
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa
File: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (raw, json)
Hash identifier: 7i/+pU2Et59KGbh7B5+qqFDZaAktF1/YoczW2JWdHFg=
Subject key identifier: CE:E3:B7:E9:17:CD:E3:72:9D:BA:E8:EE:5A:1D:41:64:10:E1:B3:58
Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Certificate serial: 01E8
Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa
Signing time: Tue 21 Jul 2026 05:30:34 +0000
ROA not before: Tue 21 Jul 2026 05:30:34 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 132822
IP address blocks: 103.65.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 05:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Validity
Not Before: Jul 21 05:30:34 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5f03fa-a8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:76:d6:ca:29:ae:9f:54:79:db:0f:3e:d6:
22:1a:77:62:b4:82:e5:bd:d7:b5:de:af:7f:f1:a1:
25:30:75:13:c3:61:e3:e1:41:94:9b:9a:19:d4:06:
8b:32:92:28:fd:59:ba:83:a7:f0:78:74:ca:1c:ff:
6d:2b:82:f0:60:e6:19:d3:c0:66:59:ed:bc:c7:8d:
08:c0:45:56:b1:0e:5b:e3:51:d3:6d:10:f4:74:61:
aa:5b:bf:73:d0:06:15:4f:8f:96:d7:ba:31:ff:48:
c2:bb:d2:d6:a2:3b:9d:ef:86:52:4b:83:60:41:92:
1c:bf:af:c7:43:90:83:cc:10:33:a3:f5:e5:9e:6e:
57:1f:11:a8:2b:86:cb:98:c6:56:10:37:d1:8b:6d:
98:24:af:de:1e:cf:9c:b3:1c:85:0e:df:e2:ce:67:
65:64:97:4c:7d:03:11:4d:d7:6d:b1:62:63:02:b9:
71:ad:65:d2:d9:27:fc:f2:17:ed:92:49:61:41:88:
8e:59:84:4d:4e:e7:f0:b1:b1:57:b0:68:73:15:fd:
dc:3f:84:68:d1:16:8c:25:63:f4:ac:0b:a3:35:56:
47:13:a1:bc:bb:51:e6:42:2e:87:a9:50:16:83:34:
22:9b:bc:17:6b:18:63:1c:b7:47:48:62:d9:6b:67:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E3:B7:E9:17:CD:E3:72:9D:BA:E8:EE:5A:1D:41:64:10:E1:B3:58
X509v3 Authority Key Identifier:
keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.65.239.0/24
Signature Algorithm: sha256WithRSAEncryption
89:52:e6:43:a9:c5:4e:a7:a5:03:cb:c0:30:33:4a:41:65:4d:
e3:ef:da:ac:49:15:ca:30:f4:e7:1b:b3:16:a3:af:66:93:52:
8b:a2:05:f9:c8:68:2c:6f:18:1b:5e:21:ac:4c:5c:27:2b:d3:
b2:36:c5:d9:fb:e5:9b:d0:d2:07:33:e8:e6:98:4f:9a:c9:12:
5e:40:e2:40:4a:72:5b:59:76:4e:80:16:2f:fb:42:6f:d0:a5:
b2:e1:9c:4c:bc:a4:76:bd:1a:ec:02:08:be:bf:c2:72:6a:a4:
9c:c6:e0:61:25:bd:9a:a7:e7:c0:27:d0:18:5c:ab:a8:9e:7a:
c3:38:98:b9:71:02:c7:95:bc:51:e8:d8:93:45:4d:f0:ee:31:
0b:02:6f:68:33:11:0c:07:1b:74:94:d2:2a:88:c7:40:c5:8f:
32:c4:53:c5:1d:b8:52:1b:35:a6:58:b4:78:85:aa:61:4a:ac:
34:98:59:9f:d7:65:72:9c:3a:70:7f:13:50:95:f1:18:da:f6:
58:02:7c:66:76:61:9b:e3:77:12:59:28:59:3e:0b:6a:25:d8:
a3:ef:76:34:f6:98:21:e1:f9:38:a3:e7:87:6d:78:53:92:ea:
a9:56:60:27:c1:10:05:5f:f0:a4:8f:08:f3:09:52:ec:30:47:
3b:08:ff:9a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw
Q0UwQzI5RkEwHhcNMjYwNzIxMDUzMDM0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVmMDNmYS1hOGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAukR21soprp9UedsPPtYiGnditILlvde13q9/8aElMHUTw2Hj4UGUm5oZ1AaL
MpIo/Vm6g6fweHTKHP9tK4LwYOYZ08BmWe28x40IwEVWsQ5b41HTbRD0dGGqW79z
0AYVT4+W17ox/0jCu9LWojud74ZSS4NgQZIcv6/HQ5CDzBAzo/Xlnm5XHxGoK4bL
mMZWEDfRi22YJK/eHs+csxyFDt/izmdlZJdMfQMRTddtsWJjArlxrWXS2Sf88hft
kklhQYiOWYRNTufwsbFXsGhzFf3cP4Ro0RaMJWP0rAujNVZHE6G8u1HmQi6HqVAW
gzQim7wXaxhjHLdHSGLZa2ekbwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM7jt+kX
zeNynbro7lodQWQQ4bNYMB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC
NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L
Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTRBRjUvMUIxQzI0NjZBQjU3MTFFRTgxOEEyODNFQzRGOUFFMDIvQkM4N0NCNTJB
QjU3MTFFRUJDNkVCQjNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0HvMA0GCSqGSIb3DQEBCwUAA4IBAQCJUuZDqcVOp6UDy8AwM0pB
ZU3j79qsSRXKMPTnG7MWo69mk1KLogX5yGgsbxgbXiGsTFwnK9OyNsXZ++Wb0NIH
M+jmmE+ayRJeQOJASnJbWXZOgBYv+0Jv0KWy4ZxMvKR2vRrsAgi+v8JyaqScxuBh
Jb2ap+fAJ9AYXKuonnrDOJi5cQLHlbxR6NiTRU3w7jELAm9oMxEMBxt0lNIqiMdA
xY8yxFPFHbhSGzWmWLR4haphSqw0mFmf12VynDpwfxNQlfEY2vZYAnxmdmGb43cS
WShZPgtqJdij73Y09pgh4fk4o+eHbXhTkuqpVmAnwRAFX/CkjwjzCVLsMEc7CP+a
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:53 2026 by rpki-client