
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/FE3124A04E6A11F19EF4B4E9A9833773.roa
File: FE3124A04E6A11F19EF4B4E9A9833773.roa (raw, json)
Hash identifier: 5G0WnfmhAWln0DoFaMqx4jKc4Si31Bq5mzX8fwHCaN4=
Subject key identifier: 0C:A8:CB:5D:78:DB:03:3F:2E:12:5F:EC:3C:7D:99:79:EC:66:52:0F
Certificate issuer: /CN=A91C1D71/serialNumber=3269AA220C2FE4B6EAC651E7221A7C03B8814276
Certificate serial: 02
Authority key identifier: 32:69:AA:22:0C:2F:E4:B6:EA:C6:51:E7:22:1A:7C:03:B8:81:42:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmmqIgwv5LbqxlHnIhp8A7iBQnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/FE3124A04E6A11F19EF4B4E9A9833773.roa
Signing time: Wed 13 May 2026 01:28:06 +0000
ROA not before: Wed 13 May 2026 01:28:06 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 154601
IP address blocks: 163.128.186.0/23 maxlen: 23
163.128.186.0/24 maxlen: 24
163.128.187.0/24 maxlen: 24
2402:55e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.crl
rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmmqIgwv5LbqxlHnIhp8A7iBQnY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 09:16:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1D71, serialNumber=3269AA220C2FE4B6EAC651E7221A7C03B8814276
Validity
Not Before: May 13 01:28:06 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a03d3a6-1a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:e7:96:72:a0:86:81:e2:a2:b6:ff:33:a2:
ef:b3:fb:3b:b2:b9:ad:06:13:d2:10:f2:e9:02:6d:
f0:c8:2d:b0:6c:f1:22:f5:89:b7:48:b4:e5:86:ef:
de:16:53:84:f7:ea:63:dd:be:69:5b:4c:19:68:d3:
e7:54:ad:f4:e5:36:d4:5d:82:2c:49:f8:aa:3e:91:
d2:6d:70:38:13:65:45:0c:5b:21:11:3c:d7:3d:e6:
77:06:46:26:b8:e5:37:03:2b:b8:ca:22:0e:a8:2c:
0c:3a:c6:70:96:7e:e6:63:c5:37:a6:f2:07:f4:ed:
bc:e1:69:3c:d5:b5:55:79:57:27:77:34:bc:7d:77:
c5:b8:fc:f7:fd:f3:a5:4c:ed:5c:cb:0c:67:28:ff:
67:df:40:e6:52:65:a8:85:6d:c3:60:07:86:6f:8b:
b9:a7:6b:30:f7:84:62:c9:d5:86:f5:c9:5a:e8:75:
05:d7:ae:f5:91:4d:e9:ae:ab:71:f6:b4:33:a9:63:
3b:f5:06:59:17:67:ca:83:53:9a:38:3d:0d:6f:df:
ac:0f:69:ec:83:77:d9:7c:3b:74:26:b2:67:ef:a5:
9f:1d:f8:7c:87:12:b6:49:dd:3d:d0:ff:87:5c:c0:
7f:1e:7c:fb:86:02:f9:d0:8b:ac:93:74:88:a1:f5:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:CB:5D:78:DB:03:3F:2E:12:5F:EC:3C:7D:99:79:EC:66:52:0F
X509v3 Authority Key Identifier:
keyid:32:69:AA:22:0C:2F:E4:B6:EA:C6:51:E7:22:1A:7C:03:B8:81:42:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmmqIgwv5LbqxlHnIhp8A7iBQnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/FE3124A04E6A11F19EF4B4E9A9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.186.0/23
IPv6:
2402:55e0::/32
Signature Algorithm: sha256WithRSAEncryption
87:44:21:43:2b:26:16:10:0d:6a:43:53:0b:08:03:71:a4:c3:
0e:5d:4a:bc:75:1f:37:06:85:71:c5:9c:e9:c8:63:8d:95:3b:
07:c1:cd:e9:85:73:99:0a:8d:e4:99:2e:f6:5f:45:70:b9:4f:
05:55:96:ff:26:be:8d:4d:70:60:23:17:f9:1b:a2:9a:29:37:
96:14:e9:1d:d0:4e:fb:dd:dc:b1:44:8c:bc:7b:d9:04:8e:ad:
7f:42:c0:16:25:fe:f1:dc:7a:a4:62:0d:60:c9:e1:7a:29:20:
12:49:b5:ab:c5:34:ba:63:b8:5a:5e:c0:3a:86:d4:1d:85:c1:
cf:18:49:d1:0d:59:9b:7d:f5:f6:58:f8:89:10:fd:9d:77:37:
da:bc:20:93:e2:86:44:2f:e3:49:af:2d:a6:b4:ce:9b:22:59:
d9:af:a9:1f:29:12:8e:0f:c5:6e:42:96:20:54:74:24:b8:0c:
85:e0:41:86:88:dc:33:3c:67:ae:22:1d:5a:be:f1:8a:d0:98:
d4:c6:42:54:77:ad:a6:d4:57:ba:0e:5a:32:3d:af:1e:c5:80:
93:fe:35:37:48:e7:5a:2c:8f:3b:c1:e1:90:be:7f:59:64:c4:
6c:4d:f2:ba:84:54:af:0d:c2:cd:67:71:36:b2:fc:73:f6:cb:
83:9b:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:16:35 2026 by rpki-client