
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/BF685A9E232E11F0B8BD6F6AC4F9AE02.roa
File: BF685A9E232E11F0B8BD6F6AC4F9AE02.roa (raw, json)
Hash identifier: x5ZS6yGt30KTQdKh6kaStCXr+hMjFUnATtJrqBSb2II=
Subject key identifier: E2:A2:88:33:EB:13:A3:30:5F:25:4B:BF:DA:03:FA:AA:77:C8:7C:A7
Certificate issuer: /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Certificate serial: 025D
Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/BF685A9E232E11F0B8BD6F6AC4F9AE02.roa
Signing time: Tue 29 Sep 2026 02:53:22 +0000
ROA not before: Tue 29 Sep 2026 02:53:22 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 153800
IP address blocks: 103.6.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Validity
Not Before: Sep 29 02:53:22 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abb2822-a484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:c2:6b:4c:eb:29:a0:6b:e2:06:74:e0:a1:
ba:1f:9c:35:c9:80:e3:d0:f8:f5:3f:e4:1f:0c:ff:
4e:94:47:23:3b:59:08:b3:19:bc:c4:32:ef:b7:62:
c6:ae:ef:0a:da:0f:f8:a3:b1:d3:55:f8:80:ec:be:
b7:bf:e0:bc:7a:71:12:16:bd:9a:16:c3:d3:57:68:
f1:fa:b4:25:94:be:a4:4c:18:a7:c8:d6:54:a0:d9:
c9:ad:7a:cd:0f:20:4c:ed:c8:42:4c:7a:fc:b8:0f:
8d:12:ae:cf:82:1c:b6:77:1c:28:42:17:8c:cc:4c:
c9:5a:4b:72:5e:52:bd:3c:04:4c:4b:4c:c6:fc:3b:
1f:6a:55:84:76:38:13:03:32:93:d8:9d:af:a5:95:
44:d8:63:b1:e7:cb:1d:1a:a3:e2:32:5f:fb:af:45:
67:8c:77:34:d2:c4:45:1c:1b:1e:c5:d2:5b:ac:47:
58:40:99:a6:59:e2:b7:5e:cb:4c:98:00:07:c4:8f:
ac:4f:e1:3a:77:75:0a:6f:22:a2:56:85:cd:87:13:
09:e0:74:9f:e4:79:54:a6:01:01:b6:2e:bd:68:d1:
e3:74:96:62:f7:1a:b7:58:48:b0:60:18:88:ac:b9:
cb:e3:e8:3a:ea:5f:58:1f:d0:52:ad:ce:67:17:32:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A2:88:33:EB:13:A3:30:5F:25:4B:BF:DA:03:FA:AA:77:C8:7C:A7
X509v3 Authority Key Identifier:
keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/BF685A9E232E11F0B8BD6F6AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c9:7c:5f:f9:ed:f9:d2:03:09:0d:83:75:9b:2e:35:02:ce:
d7:f9:82:b3:b0:d3:6b:26:13:c6:94:7f:d8:66:5c:51:5a:d9:
f5:fb:05:07:ab:cd:c5:01:d4:84:ca:73:d7:94:0f:db:69:c9:
5a:a1:e6:71:12:b8:73:06:b2:dc:bf:71:48:f9:0f:eb:98:08:
05:9e:ae:bb:9e:f1:54:24:09:95:b4:a2:06:39:d1:76:4f:fd:
56:ab:93:de:8d:3c:31:f2:c9:f1:44:70:c1:66:29:d5:c4:2d:
e6:6c:91:2a:1e:ba:e2:ab:f9:e4:d7:cd:f7:6b:dc:ba:b8:43:
bc:a6:12:9c:b8:0e:58:00:f9:f6:a1:8c:c6:29:b5:23:0b:e4:
6e:76:24:97:5a:3c:15:06:93:dc:6a:89:aa:71:b9:68:3b:7e:
8b:c1:65:e8:73:8d:62:72:ef:f9:3b:6a:7a:55:4e:2e:8b:95:
60:67:ef:90:49:2f:da:6e:ae:32:81:02:3b:1d:9d:e1:45:da:
e6:ad:64:93:3e:7d:78:dd:d6:4a:ea:f6:ce:3a:f8:7d:40:4f:
8d:30:0e:09:7e:62:fd:05:f8:11:7f:4d:3f:e0:70:15:6e:45:
5d:9b:22:6e:8f:66:9b:f4:d1:cc:2e:dc:94:82:45:9f:b9:8f:
c9:7e:58:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:59:51 2026 by rpki-client