
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/BF6469FCA41611F0A6E79C33C4F9AE02.roa
File: BF6469FCA41611F0A6E79C33C4F9AE02.roa (raw, json)
Hash identifier: 5uCRHI90WUp13bSSufU4YUK256GpJDBLLbHju9Bf6vY=
Subject key identifier: 7F:F4:FE:B8:90:FA:6D:91:B2:5E:85:23:82:BB:71:7B:54:9C:DC:AA
Certificate issuer: /CN=A9136F4F/serialNumber=BBCD9003234EB140ED0D89BB3B01FB6C463F5CAF
Certificate serial: BD
Authority key identifier: BB:CD:90:03:23:4E:B1:40:ED:0D:89:BB:3B:01:FB:6C:46:3F:5C:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/BF6469FCA41611F0A6E79C33C4F9AE02.roa
Signing time: Sat 03 Oct 2026 07:56:18 +0000
ROA not before: Sat 03 Oct 2026 07:56:18 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 141387
IP address blocks: 123.253.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.crl
rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136F4F, serialNumber=BBCD9003234EB140ED0D89BB3B01FB6C463F5CAF
Validity
Not Before: Oct 3 07:56:18 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac0b522-e43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:99:d8:f0:65:1c:41:00:2a:a8:d2:07:6c:76:
0f:fd:d1:3d:c3:31:73:23:ec:65:d2:6d:6f:a1:5e:
4d:3e:3a:86:78:4f:4f:fa:32:71:99:ff:53:73:ba:
38:ae:72:a8:1d:da:75:66:27:5a:8d:3a:d1:5c:10:
45:f1:ba:5b:0e:c7:1a:51:19:e1:87:c7:47:7c:7c:
7a:3f:ad:32:d4:6c:4b:69:97:12:8f:c9:67:5a:7a:
6d:70:35:c2:89:f1:a8:91:45:e5:5a:6e:5c:83:5f:
10:29:c2:9b:0e:80:e5:82:2e:8a:1c:81:2e:47:56:
5b:9e:ec:7b:44:b8:4a:b2:76:36:b4:3c:ce:2a:56:
ad:a7:4a:a9:a1:8f:f1:7a:13:d1:4e:34:07:bf:79:
b3:22:c9:4f:b7:a7:dc:c6:0b:f2:d0:d3:a0:3b:bc:
55:0d:57:20:67:a5:3f:aa:71:96:a0:d5:58:e8:41:
d3:7e:74:41:7e:92:54:d4:03:4d:f2:57:ef:6a:6c:
45:69:1e:b5:09:1c:29:db:fc:0e:c2:2d:59:ce:fb:
30:dc:a3:70:49:a4:91:60:6e:19:b1:e5:3a:14:81:
a6:19:1e:0a:4f:3b:72:2a:b8:20:43:33:5d:13:ad:
a7:94:34:0c:8c:5b:05:64:db:ba:ba:b2:a6:11:7d:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F4:FE:B8:90:FA:6D:91:B2:5E:85:23:82:BB:71:7B:54:9C:DC:AA
X509v3 Authority Key Identifier:
keyid:BB:CD:90:03:23:4E:B1:40:ED:0D:89:BB:3B:01:FB:6C:46:3F:5C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/BF6469FCA41611F0A6E79C33C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.253.118.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d3:d1:73:37:71:6f:f3:a1:b1:fb:85:45:29:55:4c:44:01:
2b:91:23:24:56:45:12:3f:89:6e:60:ad:d3:e4:8f:bc:72:0b:
ad:25:58:24:c2:96:ce:d9:3c:b5:9a:5a:7b:0f:c5:54:3e:35:
7b:34:3c:7b:0e:e2:a9:35:05:7c:72:17:e5:61:e6:cd:d3:a8:
9a:21:94:0f:f8:14:2b:66:95:6f:20:32:98:d2:3c:6b:c3:c0:
b3:af:21:a5:7e:fc:ee:2a:9e:53:7d:d6:d1:09:bd:40:fc:00:
cf:d0:85:41:17:37:bb:b3:e6:d6:9b:99:ed:5b:9d:36:6a:f1:
a5:e3:cb:b9:9b:40:05:93:7f:fa:30:a8:6c:e4:1d:0a:67:12:
0b:e0:77:c0:1f:2c:3b:45:ff:bc:67:c1:9c:e7:47:f1:14:94:
e7:6f:f9:6e:1b:7c:07:56:95:08:66:78:64:5a:cd:14:59:39:
66:b0:28:c0:5c:58:2b:e9:46:05:e4:47:aa:2e:0c:5e:45:6b:
bd:f0:ee:2c:bb:68:a9:38:1d:7a:74:6f:54:e9:5a:87:98:9f:
3b:65:22:72:54:26:ae:39:c4:20:24:6b:64:d2:4d:2a:3c:1b:
43:42:8f:69:63:16:1e:46:6a:1f:c4:3a:99:6a:1a:57:cf:50:
91:9a:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:04:40 2026 by rpki-client