
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
File: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (raw, json)
Hash identifier: nyjMQ4Y7DB/tIj8XNqvBhuvlZj0Lq52QsaNMK9E+R5Y=
Subject key identifier: 82:D7:B7:2E:F4:7D:BA:DE:58:9F:25:17:EA:C9:A0:7A:A3:4A:C1:14
Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Certificate serial: 0197
Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:09:55 +0000
ROA not before: Sat 13 Dec 2025 03:42:58 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152153
IP address blocks: 113.192.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Validity
Not Before: Dec 13 03:42:58 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a456c3-8119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:19:eb:13:8a:42:62:cb:b2:cd:b1:66:ca:
30:07:6e:2e:ff:ac:f0:f3:62:6a:b7:5d:10:46:3d:
76:5e:19:01:ff:d9:c4:7f:6a:5b:f1:62:1e:6f:1b:
77:4e:b9:7e:63:c5:4a:78:54:47:52:05:ba:39:54:
20:b1:1b:f5:79:2e:4f:7a:48:92:b0:75:07:9f:3e:
7f:ae:3c:94:86:c3:3d:cf:1d:cc:00:18:0b:fd:b1:
01:8d:04:4f:35:64:7f:ce:75:34:b8:28:6b:e0:89:
d4:6d:06:d7:54:ee:81:9c:d7:ce:d5:25:c4:33:d7:
28:52:e0:f3:90:bc:9a:b9:a2:ef:47:4a:9b:7e:34:
cf:26:4d:94:8a:08:97:52:2a:4e:9b:a2:a8:a7:40:
a3:0b:fa:17:3c:7b:fa:56:33:1a:15:f5:b3:85:da:
78:6f:05:d2:b7:38:49:3a:56:03:09:2f:20:3c:0f:
fc:1f:0b:b9:28:36:fd:89:8a:81:25:79:23:c6:6a:
9d:46:5a:3b:8b:f5:71:89:71:7b:6f:c2:05:e9:86:
14:fe:5e:d8:fa:89:71:7a:c2:4f:9d:73:f7:09:d1:
b8:26:07:e6:74:2e:d8:44:6d:9a:25:4d:46:bd:97:
8c:ca:58:10:7e:d6:d4:e5:23:f4:56:f8:46:64:f4:
01:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D7:B7:2E:F4:7D:BA:DE:58:9F:25:17:EA:C9:A0:7A:A3:4A:C1:14
X509v3 Authority Key Identifier:
keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
113.192.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:56:a3:09:14:26:eb:18:07:17:8d:07:fb:0d:08:ea:cb:b4:
ff:3e:57:d0:d3:c9:4e:23:70:e7:fe:f9:44:c2:a2:74:ef:c1:
27:db:77:f1:64:72:bd:66:c5:09:62:f0:cc:fc:3c:8a:29:fa:
3d:17:c4:ac:9e:ba:1e:63:6e:b8:d2:80:7d:38:84:d1:8c:db:
6a:f7:8e:e2:d3:4e:94:1d:9f:a5:ac:72:38:e9:65:18:c9:7c:
0b:94:10:c1:06:b7:a6:67:52:cd:4f:43:41:0d:10:ec:15:5c:
03:6e:d8:43:f2:50:e4:d6:4c:4b:0c:50:c6:46:6c:dc:a4:f4:
f9:fe:86:34:50:fc:9a:2c:d7:3e:33:fb:d3:0f:c4:5e:68:c6:
1c:13:e3:60:3f:a9:ac:ed:3e:f3:9a:72:20:6f:36:e3:a6:f2:
30:0f:51:6d:14:64:07:96:65:6b:2f:0a:e4:9b:c6:79:a0:07:
8b:46:4a:9d:31:68:87:cd:35:67:11:e4:3d:6b:32:c9:81:fd:
8c:d1:74:ce:09:8e:c5:da:d1:20:98:50:62:18:8e:1c:9a:de:
86:78:9b:68:4f:44:e4:a8:05:74:05:d1:ec:a5:5b:3c:7e:9a:
cd:91:21:04:83:13:1d:a1:2c:65:46:71:ab:da:e7:68:61:83:
f3:54:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:37 2026 by rpki-client