
$ rpki-client -vvf rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa
File: BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa (raw, json)
Hash identifier: BnpIoKsrmztPu+shMWxYA79YkKmvmpTbxwZGTpJ8PeI=
Subject key identifier: EF:58:69:55:17:10:7C:E8:AC:E2:75:85:EE:69:B1:D2:52:73:54:EC
Certificate issuer: /CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8
Certificate serial: 0390
Authority key identifier: 7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa
Signing time: Mon 03 Aug 2026 01:49:57 +0000
ROA not before: Mon 03 Aug 2026 01:49:57 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 132875
IP address blocks: 103.190.86.0/24 maxlen: 24
103.190.87.0/24 maxlen: 24
2001:df0:e840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl
rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91319EA, serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8
Validity
Not Before: Aug 3 01:49:57 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6ff3c5-28d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2b:3b:b4:7b:b4:c1:9f:3a:b0:cc:88:5f:7b:
fa:d5:7b:fb:a2:22:c4:20:ac:20:78:e5:ec:2c:64:
4c:80:0b:30:48:0a:39:0a:a0:08:0c:6e:03:36:d7:
d7:8f:46:25:81:f1:b0:37:43:34:8a:65:64:53:a0:
aa:1b:65:cb:97:e5:ce:f9:72:79:40:54:c3:74:0f:
a9:32:7f:fc:dc:b2:66:b9:ca:b2:57:73:d9:85:40:
2b:b2:82:8e:fe:7d:ef:0d:0a:21:27:01:b6:c0:97:
b3:9e:ef:14:1e:28:b9:d5:90:00:27:c0:56:8a:c1:
30:4c:8d:6d:9e:49:02:b7:38:47:f9:8c:99:03:82:
29:f2:48:2a:48:02:ad:00:d6:48:78:8e:61:a4:fe:
64:5d:fe:68:ee:28:23:e7:0d:28:65:5c:cf:ba:db:
50:ed:90:d4:e5:12:25:6f:45:60:5f:50:34:a6:46:
9e:21:58:af:84:e1:ed:19:f0:5b:b4:66:75:47:f2:
04:f6:7a:2e:fe:28:b7:a9:23:52:3e:e6:c9:3d:41:
e7:f2:a8:38:00:f9:09:aa:8a:96:75:3b:13:41:4d:
08:01:86:d4:e6:8c:d5:77:54:21:4f:d3:29:17:19:
1d:53:97:7b:95:a1:42:b2:6b:16:47:90:db:80:13:
97:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:58:69:55:17:10:7C:E8:AC:E2:75:85:EE:69:B1:D2:52:73:54:EC
X509v3 Authority Key Identifier:
keyid:7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.190.86.0/23
IPv6:
2001:df0:e840::/48
Signature Algorithm: sha256WithRSAEncryption
42:33:e1:09:15:5d:b9:92:3e:6d:5c:f3:75:09:29:17:05:8d:
00:cb:39:b4:90:de:67:04:d5:9d:ee:62:3a:4e:32:19:f8:1f:
87:28:45:27:f3:38:1d:4a:f9:e3:f6:07:8a:fc:3c:59:55:86:
fd:18:c2:df:21:c2:9d:47:39:e4:86:94:e0:83:91:6f:de:2f:
ce:74:8b:a4:61:0c:b0:ee:12:6a:b1:70:5f:27:00:15:4e:c6:
e9:9f:40:47:88:ad:b5:5c:93:0e:89:cc:ae:c7:2f:a0:3a:6e:
4f:b6:c9:5f:71:a6:55:56:eb:eb:f0:aa:1f:92:a7:b9:a8:a4:
17:c7:86:c8:c9:e0:0a:10:81:40:b8:07:92:ad:58:9f:41:43:
6d:1a:d6:11:a2:df:3f:73:af:cf:24:6b:32:41:e2:79:34:c8:
74:e4:d8:86:e1:9b:3d:2e:4b:f5:e7:e2:0f:94:48:53:ce:a6:
5e:f8:e7:93:53:90:8c:9c:c4:4e:a5:62:79:d6:9d:ce:71:9b:
a4:97:59:a6:df:56:a2:b0:ae:68:8f:1c:a2:20:c0:70:c6:c4:
53:f7:73:2a:55:52:0e:a9:00:54:2b:df:bf:f1:83:8a:23:95:
19:6c:62:be:1f:bf:7a:34:30:33:91:86:7a:91:04:1d:9b:a9:
4f:6a:45:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:18 2026 by rpki-client