
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BDBB760A5F3111F199210D457D47A888.roa
File: BDBB760A5F3111F199210D457D47A888.roa (raw, json)
Hash identifier: NLYfELX2d8GUdcTHIYg/ltSlsS13xwrYSwymPAl8YLk=
Subject key identifier: C0:D8:E4:DA:26:66:12:66:C1:D8:1E:67:34:34:89:81:01:DD:C3:97
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 23ED
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BDBB760A5F3111F199210D457D47A888.roa
Signing time: Fri 02 Oct 2026 15:20:57 +0000
ROA not before: Fri 02 Oct 2026 15:20:57 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154697
IP address blocks: 162.4.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9197 (0x23ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:20:57 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcbd8-6e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:2e:eb:6f:fe:c5:4b:e2:65:ec:90:95:6e:
2e:a1:96:17:50:14:0b:f8:7d:b5:69:79:f5:1c:e0:
32:9c:80:e4:1e:5a:46:50:b4:37:7c:6d:40:cd:01:
5d:54:73:53:ca:d2:8b:30:ae:40:f3:da:63:a8:58:
1f:dd:3a:54:95:21:c9:00:c0:db:b8:14:85:c6:52:
9a:37:2f:b5:a0:76:66:13:ab:76:91:6c:7a:ac:cb:
0f:1f:f7:e4:5f:b5:8e:18:75:e0:f0:47:2b:ac:04:
11:f1:fd:d9:d2:20:e4:ff:ef:59:0d:91:4a:5f:9a:
a1:b0:8a:f4:e5:c1:1a:0a:8b:43:25:c7:f2:f9:16:
54:01:7b:f7:b2:02:83:cd:de:c6:6d:a1:aa:2e:c8:
f9:4d:59:55:05:ae:20:e9:ac:fb:65:f5:95:7d:53:
eb:2d:fe:e9:a1:16:70:db:59:a4:21:7d:83:ce:8a:
fc:28:e8:1e:76:0c:7b:ac:da:bd:87:a7:e0:12:cc:
4b:32:a4:03:49:6f:f9:90:a6:b3:96:8c:6b:39:92:
03:1d:98:d9:8a:ac:f4:d4:79:cd:66:21:1a:9e:a8:
76:a5:14:a0:b9:b4:c1:5a:2a:43:78:61:6a:93:5c:
8c:ee:7e:5b:de:13:76:18:32:1e:d8:53:75:93:ea:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D8:E4:DA:26:66:12:66:C1:D8:1E:67:34:34:89:81:01:DD:C3:97
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BDBB760A5F3111F199210D457D47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.138.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:be:7b:cb:2f:10:3f:56:10:a6:7a:5b:08:ae:ee:3e:55:94:
1d:94:e3:de:d7:0c:23:0f:b8:4c:7f:36:00:4a:9d:4a:96:e8:
8d:b8:86:e1:c2:06:e4:09:29:21:84:40:8e:df:60:5f:13:e5:
d6:5a:61:37:47:c6:00:38:1b:ef:ad:2a:2a:3c:2e:fb:37:69:
f7:60:f9:ea:0b:d3:c5:d2:a7:c6:d4:b1:9c:24:5c:dd:85:05:
20:dc:7e:9c:65:d4:0e:19:ad:71:95:cc:53:f6:05:5a:51:06:
4c:69:ce:6e:7c:1c:51:42:15:d5:57:2b:13:84:f7:2d:77:64:
b6:54:96:ef:6a:2e:34:fb:72:90:52:8e:87:d4:07:9f:19:85:
e0:00:01:c8:aa:14:11:3d:dc:8d:3a:fb:e8:57:20:fd:b5:7d:
dc:87:7a:e5:7a:35:68:b3:2f:73:e3:3a:59:7e:b6:ea:60:4e:
b7:86:f3:c8:40:cf:c7:20:2d:73:de:d6:75:27:91:1c:37:77:
26:86:f0:77:09:f3:c2:b7:86:af:f8:da:d8:07:ca:d9:f1:ea:
07:62:09:4c:0f:9e:ae:4f:1c:78:22:d2:9f:b9:90:2b:cb:d8:
20:52:1e:c2:4b:d6:d0:aa:70:4e:4a:a7:d8:bc:0a:38:5e:63:
4d:46:58:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:54:49 2026 by rpki-client