbJcQ9CFZOevZC51ud4HM=
Subject key identifier: 7F:84:6D:16:29:9F:75:90:93:A5:03:34:10:7D:54:51:30:65:96:D0
Certificate issuer: /CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1
Certificate serial: 086D
Authority key identifier: A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/FE1FDB12BCD011EC8283681EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:36:14 +0000
ROA not before: Thu 20 Mar 2025 21:01:07 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 63962
IP address blocks: 43.231.112.0/22 maxlen: 24
103.50.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl
rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157 (0x86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA024, serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1
Validity
Not Before: Mar 20 21:01:07 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4088e-bba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3d:8f:db:7c:42:a9:ae:cd:7b:66:de:ee:85:
9d:63:b5:62:65:c2:52:da:60:35:89:ec:14:eb:f3:
c6:6f:f1:dd:4d:73:bd:61:87:07:da:af:30:62:4d:
7e:df:eb:d8:93:d0:c1:18:eb:7f:70:95:c1:8e:19:
80:96:49:fd:1a:52:21:49:c0:3b:24:43:b5:b4:9a:
84:e7:82:71:19:24:4f:c7:ab:4b:e7:50:b6:9d:ee:
c9:4f:23:b0:d8:88:a4:7c:f8:e0:2c:1d:8b:fc:e9:
ba:39:92:76:44:ea:9e:f7:20:53:60:c9:73:e9:2f:
2f:73:c6:a8:da:56:3c:44:a4:4f:c5:84:ef:df:dd:
b8:cb:9e:ea:4a:b8:a3:3e:7c:f3:31:02:ea:fa:af:
22:7a:7b:84:18:e2:bf:f0:50:f2:97:c4:c2:d3:4e:
1b:80:40:2c:4f:f8:0e:2f:30:68:41:17:56:cd:eb:
63:57:25:74:73:90:e3:d1:f9:cf:e5:57:e4:c3:ca:
b2:65:9d:b2:5b:a6:fd:7d:60:11:e0:ee:fd:7b:63:
97:3f:b3:ca:d3:e6:31:48:4c:c8:a0:f9:ae:22:fc:
0d:1f:31:d3:59:2f:b8:61:cc:aa:b5:27:50:ef:b6:
a0:3e:de:d0:e3:ac:eb:aa:7d:14:ea:b1:de:02:3e:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:84:6D:16:29:9F:75:90:93:A5:03:34:10:7D:54:51:30:65:96:D0
X509v3 Authority Key Identifier:
keyid:A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/FE1FDB12BCD011EC8283681EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.231.112.0/22
103.50.204.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:1e:7b:27:fd:fc:8a:da:f3:95:72:df:9c:f5:fd:10:4e:e0:
8e:57:1a:db:45:a5:55:d8:2e:b8:25:d1:58:60:4f:78:48:d7:
f1:a4:63:24:d0:1f:11:ee:f0:96:31:72:6b:56:a8:76:f0:dd:
2c:8e:fc:7f:71:11:b0:75:9a:1c:03:4e:f7:a0:e2:fe:94:d2:
84:32:1d:8e:68:a4:fa:fb:45:b4:59:b5:33:55:69:91:99:e5:
b9:cd:79:c1:59:65:a2:18:9a:08:f6:e2:fc:19:af:5f:f4:19:
84:02:83:9b:08:a1:74:51:cd:1b:e0:85:f9:94:19:d4:a8:e0:
b1:5c:e7:0b:b0:c2:a3:e9:dd:f4:f7:f2:3d:31:50:f4:cd:70:
bf:4c:78:e4:4a:01:6a:c0:55:01:db:11:25:e3:bc:78:a4:67:
cd:6d:c7:74:a6:03:7e:5c:ea:7f:23:80:1f:82:8a:22:8d:61:
78:d7:6c:ee:98:fe:a4:c9:5d:c5:08:5f:75:0a:b6:0f:6c:b3:
c0:29:dc:eb:2d:91:64:66:a6:b6:fb:2c:03:87:ee:4c:e5:b2:
7a:e3:83:ec:80:67:23:6d:d0:f9:78:50:b2:65:04:d7:9f:7a:
61:aa:e8:51:3e:eb:25:5d:9c:c7:f5:5d:19:e9:50:c4:e9:e5:
44:b2:37:70
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkEwMjQxMTAvBgNVBAUTKEEwQUM0MjdFOTU3QjM3NEQwMjY3RkE3NjQ4REQzRkY4
NTcwMkRBQjEwHhcNMjUwMzIwMjEwMTA3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDg4ZS1iYmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjj2P23xCqa7Ne2be7oWdY7ViZcJS2mA1iewU6/PGb/HdTXO9YYcH2q8wYk1+
3+vYk9DBGOt/cJXBjhmAlkn9GlIhScA7JEO1tJqE54JxGSRPx6tL51C2ne7JTyOw
2IikfPjgLB2L/Om6OZJ2ROqe9yBTYMlz6S8vc8ao2lY8RKRPxYTv3924y57qSrij
PnzzMQLq+q8ienuEGOK/8FDyl8TC004bgEAsT/gOLzBoQRdWzetjVyV0c5Dj0fnP
5Vfkw8qyZZ2yW6b9fWAR4O79e2OXP7PK0+YxSEzIoPmuIvwNHzHTWS+4YcyqtSdQ
77agPt7Q46zrqn0U6rHeAj7ImwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFH+EbRYp
n3WQk6UDNBB9VFEwZZbQMB8GA1UdIwQYMBaAFKCsQn6VezdNAmf6dkjdP/hXAtqx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAyNC9EMzNBNDc5NEYx
ODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04wMENaX3AyU04wXy1GY0My
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29LeENmcFY3TjAwQ1pfcDJTTjBfLUZjQzJyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkEwMjQvRDMzQTQ3OTRGMTg4MTFFQTlFODBGNzFFQzRGOUFFMDIvRkUxRkRCMTJC
Q0QwMTFFQzgyODM2ODFFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCK+dwAwQCZzLMMA0GCSqGSIb3DQEBCwUAA4IBAQA/Hnsn/fyK2vOV
ct+c9f0QTuCOVxrbRaVV2C64JdFYYE94SNfxpGMk0B8R7vCWMXJrVqh28N0sjvx/
cRGwdZocA073oOL+lNKEMh2OaKT6+0W0WbUzVWmRmeW5zXnBWWWiGJoI9uL8Ga9f
9BmEAoObCKF0Uc0b4IX5lBnUqOCxXOcLsMKj6d309/I9MVD0zXC/THjkSgFqwFUB
2xEl47x4pGfNbcd0pgN+XOp/I4AfgooijWF412zumP6kyV3FCF91CrYPbLPAKdzr
LZFkZqa2+ywDh+5M5bJ644PsgGcjbdD5eFCyZQTXn3phquhRPuslXZzH9V0Z6VDE
6eVEsjdw
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:42 2026 by rpki-client