
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/FD86FDF6707311F1B807F94B77A30FBC.roa
File: FD86FDF6707311F1B807F94B77A30FBC.roa (raw, json)
Hash identifier: 23CJGWbt8fyB3OpvRKbgICrMhEM+zuFh6yidaG3uesk=
Subject key identifier: 9B:88:7E:09:14:D7:D1:4E:10:3B:CC:AC:B9:10:56:B2:1F:F8:CF:38
Certificate issuer: /CN=A91F090C/serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1
Certificate serial: 69
Authority key identifier: 8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/FD86FDF6707311F1B807F94B77A30FBC.roa
Signing time: Sun 04 Oct 2026 06:58:11 +0000
ROA not before: Sun 04 Oct 2026 06:58:11 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45905
IP address blocks: 119.15.156.0/24 maxlen: 24
119.15.157.0/24 maxlen: 24
119.15.158.0/24 maxlen: 24
119.15.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl
rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 05:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F090C, serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1
Validity
Not Before: Oct 4 06:58:11 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6ac1f903-ff97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:b2:2e:a0:ff:5b:65:8a:14:4f:a5:cd:15:
65:9e:61:d1:d7:0c:77:a7:5a:48:15:fb:b3:e2:cc:
58:9e:05:fd:e0:9f:c3:1c:65:c7:5f:4f:a3:ce:3d:
8c:31:39:06:d2:35:8b:e4:13:6d:10:9d:bf:7a:4f:
ca:ce:69:30:d2:3c:6e:5f:9a:77:36:57:23:5d:52:
31:59:43:fc:e6:82:29:61:13:e0:3b:38:f5:6f:4d:
ba:46:fb:d0:06:6d:37:08:13:e9:a5:65:4d:d9:a5:
dd:8d:57:bc:32:66:68:88:b2:10:53:4b:68:0e:40:
7b:86:ac:9a:ca:34:10:59:93:0b:1c:22:73:1c:2f:
31:e7:fc:e2:9e:ef:a4:6f:de:65:2a:65:01:dc:3a:
26:f9:63:b2:ad:8f:76:a7:89:37:66:79:f3:e1:e5:
28:74:20:ed:12:7d:8e:6b:b4:fd:14:2a:e3:fc:30:
3d:95:53:0a:98:5b:3f:f5:cb:bc:9d:8a:1d:1a:dd:
df:fa:51:c7:b2:90:c8:77:ee:24:3d:51:28:2b:a0:
d3:dc:f7:8c:fb:1d:c3:db:3b:17:10:b5:ed:c6:45:
4b:f0:66:cb:34:4c:4e:ae:05:38:9a:77:22:55:43:
c0:fa:5d:22:c3:55:1a:e9:24:42:af:a7:f8:73:7f:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:88:7E:09:14:D7:D1:4E:10:3B:CC:AC:B9:10:56:B2:1F:F8:CF:38
X509v3 Authority Key Identifier:
keyid:8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/FD86FDF6707311F1B807F94B77A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
119.15.156.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:30:f1:ae:ef:3c:54:b7:c9:70:64:7a:0b:03:08:47:97:76:
2f:2a:d0:15:18:7b:76:60:39:ee:97:92:db:ed:89:4b:65:4a:
c3:8a:11:92:68:f2:f9:f8:95:4f:70:0b:c4:72:4d:03:6b:ad:
83:65:01:b9:62:24:0e:5e:50:67:d2:57:44:75:e6:20:06:32:
8a:a5:05:fc:77:85:c2:0e:96:48:aa:2d:8f:46:f5:e8:7e:ce:
95:23:9d:86:c4:f7:e0:e6:1f:52:9a:f3:f3:06:25:36:7d:b0:
ce:8a:c0:04:6f:b6:5b:eb:a4:56:0d:d6:56:e4:82:ba:80:c5:
a9:0b:08:af:d9:6e:b0:23:66:f0:5a:04:20:48:27:34:3e:4b:
7c:76:6b:f0:fa:cc:4d:f1:87:b0:0a:c0:0d:d4:fa:49:dc:a3:
37:9d:1b:01:64:28:3a:80:cb:22:d1:8d:7f:36:ac:41:f4:5d:
52:7c:2a:46:2b:24:61:ad:e5:fc:c7:93:c7:b2:73:aa:ce:10:
62:85:47:e9:a0:a8:33:4e:1c:45:13:fe:54:d7:57:46:7d:09:
33:70:59:fc:8b:a2:55:93:14:9a:76:88:bd:a1:98:99:e9:22:
0f:3e:b8:1c:83:63:2c:a5:3b:cb:93:80:8f:2a:ed:c2:75:f0:
fd:80:f7:ba
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MDkwQzExMC8GA1UEBRMoOEFFRTI5REIyRkU5MTQwN0ZFNDBFNEJFNzhDNDA2MjZE
N0UxOEZCMTAeFw0yNjEwMDQwNjU4MTFaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYzFmOTAzLWZmOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZYrIuoP9bZYoUT6XNFWWeYdHXDHenWkgV+7PizFieBf3gn8McZcdfT6POPYwx
OQbSNYvkE20Qnb96T8rOaTDSPG5fmnc2VyNdUjFZQ/zmgilhE+A7OPVvTbpG+9AG
bTcIE+mlZU3Zpd2NV7wyZmiIshBTS2gOQHuGrJrKNBBZkwscInMcLzHn/OKe76Rv
3mUqZQHcOib5Y7Ktj3aniTdmefPh5Sh0IO0SfY5rtP0UKuP8MD2VUwqYWz/1y7yd
ih0a3d/6UceykMh37iQ9USgroNPc94z7HcPbOxcQte3GRUvwZss0TE6uBTiadyJV
Q8D6XSLDVRrpJEKvp/hzf0TdAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUm4h+CRTX
0U4QO8ysuRBWsh/4zzgwHwYDVR0jBBgwFoAUiu4p2y/pFAf+QOS+eMQGJtfhj7Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOTBDL0I3QzRFOTM2NUQy
OTExRUFCMDU0RkYzQkM0RjlBRTAyL2l1NHAyeV9wRkFmLVFPUy1lTVFHSnRmaGo3
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaXU0cDJ5X3BGQWYtUU9TLWVNUUdKdGZoajdFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDkwQy9CN0M0RTkzNjVEMjkxMUVBQjA1NEZGM0JDNEY5QUUwMi9GRDg2RkRGNjcw
NzMxMUYxQjgwN0Y5NEI3N0EzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJ3D5wwDQYJKoZIhvcNAQELBQADggEBALIw8a7vPFS3yXBkegsDCEeX
di8q0BUYe3ZgOe6XktvtiUtlSsOKEZJo8vn4lU9wC8RyTQNrrYNlAbliJA5eUGfS
V0R15iAGMoqlBfx3hcIOlkiqLY9G9eh+zpUjnYbE9+DmH1Ka8/MGJTZ9sM6KwARv
tlvrpFYN1lbkgrqAxakLCK/ZbrAjZvBaBCBIJzQ+S3x2a/D6zE3xh7AKwA3U+knc
ozedGwFkKDqAyyLRjX82rEH0XVJ8KkYrJGGt5fzHk8eyc6rOEGKFR+mgqDNOHEUT
/lTXV0Z9CTNwWfyLolWTFJp2iL2hmJnpIg8+uByDYyylO8uTgI8q7cJ18P2A97o=
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:35:39 2026 by rpki-client