
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
File: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (raw, json)
Hash identifier: hq+tKlDXD0cr1+NNnQhRcgkOsx9XsBg1fiLnYmKzsUw=
Subject key identifier: FA:DE:87:54:36:CB:1E:07:F1:8C:1C:0F:12:E7:52:9D:5E:CB:E4:B4
Certificate issuer: /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial: 0E9B
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
Signing time: Sun 04 Oct 2026 18:34:42 +0000
ROA not before: Sun 04 Oct 2026 18:34:42 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 139604
IP address blocks: 103.142.80.0/23 maxlen: 24
2001:df1:3680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3739 (0xe9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Validity
Not Before: Oct 4 18:34:42 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac29c42-357c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:61:21:67:24:78:e5:4e:ff:57:98:1f:4c:61:
25:3e:ae:e7:6a:86:80:18:28:12:59:8a:5b:3a:41:
24:40:ef:27:6f:cd:f7:7e:d6:0b:c3:2a:f9:1d:61:
b0:aa:ca:4b:e1:93:1e:13:5b:a4:b0:97:cf:38:6a:
b4:16:6c:0f:53:02:99:69:29:8b:6c:11:2f:89:c9:
ca:1b:35:2a:b3:80:9b:c8:8c:8c:4f:f8:21:4a:af:
e0:0f:b9:69:bb:f5:09:c1:2c:c1:94:3e:06:ac:a9:
33:28:c5:6e:17:ac:ee:7d:62:23:8a:bb:d7:8d:17:
a0:09:17:f9:bd:e9:d1:53:5b:3d:ad:da:d0:fa:d5:
c9:ce:13:ef:71:20:33:3e:fe:21:9b:ed:b9:67:5d:
37:81:78:83:95:3c:55:85:fe:ca:b8:a1:26:43:a2:
c1:8e:74:12:02:e4:a2:78:8a:11:6b:1e:2b:d4:60:
04:b7:0a:e7:24:d5:81:e6:c2:d7:e1:9f:f3:1c:6e:
5b:a3:6a:ca:92:27:1b:5c:82:21:d0:69:0f:19:b3:
2c:ef:6f:1b:52:18:f9:4b:32:cb:49:42:3f:23:d4:
dc:13:2b:c9:20:30:82:ce:34:77:e3:0f:6c:a3:bb:
1f:7b:b4:db:6c:c9:56:c2:db:b9:ea:bf:8d:23:13:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DE:87:54:36:CB:1E:07:F1:8C:1C:0F:12:E7:52:9D:5E:CB:E4:B4
X509v3 Authority Key Identifier:
keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.80.0/23
IPv6:
2001:df1:3680::/48
Signature Algorithm: sha256WithRSAEncryption
42:2d:8e:33:ec:8b:f2:e0:19:c7:f1:99:d4:a8:14:7c:3d:37:
94:56:6f:ce:8b:a4:1c:f4:fa:a8:03:eb:b1:32:72:4d:21:b6:
16:13:26:cd:81:18:1f:00:e0:07:ec:29:47:98:0e:ba:6c:f8:
79:7f:28:08:9b:48:09:5d:a6:69:01:02:a0:c1:91:22:be:3e:
1f:0d:f7:63:38:60:39:57:f4:a7:e7:04:6e:15:e6:02:85:cf:
ab:b3:a4:e2:95:81:21:76:42:24:81:78:7d:9d:19:3e:96:1d:
fc:32:af:7c:e2:52:09:77:98:d7:37:3d:56:c4:aa:7f:6c:71:
75:42:ff:aa:cb:f7:22:dd:32:4e:82:28:29:04:55:b4:a1:00:
a8:ed:98:8d:bf:0a:42:99:56:96:91:95:0d:89:84:e3:87:31:
0b:2d:58:3c:50:57:43:9c:33:9b:38:79:5c:ee:39:42:cc:2e:
4a:7d:5d:4a:e9:93:b4:75:5b:2a:c7:a6:ac:8e:34:f7:f8:65:
d5:a6:26:5e:41:62:74:e9:77:31:1d:3a:c9:a5:d1:75:07:83:
4e:bc:02:49:3a:13:54:4b:cb:88:e3:75:51:d3:9e:63:21:a2:
44:9a:9f:ba:62:c8:23:fa:8c:3f:25:3a:f5:be:d9:bb:a8:c6:
36:fa:45:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:55:21 2026 by rpki-client