
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/FDE6938CE90C11EFB9D98326C4F9AE02.roa
File: FDE6938CE90C11EFB9D98326C4F9AE02.roa (raw, json)
Hash identifier: uOYxYsUyV5d201wkHKNC5KliU1I0MfAZOgIjo4393UM=
Subject key identifier: F3:5C:FC:8C:93:A7:F0:F0:A2:EA:BC:68:47:C0:90:4C:DD:E5:BE:96
Certificate issuer: /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial: D5
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/FDE6938CE90C11EFB9D98326C4F9AE02.roa
Signing time: Tue 03 Mar 2026 06:43:23 +0000
ROA not before: Tue 03 Mar 2026 06:43:23 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 16509
IP address blocks: 163.61.113.0/24 maxlen: 24
2001:df5:1440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 05:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Validity
Not Before: Mar 3 06:43:23 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a6830a-0831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9b:c1:d2:c4:75:11:6b:77:32:7e:74:7e:89:
85:b4:a6:62:98:87:b8:fe:70:9e:61:84:d6:f5:b3:
bc:5f:53:f7:0e:ca:7c:aa:b9:65:26:e6:d2:6e:75:
a3:2c:67:bc:86:84:1b:8f:65:c1:ea:24:5b:5f:c0:
2b:70:69:94:ed:2c:5f:56:b3:8a:ba:0e:da:6d:8a:
54:2d:66:ab:bd:ce:c0:99:24:ca:ac:9d:bb:46:ed:
20:2f:97:dc:92:9d:32:76:ce:db:5a:da:a5:3e:92:
00:49:d2:d7:f1:49:92:b7:38:c9:5c:8c:3c:f4:bf:
78:01:1e:81:aa:22:68:13:f0:4f:94:0e:95:96:84:
e1:53:e9:c6:f7:27:ee:3a:c2:69:58:4b:7f:87:76:
9b:58:5f:86:49:d8:22:ab:df:bd:4c:3b:ef:79:7f:
52:b3:a0:94:a5:5f:2c:f3:d0:83:78:af:89:8e:30:
4e:23:07:f9:d9:78:f7:77:99:1f:29:c7:e1:b8:a0:
0e:a4:d2:10:ee:47:1e:15:a7:a7:0d:1d:da:12:69:
e5:50:be:53:a6:4e:15:94:82:34:55:2a:12:9e:f8:
37:7d:c2:ea:6d:48:3c:da:79:b6:2e:89:d1:a6:68:
95:43:ad:d9:64:1f:e7:80:4e:db:ad:64:66:3a:a4:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:FC:8C:93:A7:F0:F0:A2:EA:BC:68:47:C0:90:4C:DD:E5:BE:96
X509v3 Authority Key Identifier:
keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/FDE6938CE90C11EFB9D98326C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.113.0/24
IPv6:
2001:df5:1440::/48
Signature Algorithm: sha256WithRSAEncryption
6b:05:52:38:28:4b:a9:c1:7e:0a:b3:44:e5:17:bf:3f:65:84:
79:57:aa:8a:8b:c7:37:d1:c9:f1:b7:03:61:bd:34:9d:69:7f:
50:54:08:5f:2e:f3:94:fa:95:34:0b:a4:44:18:85:9a:0d:7b:
79:d0:3c:23:bc:25:5d:a8:16:06:75:22:ee:72:20:be:c7:a5:
29:c7:79:5b:6a:48:fd:11:99:d9:47:86:65:f2:d2:89:da:6d:
b7:7e:96:81:8b:4a:7b:7a:9e:9c:53:ac:b8:80:b9:2e:1f:1b:
ca:ff:58:76:5b:ad:6c:ab:50:ff:cc:8d:5d:db:c1:78:91:bd:
b7:97:b6:03:e7:60:60:1e:4e:d2:6b:04:ea:cc:ce:1f:99:db:
cd:34:02:73:23:96:7c:69:01:b8:e1:d8:e5:9f:46:a8:45:c4:
76:1a:31:11:fa:49:a2:46:4e:2c:cf:9b:4b:20:1e:c5:7f:3f:
80:e5:61:2e:13:54:00:fc:26:25:a1:36:66:8f:63:51:69:f2:
8b:a7:7f:73:9e:4d:92:92:a0:cd:99:ee:28:97:2a:e2:1e:ca:
1f:d5:71:65:94:95:2b:cc:94:9d:f9:48:e1:5f:63:3c:be:2f:
56:16:89:09:55:15:3b:73:76:27:28:4e:05:a9:08:92:c2:b9:
42:3a:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:32:54 2026 by rpki-client