
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBA122A063E311EC8B936683C4F9AE02.roa
File: BBA122A063E311EC8B936683C4F9AE02.roa (raw, json)
Hash identifier: eXGXIu7QqHiAExFVsg19SxllITGL81xOUGsbIggoim8=
Subject key identifier: FC:FC:A7:55:91:47:E8:C7:EF:7A:0C:EB:67:FC:94:4A:8F:2C:EC:ED
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F0A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBA122A063E311EC8B936683C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:35:38 +0000
ROA not before: Fri 02 Oct 2026 15:35:38 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38737
IP address blocks: 203.119.68.0/22 maxlen: 24
2001:dc8:d000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28426 (0x6f0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:35:38 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcf4a-c986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:59:be:be:7b:78:48:e3:ff:74:71:9b:5f:
0c:3e:5f:95:80:31:b2:ba:f5:53:6e:d4:d8:75:a9:
b9:af:2c:08:29:cb:15:e2:e4:f6:75:25:57:8d:69:
2d:9c:38:1e:f4:1d:8a:5f:18:42:c9:6a:ab:c2:ab:
0e:9e:07:58:b1:1e:50:56:5f:58:13:52:89:99:11:
ac:3f:bb:05:2e:e9:4e:2d:54:93:90:47:fb:b5:da:
a8:8c:09:d8:de:33:29:72:ef:5a:f0:60:26:bd:2c:
f9:6f:31:57:17:a8:2d:3c:bb:7b:40:ce:85:4e:20:
2a:b4:6b:68:fe:c2:32:66:5f:10:08:2b:5d:bc:58:
4a:d0:28:24:b2:dc:7d:1c:f5:7e:b3:1e:a0:93:3f:
0b:92:02:4a:90:33:36:8f:18:b3:17:3c:85:00:95:
0f:3d:d4:6c:c4:24:e5:dc:35:d0:d1:5e:79:31:0e:
33:8e:63:3d:34:b9:50:e3:73:4d:85:76:77:78:7a:
3e:25:33:bd:d0:03:f0:83:78:d6:de:ec:4e:71:6a:
7e:cd:0b:4d:dd:8b:0a:3d:63:c7:54:49:74:60:61:
17:8b:93:01:68:8e:67:72:72:5d:c4:3e:15:49:79:
70:c1:62:85:51:ad:2e:7f:b5:79:cf:3c:f8:30:06:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FC:A7:55:91:47:E8:C7:EF:7A:0C:EB:67:FC:94:4A:8F:2C:EC:ED
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBA122A063E311EC8B936683C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.119.68.0/22
IPv6:
2001:dc8:d000::/48
Signature Algorithm: sha256WithRSAEncryption
c0:61:40:ac:27:95:1e:25:5c:ef:33:0f:46:18:c0:bd:bd:5d:
83:f5:a5:9e:d1:23:14:aa:89:34:61:af:10:9a:12:6d:20:24:
9f:ed:22:15:bc:e8:1d:a6:25:b1:1a:a5:01:3c:e8:40:77:e8:
f9:98:bc:ba:6f:cb:fa:be:6e:f0:07:04:ba:4b:99:47:4b:0a:
77:ff:d8:6b:86:31:25:a2:af:b1:d7:9a:39:3a:12:f5:33:7d:
91:88:42:4b:4a:eb:9a:95:8b:32:54:70:e6:6c:3d:69:96:c6:
a6:ee:06:10:54:bf:84:b2:5f:9a:62:44:0d:3d:57:3a:d7:5d:
b6:e0:a8:11:59:33:c8:1d:c5:e6:77:1b:1d:98:68:22:36:f4:
9d:13:4b:b8:11:74:23:bc:33:c1:3b:2f:31:72:e6:1d:a7:cf:
08:fa:e2:9a:91:97:d5:a4:e8:a6:76:6c:04:37:c9:3b:1b:9d:
5a:77:93:cb:27:3a:81:7f:69:4c:ae:ef:ff:1b:6b:af:11:94:
bd:78:e4:47:c0:78:05:9b:c6:7d:e2:9a:7e:fc:52:48:2f:af:
22:5a:a7:d1:b9:99:55:35:46:fd:77:34:44:41:30:2c:24:9f:
98:97:0a:a2:55:7f:a8:14:74:12:3b:be:2a:42:05:7e:04:6f:
f2:cc:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:30:54 2026 by rpki-client