
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/FA554EAC2A4811F0ABF04B60C4F9AE02.roa
File: FA554EAC2A4811F0ABF04B60C4F9AE02.roa (raw, json)
Hash identifier: QMIDA3h2J2eRBwi4xgXJbJqb9U1f974ZROO/WRpjtAM=
Subject key identifier: EE:DC:58:09:ED:23:70:1D:05:29:47:CC:DB:20:BC:F7:71:C5:09:D1
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 614B
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/FA554EAC2A4811F0ABF04B60C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:39:28 +0000
ROA not before: Sat 17 May 2025 20:37:21 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 18116
IP address blocks: 118.143.54.0/24 maxlen: 24
118.143.169.0/24 maxlen: 24
118.143.176.0/24 maxlen: 24
118.143.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 19:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24907 (0x614b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Validity
Not Before: May 17 20:37:21 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a487e0-50fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:0f:9e:20:c5:6b:aa:dc:b6:72:fc:c2:c3:
0c:be:62:24:3f:74:44:43:c2:c9:33:6a:c9:2f:05:
b4:f8:ec:74:f5:0c:a9:81:39:76:c5:01:43:dd:d7:
fc:8c:8f:a1:f6:a1:fb:d9:aa:50:b0:ef:72:6b:5b:
49:9a:2b:66:c0:70:8c:bf:d1:a7:20:e4:ae:eb:24:
08:22:71:3c:6a:cd:89:d2:c1:3f:d3:80:c6:5e:71:
1c:5f:d1:f0:88:5c:9b:bf:bd:e8:6c:33:03:f1:8a:
73:ad:c8:cf:55:70:31:61:64:9e:2f:04:42:94:ba:
ab:42:92:c8:9d:ee:20:64:6e:f3:f4:80:dc:d0:68:
63:05:4e:e4:af:ce:79:13:b0:f1:6a:4f:a5:cd:9c:
41:92:12:ac:42:f5:ed:e6:2e:f5:e7:5d:ae:75:cf:
46:80:15:68:ed:78:4a:24:99:c6:14:77:49:c5:a1:
be:f7:44:8e:ff:86:b1:aa:0c:4f:08:87:6b:24:a5:
dc:88:73:54:68:45:3f:9e:5e:bc:05:4d:f1:2e:30:
c1:13:f4:40:71:7e:01:76:62:6a:8d:26:24:e8:10:
ff:59:51:02:fa:7f:84:74:8f:40:e3:e5:f3:ea:2a:
49:d6:32:d5:a8:3d:97:8e:57:a4:dc:c1:05:f5:46:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DC:58:09:ED:23:70:1D:05:29:47:CC:DB:20:BC:F7:71:C5:09:D1
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/FA554EAC2A4811F0ABF04B60C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
118.143.54.0/24
118.143.169.0/24
118.143.176.0/23
Signature Algorithm: sha256WithRSAEncryption
24:8c:07:13:e4:9e:e5:ea:5c:dd:5f:76:28:f0:a0:05:81:a1:
f9:89:cf:22:05:0b:16:23:71:29:a4:80:b3:06:30:71:4c:a5:
0e:95:85:dc:6d:ee:27:31:e4:d0:82:f6:8c:c4:97:0e:b3:97:
0d:1d:83:b0:16:58:6b:1d:29:00:f4:75:29:10:77:4b:3c:ae:
5a:e4:67:7c:dc:4a:50:ee:4d:08:f5:4e:d4:84:10:67:d9:50:
d2:49:71:92:2e:ce:9f:76:46:4e:4c:23:54:3b:f0:47:d6:c4:
6d:7a:4e:48:cd:77:bc:3d:a5:0a:27:fa:12:1d:73:0b:d5:e9:
b3:04:e4:28:e6:b5:32:d9:dc:f8:f8:94:67:f4:df:82:b7:4a:
36:e7:a2:86:83:3d:f5:2c:d4:2a:a6:69:5c:e8:7b:be:54:27:
ce:1b:70:bf:d2:4a:77:90:a6:48:51:c9:8c:93:c6:7a:69:e7:
7e:c5:e5:27:9f:35:30:77:68:6e:86:8d:ae:e0:90:5f:8f:9c:
8d:46:cc:f3:34:99:2f:c9:a0:7d:f2:11:ce:18:69:3c:88:67:
d3:23:79:30:f8:7f:51:b8:59:2a:5f:7c:a3:27:08:4d:72:cb:
82:37:75:4c:b0:6f:02:87:f9:9b:48:8a:e9:8b:47:03:54:e3:
22:34:16:9a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICYUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzEzMjMxMTAvBgNVBAUTKDQxMkE2NTExQ0ZFRENGRUNCNTU5MEM5NkM4QzM2MUUy
RkVENDQ4NTcwHhcNMjUwNTE3MjAzNzIxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODdlMC01MGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmhQPniDFa6rctnL8wsMMvmIkP3REQ8LJM2rJLwW0+Ox09QypgTl2xQFD3df8
jI+h9qH72apQsO9ya1tJmitmwHCMv9GnIOSu6yQIInE8as2J0sE/04DGXnEcX9Hw
iFybv73obDMD8YpzrcjPVXAxYWSeLwRClLqrQpLIne4gZG7z9IDc0GhjBU7kr855
E7Dxak+lzZxBkhKsQvXt5i71512udc9GgBVo7XhKJJnGFHdJxaG+90SO/4axqgxP
CIdrJKXciHNUaEU/nl68BU3xLjDBE/RAcX4BdmJqjSYk6BD/WVEC+n+EdI9A4+Xz
6ipJ1jLVqD2Xjlek3MEF9UajdwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFO7cWAnt
I3AdBSlHzNsgvPdxxQnRMB8GA1UdIwQYMBaAFEEqZRHP7c/stVkMlsjDYeL+1EhX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTMyMy8wODREODhENDk1
QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHoteTFXUXlXeU1OaDR2N1VT
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FTcGxFY190ei15MVdReVd5TU5oNHY3VVNGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzEzMjMvMDg0RDg4RDQ5NUI3MTFFQUJCODI0RjFCQzRGOUFFMDIvRkE1NTRFQUMy
QTQ4MTFGMEFCRjA0QjYwQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAdo82AwQAdo+pAwQBdo+wMA0GCSqGSIb3DQEBCwUAA4IBAQAkjAcT
5J7l6lzdX3Yo8KAFgaH5ic8iBQsWI3EppICzBjBxTKUOlYXcbe4nMeTQgvaMxJcO
s5cNHYOwFlhrHSkA9HUpEHdLPK5a5Gd83EpQ7k0I9U7UhBBn2VDSSXGSLs6fdkZO
TCNUO/BH1sRtek5IzXe8PaUKJ/oSHXML1emzBOQo5rUy2dz4+JRn9N+Ct0o256KG
gz31LNQqpmlc6Hu+VCfOG3C/0kp3kKZIUcmMk8Z6aed+xeUnnzUwd2huho2u4JBf
j5yNRszzNJkvyaB98hHOGGk8iGfTI3kw+H9RuFkqX3yjJwhNcsuCN3VMsG8Ch/mb
SIrpi0cDVOMiNBaa
-----END CERTIFICATE-----
Generated at Thu Mar 12 16:50:35 2026 by rpki-client