
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/FCD28A70629911F1B304DBAA9547A888.roa
File: FCD28A70629911F1B304DBAA9547A888.roa (raw, json)
Hash identifier: aBMh+i307AoJWfbJ6M8cqkVS2dVfCOwMyfSwafOT7PE=
Subject key identifier: 9F:A4:FC:37:C5:28:34:5A:F3:60:50:0F:CB:BB:7A:14:9C:CA:0F:30
Certificate issuer: /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF
Certificate serial: 0107
Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/FCD28A70629911F1B304DBAA9547A888.roa
Signing time: Thu 22 Oct 2026 00:50:50 +0000
ROA not before: Thu 22 Oct 2026 00:50:50 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 137453
IP address blocks: 210.56.144.0/24 maxlen: 24
210.56.145.0/24 maxlen: 24
2001:df7:b840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl
rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 06:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF
Validity
Not Before: Oct 22 00:50:50 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ad95de9-1044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:82:1a:c3:64:89:f9:1f:b7:72:75:d9:f1:
e0:ea:1c:d5:e7:f4:c1:a3:54:b8:6f:4a:bd:18:f4:
52:ea:8e:f8:43:bb:69:2a:65:8f:34:07:84:df:15:
fb:bf:28:1e:05:37:d0:cb:ef:86:c6:21:ad:b8:b2:
c4:ba:bf:15:2d:7a:f1:d1:fa:3a:1f:5e:24:01:a0:
8a:8d:4c:d5:d9:ce:83:20:c6:87:20:98:4d:bb:92:
6f:62:77:99:64:12:47:82:40:fa:e5:da:8f:d3:12:
fe:20:e8:e9:27:63:45:ce:57:77:43:5a:aa:1c:0c:
e8:5c:d0:2b:44:a9:78:8c:ac:d7:81:2d:98:ed:12:
cd:d9:b2:ef:e6:d8:b1:e3:99:2e:1d:c5:a4:58:23:
b4:f1:26:e0:21:57:15:51:b0:5c:a0:a2:aa:2e:af:
fd:9e:fe:32:a6:37:96:d6:7a:45:69:9e:ba:9b:4b:
18:59:aa:45:a2:9e:f3:c3:6a:bb:d8:f5:57:ca:5a:
ec:89:43:3b:2b:e0:3c:f6:e7:af:db:af:ed:15:0f:
26:56:86:c9:8b:e3:9b:c0:24:e1:dd:98:41:8a:1a:
29:da:54:db:71:c0:f0:06:6e:5b:d8:c7:15:09:99:
f8:06:ce:48:ad:f0:5e:ff:fe:77:87:ac:e4:36:df:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A4:FC:37:C5:28:34:5A:F3:60:50:0F:CB:BB:7A:14:9C:CA:0F:30
X509v3 Authority Key Identifier:
keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/FCD28A70629911F1B304DBAA9547A888.roa
sbgp-ipAddrBlock: critical
IPv4:
210.56.144.0/23
IPv6:
2001:df7:b840::/48
Signature Algorithm: sha256WithRSAEncryption
59:b3:fb:9a:c1:75:0a:5f:9b:b6:8b:96:76:4a:c1:f6:e2:f3:
4c:0c:5d:e2:58:45:1c:5a:a8:ca:3c:0c:30:ae:ce:e5:ee:97:
87:81:29:93:d9:95:7e:1a:80:2d:1b:7c:93:6e:ba:08:0c:0a:
8a:2c:e2:b7:76:85:66:ac:b3:a0:ed:a2:7e:45:ff:9b:1b:46:
60:7a:01:c0:22:df:a9:63:97:11:92:7d:98:c7:8b:ef:93:95:
9b:71:26:38:8e:f2:65:5b:72:ea:00:3d:44:bd:66:2c:d1:1d:
32:16:93:52:45:44:92:af:07:75:29:6c:6d:e4:bd:d3:47:71:
89:44:7f:92:ad:12:a7:b0:68:a0:7a:b1:c9:07:29:3a:85:e6:
d5:e0:70:75:15:1d:ea:44:8f:33:68:63:12:38:20:d8:5b:9c:
b6:1c:08:8f:fa:74:50:d2:ac:c3:d1:8a:bf:34:f1:6a:ec:7d:
7e:a5:46:6c:67:65:18:e8:ff:38:7f:3a:9a:14:e4:a3:35:fd:
94:ae:87:c7:84:0b:fe:2d:54:e1:66:5c:25:a6:85:0a:a7:c8:
d5:83:50:46:ee:53:d0:fd:92:47:76:ab:fe:d4:81:81:89:87:
2b:a5:96:d2:37:a9:ca:ef:32:28:5a:96:45:8d:55:ef:89:3b:
c2:aa:dd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:42:12 2026 by rpki-client