
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/FE76F7D8EC4A11EFA7845862C4F9AE02.roa
File: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (raw, json)
Hash identifier: TevSgkhqCwdQE/FjTv8GRJVYEDbVAlVuBeFY3nUPvYU=
Subject key identifier: FC:F0:71:A7:8C:F0:2E:5C:82:69:0C:99:B6:EC:6C:33:A9:C2:75:F2
Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial: 05E7
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/FE76F7D8EC4A11EFA7845862C4F9AE02.roa
Signing time: Thu 15 Oct 2026 18:14:26 +0000
ROA not before: Thu 15 Oct 2026 18:14:26 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 147179
IP address blocks: 103.174.44.0/24 maxlen: 24
103.174.45.0/24 maxlen: 24
2407:fa40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 23:11:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1511 (0x5e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Validity
Not Before: Oct 15 18:14:26 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6ad11802-a35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:3a:a4:f0:c7:2a:c2:0c:c5:a9:0c:92:cd:
41:ff:6a:97:dd:00:fe:61:b9:13:23:d3:a7:06:f7:
86:8f:b1:01:2b:8f:36:bb:14:3f:f0:54:f0:fa:e7:
6b:0d:43:4d:f3:b8:b3:cb:ba:d3:c0:49:d1:2a:5c:
1f:61:e0:10:b4:22:eb:1b:61:3e:a6:76:24:48:81:
cd:79:2e:eb:eb:dd:f9:9f:fb:a2:31:2c:cb:e8:d3:
49:d0:b4:9f:f0:61:d4:91:68:16:1d:6f:d3:98:71:
03:11:40:0c:41:a1:b7:c9:6f:be:f2:57:b5:fb:94:
53:b9:dc:6d:65:ea:0d:fe:62:54:cb:a0:58:2f:d2:
71:82:30:d9:2e:57:ad:a8:2d:f2:63:ba:22:aa:a5:
16:2b:7a:6d:fc:97:ad:d6:9f:bb:e9:ca:79:5a:b3:
22:0a:55:55:32:cf:b8:79:54:e8:96:b2:93:a2:37:
e5:7b:09:c5:c2:ba:14:ac:18:1e:fb:36:78:bd:85:
52:19:1c:1c:d0:11:50:43:9e:1c:e2:89:01:d8:70:
0b:60:2f:1f:b3:93:1d:d2:54:f2:8a:ec:2f:40:34:
5f:71:ff:49:ba:29:59:a8:f8:f3:37:11:15:34:af:
6d:eb:d9:69:4f:3a:4d:2a:cd:70:32:4a:4d:48:0a:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F0:71:A7:8C:F0:2E:5C:82:69:0C:99:B6:EC:6C:33:A9:C2:75:F2
X509v3 Authority Key Identifier:
keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/FE76F7D8EC4A11EFA7845862C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.44.0/23
IPv6:
2407:fa40::/32
Signature Algorithm: sha256WithRSAEncryption
71:61:88:d8:1d:b2:8b:c4:75:5f:d0:b8:de:23:9a:1e:0a:70:
43:86:f9:a1:45:b4:66:15:9f:18:ae:ff:e4:90:0c:a8:d7:ad:
24:c0:4a:1a:80:98:17:ff:a4:64:f6:c5:8b:3d:d6:7c:99:f4:
e7:0b:75:d7:45:cc:bf:95:72:4e:e4:3c:67:a0:a1:ef:d6:07:
3b:f5:cf:24:e4:76:82:81:3f:32:14:24:82:55:ee:8f:0e:7e:
d9:08:ac:f8:bc:39:e1:3a:59:4b:bc:42:d0:98:15:8d:87:ad:
bc:47:d7:4f:9d:21:a0:4e:27:ad:57:35:dc:d0:7b:4b:89:cb:
4b:a8:5b:fd:f3:a4:07:00:c0:0d:85:9f:f4:73:60:4a:52:84:
78:a0:04:49:61:53:13:dd:88:8a:e2:75:1d:fc:81:d2:b0:86:
12:c9:f3:41:49:12:bd:d1:92:f2:0f:f9:6e:10:5d:6c:30:5b:
69:16:e8:74:8f:9e:a4:c6:fb:13:3e:48:7b:11:7c:f7:16:1f:
b6:02:a5:6b:63:bc:8b:51:b2:18:26:8e:38:0d:e4:cc:87:08:
0a:78:03:74:35:20:23:1e:30:7a:d9:4e:f9:9a:0b:21:f5:9c:
db:0b:2c:cb:ba:8a:56:6b:46:1d:ea:65:ea:16:24:1c:91:eb:
bf:ba:ae:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:21:49 2026 by rpki-client