
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/FE0D78046DE911F18A77D2D25CA30FBC.roa
File: FE0D78046DE911F18A77D2D25CA30FBC.roa (raw, json)
Hash identifier: XiBXgFzUAWL1pwnYSYxy1I5MTxdL8wu1faYe0BCjxYY=
Subject key identifier: B3:38:24:02:B3:B5:6B:5D:3C:96:11:F4:A4:59:C9:FE:61:7B:5C:1F
Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Certificate serial: 057D
Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/FE0D78046DE911F18A77D2D25CA30FBC.roa
Signing time: Mon 22 Jun 2026 03:25:18 +0000
ROA not before: Mon 22 Jun 2026 03:25:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 963
IP address blocks: 103.89.72.0/24 maxlen: 24
103.133.72.0/23 maxlen: 24
103.133.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 23:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1405 (0x57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Validity
Not Before: Jun 22 03:25:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a38ab1e-f864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:e8:45:1d:7d:21:e0:df:d3:a2:99:d3:c0:
af:66:be:39:57:b5:ba:6c:95:50:67:cb:67:8f:40:
0c:5a:b8:e0:8f:d4:47:4a:f5:12:98:6c:4d:e3:ba:
b4:bc:2b:b9:2e:2b:aa:ed:e0:e3:ec:53:86:9b:ca:
d2:e6:7c:cb:23:82:d6:35:63:6d:9d:f1:c2:28:0b:
7a:91:b8:18:cf:ce:d0:6d:30:7f:4c:3f:4b:40:a4:
6a:d4:60:b1:ad:d1:80:b0:3c:12:e2:66:36:0e:c6:
06:f7:54:c8:78:cc:9b:86:7f:fc:2f:e4:1c:0a:15:
a5:90:ce:4d:1b:fc:a4:c4:5f:ba:e7:26:c4:3e:8a:
33:46:1d:a3:ea:85:33:7a:35:9a:02:9c:0e:cd:de:
8a:ee:eb:8c:53:64:93:13:ed:49:40:dc:b9:67:6b:
ff:a3:30:da:e6:66:03:7a:36:df:eb:4b:6b:96:c5:
c1:b7:c6:6c:7b:49:f7:b0:02:e9:13:49:a2:15:7c:
2f:00:d9:5e:e3:3f:e1:e9:ba:e6:18:d9:66:c6:7b:
b2:4c:25:02:03:fb:27:1a:70:88:89:72:f2:90:4f:
1a:ae:bd:0a:0f:2f:e7:cb:e7:de:b7:c6:e5:10:a2:
12:67:74:df:c6:8e:11:35:d0:b3:b3:e5:76:d3:36:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:38:24:02:B3:B5:6B:5D:3C:96:11:F4:A4:59:C9:FE:61:7B:5C:1F
X509v3 Authority Key Identifier:
keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/FE0D78046DE911F18A77D2D25CA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.89.72.0/24
103.133.72.0-103.133.74.255
Signature Algorithm: sha256WithRSAEncryption
5f:07:1a:1d:dc:5d:ad:59:b1:57:13:d7:e3:38:ba:09:db:88:
20:01:cf:85:2e:23:ad:08:35:84:e0:41:de:14:d0:f4:2b:65:
24:fc:94:9e:f2:64:5a:97:cf:49:98:63:25:a7:30:7e:04:b5:
67:4f:0a:82:87:7b:11:e1:e9:3a:47:db:7e:db:01:11:0e:30:
85:04:d5:0b:2d:50:c7:61:5b:bd:00:da:ba:67:23:be:fc:c2:
ae:21:9d:95:23:c0:6d:86:f4:7b:2a:3c:77:0d:3b:e0:0c:72:
fe:d2:5b:ba:d4:47:15:8d:34:80:02:89:0b:a3:25:47:25:e3:
95:74:2d:dd:45:55:62:8a:f1:1b:b1:8a:fc:02:f1:4d:15:f3:
1a:7c:c6:95:4d:f0:cb:fe:37:17:1f:24:13:f9:f8:2a:b8:4f:
b7:66:46:a1:76:13:e2:03:fc:b8:6f:30:03:19:5a:9e:d6:5d:
84:8b:a6:50:ce:71:a0:33:f4:f0:9d:32:bb:93:40:cd:ff:ca:
b3:67:a6:bb:20:31:ca:54:35:23:be:19:f2:62:a8:7a:5d:62:
d5:ee:a2:0b:1d:d5:b9:68:e5:3d:de:07:15:33:6e:8a:13:5b:
11:5c:4b:70:20:10:2a:1f:e3:c2:d9:44:98:4e:24:79:f9:47:
db:4a:fb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:14:56 2026 by rpki-client