
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/BC99FD16BE3411F1B5799FF5A5EE528E.roa
File: BC99FD16BE3411F1B5799FF5A5EE528E.roa (raw, json)
Hash identifier: FSC4Gv36Jy1FRgUlJ1Xn+FVeVFXLOR4OdjvcMtuabpY=
Subject key identifier: E2:06:40:D9:DC:28:21:CA:B4:6D:0F:26:95:C8:61:8F:EF:0C:92:FF
Certificate issuer: /CN=A9124CE5/serialNumber=9B1F4CE1D4AB4BB2B7CD18664A6BFD883282B483
Certificate serial: 02
Authority key identifier: 9B:1F:4C:E1:D4:AB:4B:B2:B7:CD:18:66:4A:6B:FD:88:32:82:B4:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx9M4dSrS7K3zRhmSmv9iDKCtIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/BC99FD16BE3411F1B5799FF5A5EE528E.roa
Signing time: Fri 02 Oct 2026 07:41:54 +0000
ROA not before: Fri 02 Oct 2026 07:41:54 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 134076
IP address blocks: 103.51.68.0/22 maxlen: 22
2402:1180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/mx9M4dSrS7K3zRhmSmv9iDKCtIM.crl
rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/mx9M4dSrS7K3zRhmSmv9iDKCtIM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx9M4dSrS7K3zRhmSmv9iDKCtIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 21:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124CE5, serialNumber=9B1F4CE1D4AB4BB2B7CD18664A6BFD883282B483
Validity
Not Before: Oct 2 07:41:54 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6abf6042-1b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:cb:27:fd:1b:4b:d5:61:c5:a1:3f:0c:7d:
de:74:35:28:86:07:1e:94:b4:53:63:9a:20:d2:6f:
8c:91:2f:90:f8:da:bf:9d:6d:d5:ba:56:7a:ba:fc:
2d:31:9b:e1:ad:e8:80:e4:66:88:a5:d2:40:e5:0c:
92:7b:7e:f3:db:66:8c:9c:a8:10:80:db:7e:46:6a:
cc:c4:79:cc:e9:5a:49:cb:78:35:05:cb:13:dd:f2:
ed:a7:50:02:11:39:5b:dd:a8:66:10:e7:09:ac:e1:
7f:6f:2e:d1:6e:89:1a:b8:f9:af:e5:de:7c:0b:ec:
bb:cd:b2:1a:b7:1b:ee:78:b9:e6:f3:4f:9c:00:12:
c9:88:1e:4b:5b:bd:97:6a:15:b0:b2:56:dd:8c:24:
0e:5a:f7:21:59:8e:99:fa:05:11:a6:44:a2:a5:f8:
3a:d5:f5:de:ff:70:cd:af:3a:64:7f:3c:a9:f2:ff:
da:9d:5d:a9:d3:ce:bb:9b:ae:44:fc:14:94:47:82:
79:58:a2:50:21:6f:47:56:21:7c:fa:33:b7:e9:81:
0f:c6:d5:1c:95:c4:ce:fa:27:35:2e:60:6c:44:1c:
6f:66:34:f1:7f:0d:65:4b:07:92:98:78:ad:42:00:
f5:85:3e:f5:e3:8b:31:d9:34:78:8e:25:04:a3:25:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:06:40:D9:DC:28:21:CA:B4:6D:0F:26:95:C8:61:8F:EF:0C:92:FF
X509v3 Authority Key Identifier:
keyid:9B:1F:4C:E1:D4:AB:4B:B2:B7:CD:18:66:4A:6B:FD:88:32:82:B4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/mx9M4dSrS7K3zRhmSmv9iDKCtIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx9M4dSrS7K3zRhmSmv9iDKCtIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/BC99FD16BE3411F1B5799FF5A5EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.51.68.0/22
IPv6:
2402:1180::/32
Signature Algorithm: sha256WithRSAEncryption
8a:55:58:88:c1:cd:a4:11:6f:c0:28:05:4d:c8:2a:55:17:3f:
92:8d:8d:a3:c7:97:59:28:ac:58:af:c3:73:30:e5:7d:bf:6b:
c3:16:70:27:a0:c0:87:8b:3a:ad:1e:93:d6:0d:c6:3c:41:ec:
0e:91:e0:6d:e5:9a:f0:f0:7c:92:4e:03:90:98:a9:78:3f:b0:
0c:8f:16:a3:15:f6:95:6f:22:fd:26:00:da:12:16:e5:2e:b0:
ae:f0:34:50:4a:7f:07:cd:81:69:74:2d:b5:2d:b0:48:e8:de:
d8:d4:6a:bd:74:be:b7:fc:14:f8:ae:2f:57:a2:df:07:5b:e3:
b6:4c:9c:69:bc:87:8b:ee:94:ed:49:ee:04:c3:a1:ce:04:c2:
3e:ea:f9:d0:6a:3b:e9:da:81:de:fa:20:cb:59:f7:af:fb:fc:
fb:df:61:ae:4d:27:4e:77:48:44:61:4c:87:48:89:02:34:d8:
65:87:9a:98:cd:db:d4:25:5e:04:18:1d:c8:4a:ba:39:91:d0:
77:06:b2:d7:c6:7d:ed:41:b5:5d:0b:b6:d6:f6:e1:1c:58:e1:
ab:0b:8a:1e:d3:a8:b9:d0:25:c2:2f:41:fd:fe:86:23:4f:e0:
c1:65:10:2e:22:07:cf:00:9e:fa:78:22:1a:c1:94:b7:d0:04:
bd:fe:d5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:05:09 2026 by rpki-client