
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/FBB6EA4E558B11F082FD5637C4F9AE02.roa
File: FBB6EA4E558B11F082FD5637C4F9AE02.roa (raw, json)
Hash identifier: 2FcVuaRaySm31VN4owwphmbBRzz94dcrhBnFrd+vqjo=
Subject key identifier: 58:6B:32:32:2F:67:9E:F9:A0:E8:27:EA:F9:E8:EB:7D:85:72:4E:76
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 026E
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/FBB6EA4E558B11F082FD5637C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:53:06 +0000
ROA not before: Mon 03 Nov 2025 03:48:03 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 139311
IP address blocks: 2402:be0:feff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 02:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Nov 3 03:48:03 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a47d02-9471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:77:27:fc:a7:d2:1e:0a:64:3b:34:e3:09:
2f:2e:b6:26:14:21:18:e2:9d:44:4d:3d:f9:2a:a1:
1a:9a:21:49:bc:11:75:4a:0a:bf:fd:1b:37:50:21:
57:35:73:a9:58:3a:84:3c:15:06:b7:4a:5f:cb:d0:
65:8c:b3:e4:b6:c1:51:55:8f:2d:3b:ed:30:ef:bf:
41:23:15:a3:41:69:a1:2d:8e:45:c5:da:e6:cf:28:
24:e6:54:6d:3b:b9:4f:54:c4:ed:91:de:f5:ed:9e:
55:4f:8f:e5:b4:54:9c:b9:3b:bf:23:da:77:94:be:
84:55:69:d9:19:1d:80:4d:5d:a0:60:ae:9d:01:f0:
37:2b:17:42:04:3b:41:a0:da:82:cc:34:01:7b:1e:
58:78:75:e8:85:57:ca:00:68:35:68:21:aa:a4:90:
c1:fd:47:15:e4:76:b5:7d:35:ee:3e:41:dd:69:32:
5d:0d:a1:d5:35:35:d0:e4:83:60:c9:fc:04:79:78:
64:3e:aa:35:d7:f2:9c:fb:e3:72:40:ac:d7:4a:4d:
02:c4:d8:a2:47:66:de:c5:74:02:8b:b5:63:e1:94:
6e:b0:42:5b:e9:a7:e8:f4:23:0d:60:65:f6:c0:51:
e6:e6:1b:39:88:da:84:37:75:87:76:9b:ad:ec:fe:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6B:32:32:2F:67:9E:F9:A0:E8:27:EA:F9:E8:EB:7D:85:72:4E:76
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/FBB6EA4E558B11F082FD5637C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:be0:feff::/48
Signature Algorithm: sha256WithRSAEncryption
30:6a:ba:7f:a0:91:7e:24:b1:9f:40:a4:5e:51:7f:02:94:fb:
83:0c:9b:28:86:12:1e:1d:c1:fc:82:f8:88:19:a6:79:d5:91:
9b:05:67:29:d5:8d:2c:71:97:f4:02:0d:f1:fb:80:9c:58:81:
48:bf:e5:c6:3c:3b:7c:a1:36:1f:75:8d:a7:3a:6e:70:f8:d0:
8e:35:f1:b9:94:fc:ed:cb:49:32:c9:18:4f:32:c3:7a:c0:41:
dd:9f:35:16:72:f7:ba:0e:51:8b:ec:55:0c:63:c6:03:26:64:
b5:88:76:46:52:2f:7a:56:0a:ed:bf:db:3e:74:a5:96:ac:81:
3d:f4:77:ee:c0:71:9a:fc:d8:47:f4:df:8b:a5:fa:9d:70:cd:
64:a8:25:1d:7e:7a:b0:73:76:87:60:29:87:51:ca:36:e5:ea:
61:43:bc:5f:d8:e5:f0:82:be:65:de:11:c6:c3:6d:0a:85:27:
b4:54:fa:46:6b:24:31:1c:28:a7:47:f5:e0:0f:b8:5d:d5:77:
7c:e7:29:c0:e3:3d:85:31:47:c2:90:44:ce:d6:80:a7:ca:26:
91:f2:b6:cf:6b:78:15:f8:45:21:88:f8:dc:cd:61:e5:5a:ed:
64:3d:11:28:c1:a6:ce:ad:9e:49:72:67:27:ef:c0:18:65:cc:
2e:6a:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 21:28:14 2026 by rpki-client