
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/BFA7DB2EB8BF11F19F9061496D11F970.roa
File: BFA7DB2EB8BF11F19F9061496D11F970.roa (raw, json)
Hash identifier: MPR4NHdHnvvgE6hmqwS4hbLAySjghA7dW/cEaXsXZ3A=
Subject key identifier: 30:26:38:53:E8:EF:5C:09:AA:F4:5B:0A:56:9C:A5:09:2F:9C:46:33
Certificate issuer: /CN=A9134639/serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
Certificate serial: A4
Authority key identifier: 40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/BFA7DB2EB8BF11F19F9061496D11F970.roa
Signing time: Fri 25 Sep 2026 09:01:53 +0000
ROA not before: Fri 25 Sep 2026 09:01:53 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 38746
IP address blocks: 202.162.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl
rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134639, serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
Validity
Not Before: Sep 25 09:01:53 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ab63880-09e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:3e:d3:c6:48:6a:01:6c:92:1c:01:80:be:
23:ed:75:70:1c:d0:53:62:21:1e:50:9f:62:95:41:
be:18:e0:8a:83:3c:2b:03:ca:41:bc:7c:f1:39:4f:
f6:26:a4:78:5f:2e:74:eb:a1:3e:c8:1c:0e:dd:3b:
a8:48:a2:13:9b:bd:64:2c:3f:7d:14:2f:9d:62:f4:
f4:e5:4f:ab:72:b8:2d:12:55:f0:17:c2:9a:87:4d:
53:ff:17:56:8e:94:6c:3c:a7:f5:fb:f3:5f:fa:96:
bf:5b:08:30:0f:48:2b:f8:44:30:47:d6:3d:e4:d8:
8d:68:b8:cc:83:6c:8e:1e:01:cc:ac:50:4b:67:f1:
57:f0:90:29:f3:69:71:8c:0d:15:f5:c2:5e:37:0a:
18:9d:19:a1:1a:f9:f1:16:1c:cf:0e:51:43:40:4d:
3e:83:b7:65:1d:5a:ca:ec:5e:07:09:2a:24:89:39:
33:a0:bb:ea:c3:b3:5c:06:4e:b1:59:a2:96:54:58:
aa:cd:d9:9b:7f:3d:b2:ca:5b:b9:51:79:9d:ee:33:
80:98:15:5d:cc:c3:57:cc:83:cf:06:19:13:b9:d1:
9f:26:e7:fe:c4:83:8c:38:82:77:6e:6e:85:52:09:
87:58:cd:92:93:8e:b4:54:a0:8d:6a:e1:d2:e3:7f:
4e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:26:38:53:E8:EF:5C:09:AA:F4:5B:0A:56:9C:A5:09:2F:9C:46:33
X509v3 Authority Key Identifier:
keyid:40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/BFA7DB2EB8BF11F19F9061496D11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
202.162.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:6f:cb:16:94:38:11:4c:1c:ef:ba:84:bf:f7:6e:fe:0f:c3:
3d:38:a5:c8:ce:39:81:6e:f4:a0:f3:99:63:e7:7c:fa:30:98:
e1:64:84:9f:c0:b1:1a:49:f3:85:83:ad:88:50:f0:07:7b:e9:
8c:1f:fa:55:02:99:4e:2e:99:d1:03:3a:9c:80:30:d4:d6:ed:
1f:5f:b3:79:ef:85:09:bc:13:16:d4:93:40:9b:79:2a:6e:ea:
86:0f:7f:6a:a6:a4:10:2c:a1:53:2b:54:05:de:f4:a3:5d:ec:
b9:47:c9:38:91:7c:c3:9a:57:a8:48:64:15:02:e0:c7:9e:84:
d6:2b:c4:9d:bd:b9:2a:d6:b1:97:f0:9c:e4:e4:02:78:da:c7:
8a:80:30:d5:6a:06:25:2b:a0:f7:ba:8d:36:a1:49:ef:fa:5b:
a6:81:2f:6b:63:20:2c:bf:b7:e5:ef:3e:b6:67:f2:db:b4:ee:
06:30:e9:7c:bb:41:f4:b7:a6:e8:74:b0:68:0c:fa:25:6a:06:
9f:80:00:ea:82:60:b9:be:ad:af:5f:77:80:55:ae:ee:cb:bb:
84:29:41:98:ff:30:6d:06:5e:6a:3e:6d:62:5d:bd:e2:62:1d:
c7:8b:08:72:61:09:df:5c:63:d4:d0:92:58:c1:5f:8f:78:30:
31:c6:7a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:04 2026 by rpki-client