
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/BCCEB0E68D8911F1AB735BAB3A11F970.roa
File: BCCEB0E68D8911F1AB735BAB3A11F970.roa (raw, json)
Hash identifier: EteG4ERl7dgEVOEBURUM5yPOYfiL2XFRmjKpTBgKI4k=
Subject key identifier: B9:3C:17:73:07:E7:0F:1A:32:0D:71:45:35:B7:8D:D2:69:D2:B1:6B
Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial: 08B6
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/BCCEB0E68D8911F1AB735BAB3A11F970.roa
Signing time: Sat 01 Aug 2026 09:16:54 +0000
ROA not before: Sat 01 Aug 2026 09:16:54 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141217
IP address blocks: 103.156.177.0/24 maxlen: 24
2001:df4:f180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 23 Aug 2026 20:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230 (0x8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Validity
Not Before: Aug 1 09:16:54 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a6db986-5bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:b6:62:2f:92:36:ab:00:ee:91:ec:7b:5e:
c3:00:20:c7:6c:71:4e:9a:c7:25:e1:53:94:45:58:
f2:fe:de:c6:c2:28:be:0e:dd:e6:31:ed:af:f6:b4:
91:08:8a:ee:48:08:35:6f:47:5e:46:58:14:27:0b:
e6:ed:9d:0d:91:d5:f0:90:d8:99:5f:b9:8b:78:2a:
6f:30:85:4a:4b:39:2c:f5:7d:7c:76:85:87:94:ea:
61:10:e8:a9:a3:45:b4:c2:cc:d1:bd:03:d4:42:dd:
a2:97:c5:30:1d:9f:2e:23:74:0a:07:02:c2:9c:1c:
69:19:6d:b0:4c:92:82:87:66:bb:52:92:bf:6f:ed:
e4:38:6a:d8:c1:b6:9f:73:75:52:90:c0:d0:99:8c:
1a:bf:ba:68:8a:03:ea:53:89:43:9d:f0:eb:dc:f6:
85:8a:8a:94:e7:74:ca:e0:05:6c:7d:ad:01:f5:af:
37:c1:10:75:4c:1b:e2:7a:52:06:3f:dd:6a:99:03:
93:90:30:28:2f:db:86:cf:a8:68:ff:ea:fe:aa:ca:
b6:44:63:d2:fb:ca:5a:da:6a:23:71:27:30:08:8f:
d7:b8:53:8d:f1:6d:47:39:98:c7:9e:51:5e:c7:bd:
85:9d:83:3d:80:a8:8b:c7:89:1c:d8:ce:6d:71:2d:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3C:17:73:07:E7:0F:1A:32:0D:71:45:35:B7:8D:D2:69:D2:B1:6B
X509v3 Authority Key Identifier:
keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/BCCEB0E68D8911F1AB735BAB3A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.156.177.0/24
IPv6:
2001:df4:f180::/48
Signature Algorithm: sha256WithRSAEncryption
60:86:3e:8b:f8:00:25:c5:1f:b2:6f:9a:de:33:a1:cc:d6:e1:
8b:af:78:82:3e:c7:03:8d:ff:e6:0c:b8:9f:45:d7:85:e7:46:
b2:b9:95:95:d6:8e:f3:79:6a:c2:78:14:49:1f:96:20:8f:15:
33:87:3a:e7:22:10:63:b3:01:dc:01:d2:eb:a1:4d:3a:df:08:
d1:f0:ae:81:56:cb:72:9c:70:78:9b:7c:61:e8:9e:04:37:e9:
b2:8c:6d:88:e5:90:ab:3a:50:ac:19:40:b2:4c:c4:70:cc:67:
d1:23:b1:0b:d4:82:cd:b2:3c:29:d9:62:d8:cd:42:17:d7:2e:
db:5d:d5:5f:97:27:40:d0:91:09:e1:0d:68:0a:b6:40:06:4b:
cb:e1:f6:da:fd:67:19:e7:42:24:e7:f9:91:f9:af:dc:8e:6d:
9e:d2:ab:b3:b2:96:a3:5d:2c:57:21:ec:2d:42:d5:0d:5d:61:
0d:82:b1:72:ef:7a:7b:1a:b6:a1:05:8c:c3:da:ec:24:b6:9a:
bf:fe:3f:5f:e6:b3:82:b8:41:4d:71:47:18:ec:92:52:b0:79:
b6:e9:de:50:bd:28:68:71:80:d5:5d:1e:bd:77:a3:26:89:25:
5e:06:c7:e3:d1:9d:de:c3:4d:68:3e:89:68:ab:b7:ca:1b:6c:
fd:40:0c:c7
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE5QzgxMTAvBgNVBAUTKEZFRUE2MTQzOUEzMDk4Qjg1Q0NCMTgzQjVBNDFBQTEy
QUY0NUNBMUUwHhcNMjYwODAxMDkxNjU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkYjk4Ni01YmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApGW2Yi+SNqsA7pHse17DACDHbHFOmscl4VOURVjy/t7Gwii+Dt3mMe2v9rSR
CIruSAg1b0deRlgUJwvm7Z0NkdXwkNiZX7mLeCpvMIVKSzks9X18doWHlOphEOip
o0W0wszRvQPUQt2il8UwHZ8uI3QKBwLCnBxpGW2wTJKCh2a7UpK/b+3kOGrYwbaf
c3VSkMDQmYwav7poigPqU4lDnfDr3PaFioqU53TK4AVsfa0B9a83wRB1TBvielIG
P91qmQOTkDAoL9uGz6ho/+r+qsq2RGPS+8pa2mojcScwCI/XuFON8W1HOZjHnlFe
x72FnYM9gKiLx4kc2M5tcS1yUwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLk8F3MH
5w8aMg1xRTW3jdJp0rFrMB8GA1UdIwQYMBaAFP7qYUOaMJi4XMsYO1pBqhKvRcoe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTlDOC9GNUE1RUVBQTAx
NDExMUVCQTMzRjhFMTFDNEY5QUUwMi9fdXBoUTVvd21MaGN5eGc3V2tHcUVxOUZ5
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL191cGhRNW93bUxoY3l4ZzdXa0dxRXE5RnloNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTE5QzgvRjVBNUVFQUEwMTQxMTFFQkEzM0Y4RTExQzRGOUFFMDIvQkNDRUIwRTY4
RDg5MTFGMUFCNzM1QkFCM0ExMUY5NzAucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ5yxMA8EAgACMAkDBwAgAQ308YAwDQYJKoZIhvcNAQELBQADggEB
AGCGPov4ACXFH7Jvmt4zoczW4YuveII+xwON/+YMuJ9F14XnRrK5lZXWjvN5asJ4
FEkfliCPFTOHOuciEGOzAdwB0uuhTTrfCNHwroFWy3KccHibfGHongQ36bKMbYjl
kKs6UKwZQLJMxHDMZ9EjsQvUgs2yPCnZYtjNQhfXLttd1V+XJ0DQkQnhDWgKtkAG
S8vh9tr9ZxnnQiTn+ZH5r9yObZ7Sq7OylqNdLFch7C1C1Q1dYQ2CsXLvensatqEF
jMPa7CS2mr/+P1/ms4K4QU1xRxjsklKwebbp3lC9KGhxgNVdHr13oyaJJV4Gx+PR
nd7DTWg+iWirt8obbP1ADMc=
-----END CERTIFICATE-----
Generated at Tue Aug 18 09:26:37 2026 by rpki-client