
$ rpki-client -vvf rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/BE2B8A2E949E11F1B3CB7B066C11F970.roa
File: BE2B8A2E949E11F1B3CB7B066C11F970.roa (raw, json)
Hash identifier: UCN2Zm5VCKtgcnFKRnHOKmxNgbpNt9SjwIItt5plX9c=
Subject key identifier: 4B:BC:23:15:91:4B:6E:3E:38:90:D5:B4:F1:67:50:99:7D:67:ED:21
Certificate issuer: /CN=A91187F1/serialNumber=9565019AA651695E04F861BA1D3D6EFF3EBA4DBB
Certificate serial: 04
Authority key identifier: 95:65:01:9A:A6:51:69:5E:04:F8:61:BA:1D:3D:6E:FF:3E:BA:4D:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWUBmqZRaV4E-GG6HT1u_z66Tbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/BE2B8A2E949E11F1B3CB7B066C11F970.roa
Signing time: Mon 10 Aug 2026 09:37:06 +0000
ROA not before: Mon 10 Aug 2026 09:37:06 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 10125
IP address blocks: 202.168.94.0/24 maxlen: 24
203.217.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.crl
rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWUBmqZRaV4E-GG6HT1u_z66Tbs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187F1, serialNumber=9565019AA651695E04F861BA1D3D6EFF3EBA4DBB
Validity
Not Before: Aug 10 09:37:06 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a799bc1-99bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:76:30:66:5f:0d:54:ad:a9:c0:56:30:75:
19:37:54:66:68:ad:4a:be:3b:97:af:19:0a:57:d3:
17:f4:8c:79:c5:85:41:3d:9f:c5:0d:9d:c7:0d:02:
6d:2a:4b:0e:d2:6d:d4:2c:de:12:33:c5:df:e0:b7:
5e:3d:3b:4d:e5:7c:12:bb:3b:42:3d:ec:8a:1d:a3:
56:df:d7:78:44:2d:a4:71:0b:72:5c:0b:b4:7c:d8:
6f:af:8b:8e:2f:6d:63:aa:15:96:ff:0b:6f:4a:56:
39:3a:7e:16:4e:a9:b3:e3:c0:45:35:b1:0c:03:92:
98:36:d4:c1:ff:bc:dc:bb:bf:46:24:6a:25:1d:bc:
4e:b1:3a:26:30:ae:9c:e5:42:33:06:ad:77:4b:9f:
18:33:7d:27:7e:ad:29:9d:6a:fd:48:24:28:62:67:
a4:31:73:5f:97:28:c6:be:53:96:28:46:24:b9:07:
f8:a6:d0:4e:6e:76:b6:b2:ad:32:2b:02:ad:8e:40:
29:24:14:30:dc:57:f5:df:7e:9f:54:c3:81:05:d1:
21:0c:19:56:5b:7f:8e:15:4c:c3:ce:12:f1:3e:07:
10:70:89:9a:6b:97:74:a7:97:d0:78:28:ae:58:c3:
c3:36:39:47:34:32:46:36:10:c9:08:db:fd:c6:91:
b6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BC:23:15:91:4B:6E:3E:38:90:D5:B4:F1:67:50:99:7D:67:ED:21
X509v3 Authority Key Identifier:
keyid:95:65:01:9A:A6:51:69:5E:04:F8:61:BA:1D:3D:6E:FF:3E:BA:4D:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWUBmqZRaV4E-GG6HT1u_z66Tbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/BE2B8A2E949E11F1B3CB7B066C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
202.168.94.0/24
203.217.174.0/24
Signature Algorithm: sha256WithRSAEncryption
51:c7:3a:9a:4a:e1:2c:0f:73:7b:70:0b:68:0a:0a:08:58:9f:
82:2d:a1:81:37:c5:be:9d:d7:28:de:6f:23:2e:0b:9c:37:3a:
30:c8:13:92:14:a2:70:4e:86:98:e4:c9:3a:82:5d:97:08:20:
7a:a7:1d:3a:2e:e4:e8:85:7d:ce:77:40:30:d4:d4:21:a5:10:
06:29:e8:f5:47:bb:70:45:3f:77:6d:a1:33:97:e8:47:8c:a2:
32:77:ff:c5:ef:c3:51:14:e1:db:d9:41:d9:73:08:7f:e6:82:
6c:db:fe:3a:26:cd:ba:5b:64:53:f1:61:a0:95:cb:ce:2d:92:
55:3e:f2:13:70:81:8e:69:f8:fe:cb:ad:01:cc:e7:79:8e:ec:
f9:ec:27:c4:57:b5:29:99:4b:e4:08:76:3d:0b:6c:46:92:fb:
e1:80:6f:82:0e:2a:a0:5a:a9:0b:99:cb:79:ce:2d:f4:71:35:
35:f3:c5:82:0d:c8:7b:33:44:0d:32:84:4f:17:ab:ef:33:8f:
cd:33:3b:99:d5:57:27:09:3f:02:a1:7c:26:38:be:52:36:73:
23:0d:19:ef:a6:53:8f:a1:74:ca:36:5d:15:56:03:ae:a3:20:
31:a4:6c:44:1b:93:22:0f:25:5b:96:f7:3e:a6:68:ba:41:08:
57:1d:4d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:10:58 2026 by rpki-client