
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBDD8CBC8F5711EEBEA97C2DC4F9AE02.roa
File: BBDD8CBC8F5711EEBEA97C2DC4F9AE02.roa (raw, json)
Hash identifier: kNQ4ZdIVM/J7ZbTIbyLUUy+1Oec54mVote6xMQgpn2s=
Subject key identifier: 02:F6:78:B8:1C:7E:B8:21:DB:F3:05:CC:4F:D8:CD:03:8B:0B:9B:D8
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E1A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBDD8CBC8F5711EEBEA97C2DC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:27:15 +0000
ROA not before: Fri 02 Oct 2026 15:27:15 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 149068
IP address blocks: 103.72.96.0/22 maxlen: 24
2001:df0:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28186 (0x6e1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:27:15 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcd53-ecd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:72:de:c8:3d:22:6f:8c:c5:d5:bb:35:ae:
f6:6e:e8:32:85:ce:fc:7f:71:61:fd:ba:5d:53:84:
3b:f3:ae:f6:49:28:dd:02:bd:eb:fd:92:f0:ec:d1:
a5:53:e4:2c:4b:88:d0:54:68:81:f5:16:74:4a:08:
82:1d:66:72:44:e8:40:50:03:ce:4c:66:8e:34:b6:
4a:55:59:09:61:5f:2c:59:0e:f1:5f:70:24:82:5c:
1d:7a:9c:91:29:93:cd:7b:0d:3f:12:b0:87:40:99:
f8:41:12:a8:f1:3b:96:33:b2:47:62:b5:a4:2c:1d:
48:11:0d:a7:65:89:5f:9f:71:2a:7f:6b:04:4a:4e:
79:64:af:45:9d:8f:d1:a6:62:58:ed:44:d3:f6:90:
3a:ac:33:b2:6d:e5:b8:7c:e1:48:a7:f3:73:ba:4f:
e6:3f:29:e7:46:1a:a8:48:7a:ef:d5:22:69:d4:b6:
64:d3:79:2d:4c:4d:8c:08:f6:98:58:6b:87:1f:ae:
09:35:7a:89:99:ed:33:aa:96:c7:2b:49:3b:b3:38:
51:f8:41:82:6f:73:35:36:ec:1f:99:b5:38:50:15:
e5:9d:51:32:0f:71:22:ac:66:4a:25:72:c7:ce:04:
d7:2f:30:7d:a9:f0:f9:e7:cb:c3:a7:38:57:c7:22:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F6:78:B8:1C:7E:B8:21:DB:F3:05:CC:4F:D8:CD:03:8B:0B:9B:D8
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBDD8CBC8F5711EEBEA97C2DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.72.96.0/22
IPv6:
2001:df0:1b::/48
Signature Algorithm: sha256WithRSAEncryption
6b:7e:35:04:ea:74:85:a0:07:aa:18:8d:dd:f7:0a:1e:8d:2e:
61:bd:59:e2:ad:a9:77:9b:91:34:92:23:59:45:11:0a:62:57:
15:6c:10:0d:1a:71:2b:07:15:6d:d8:3f:c3:7c:2d:aa:8f:fa:
13:38:24:de:91:3f:61:b7:4c:81:9c:45:33:27:5f:0f:6e:e5:
e9:21:b5:fd:bd:d8:85:a7:03:f9:ce:90:89:5b:a0:19:72:66:
ad:23:37:83:49:04:6e:3a:b9:cc:a6:fb:30:de:a2:61:e8:c4:
f9:b0:60:05:5d:4f:f7:26:17:28:cd:71:61:08:2f:b9:04:b1:
5a:dd:62:05:0c:f9:04:ae:5e:b3:6a:3d:49:64:b9:9e:39:6d:
2e:01:6e:8f:2f:67:be:68:1d:71:89:31:38:a8:46:99:57:ba:
5b:1b:49:bc:04:4c:47:33:dc:b1:97:7f:03:cb:c1:c8:7a:b9:
ac:bd:39:58:b1:f2:3a:25:56:9d:62:4f:2f:3a:73:40:7f:b1:
a0:98:9d:c9:f3:31:0c:c2:bf:98:4a:20:11:b8:a9:a9:40:9e:
bd:ca:36:f6:3d:34:9f:eb:4c:55:46:bc:fa:da:0c:ec:a9:ac:
26:21:87:3a:1f:e0:5f:9b:2d:08:bd:24:e7:f7:4d:d5:ac:f8:
04:1b:c3:3e
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICbhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyNzE1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2Q1My1lY2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwHVy3sg9Im+MxdW7Na72bugyhc78f3Fh/bpdU4Q78672SSjdAr3r/ZLw7NGl
U+QsS4jQVGiB9RZ0SgiCHWZyROhAUAPOTGaONLZKVVkJYV8sWQ7xX3AkglwdepyR
KZPNew0/ErCHQJn4QRKo8TuWM7JHYrWkLB1IEQ2nZYlfn3Eqf2sESk55ZK9FnY/R
pmJY7UTT9pA6rDOybeW4fOFIp/Nzuk/mPynnRhqoSHrv1SJp1LZk03ktTE2MCPaY
WGuHH64JNXqJme0zqpbHK0k7szhR+EGCb3M1NuwfmbU4UBXlnVEyD3EirGZKJXLH
zgTXLzB9qfD558vDpzhXxyL9EwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAL2eLgc
frgh2/MFzE/YzQOLC5vYMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkJERDhDQkM4
RjU3MTFFRUJFQTk3QzJEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQCZ0hgMA8EAgACMAkDBwAgAQ3wABswDQYJKoZIhvcNAQELBQADggEB
AGt+NQTqdIWgB6oYjd33Ch6NLmG9WeKtqXebkTSSI1lFEQpiVxVsEA0acSsHFW3Y
P8N8LaqP+hM4JN6RP2G3TIGcRTMnXw9u5ekhtf292IWnA/nOkIlboBlyZq0jN4NJ
BG46ucym+zDeomHoxPmwYAVdT/cmFyjNcWEIL7kEsVrdYgUM+QSuXrNqPUlkuZ45
bS4Bbo8vZ75oHXGJMTioRplXulsbSbwETEcz3LGXfwPLwch6uay9OVix8jolVp1i
Ty86c0B/saCYncnzMQzCv5hKIBG4qalAnr3KNvY9NJ/rTFVGvPraDOyprCYhhzof
4F+bLQi9JOf3TdWs+AQbwz4=
-----END CERTIFICATE-----
Generated at Sun Oct 25 10:48:30 2026 by rpki-client