
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BE0921408A0611EFB684B439C4F9AE02.roa
File: BE0921408A0611EFB684B439C4F9AE02.roa (raw, json)
Hash identifier: /wOqRnBDduQTDno5h67M3Dmoxsq5oleyp7OykIPfylA=
Subject key identifier: A2:25:44:39:71:61:D3:0A:E8:F2:1E:8D:FA:E4:65:E1:10:4F:47:FA
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5EAD
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BE0921408A0611EFB684B439C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:19:15 +0000
ROA not before: Thu 28 Aug 2025 14:56:13 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153004
IP address blocks: 2001:df4:5840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24237 (0x5ead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:56:13 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60ce3-6df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:3e:98:92:eb:fe:45:34:2f:2c:c7:af:28:
ea:42:bd:e2:58:ea:5d:13:b5:2f:71:af:13:59:83:
33:a8:d2:f0:88:df:68:90:fb:91:6a:dc:60:0a:38:
78:43:9b:27:2e:ec:c9:16:80:b4:72:94:d7:7f:ca:
4b:2e:3e:2c:f7:61:b7:e4:87:1e:d9:56:60:69:67:
1f:c5:6c:b1:69:c0:43:d2:f7:7b:ce:5f:94:5e:47:
d1:c1:c7:e9:a6:76:f9:b7:b2:06:6f:93:36:17:91:
ae:92:09:02:bc:55:0a:94:1c:40:3e:da:ef:8b:13:
90:a4:cb:2a:41:fa:9d:88:86:f2:e5:93:43:72:90:
b3:c8:fa:09:96:4b:1f:41:b8:3b:be:01:84:49:a0:
b1:89:42:ac:87:69:7e:dc:1e:13:77:cc:a8:39:0a:
1c:0b:2e:9d:2a:6f:9a:c9:b8:38:bc:c4:e2:3d:7f:
01:e8:41:d4:b8:34:52:7c:be:3e:f0:96:3b:e1:61:
e1:66:ee:7c:fd:1c:fc:65:7e:41:a8:d4:25:1f:ea:
b4:04:90:d2:f0:8d:2b:9b:54:71:5a:b1:00:cf:d6:
9d:3d:a8:be:7f:63:d3:5e:93:f5:f0:b0:2e:d6:01:
46:04:84:48:89:0d:f0:e3:54:dc:c1:a6:51:ce:4f:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:25:44:39:71:61:D3:0A:E8:F2:1E:8D:FA:E4:65:E1:10:4F:47:FA
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BE0921408A0611EFB684B439C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:5840::/48
Signature Algorithm: sha256WithRSAEncryption
01:f5:0b:73:02:84:01:54:e8:74:dd:35:48:7c:9f:74:43:36:
39:ea:45:bd:91:78:31:45:5b:a4:5d:05:28:58:32:c5:65:f4:
fe:ad:45:7e:9b:3e:82:f6:85:21:3d:d4:43:43:aa:3c:cf:cd:
48:08:43:c2:a0:f9:a5:27:d0:5d:20:9f:ee:b7:76:3d:76:ce:
c1:28:c3:a7:55:95:7e:cf:ad:ab:d7:4e:31:72:91:3c:dd:54:
f7:54:11:d9:b5:3f:ce:e6:1c:04:a1:d4:8b:e7:25:bf:20:88:
82:4e:09:97:61:40:fe:9e:37:6b:5d:02:12:17:a1:05:be:d5:
67:7c:98:90:79:3f:f8:8a:76:a1:8b:6b:e6:ad:89:48:aa:cb:
b9:e5:63:93:ee:6a:64:6d:16:5d:3c:25:b5:43:15:10:87:ea:
37:76:da:7c:63:75:ce:9a:c7:21:4e:85:7a:aa:73:2a:8d:bf:
48:05:d7:3a:f7:ee:40:97:53:4e:88:da:e1:ff:e1:52:7f:7b:
36:6c:b6:a6:d0:95:ee:35:d1:96:e3:83:82:19:13:51:0b:6a:
96:6d:73:20:d3:7b:35:a5:57:cd:4a:d4:16:02:b7:ed:f2:11:
b5:d4:b1:c5:03:f0:ae:00:52:2d:2a:c0:b0:d2:cf:20:d8:35:
a4:1d:7b:a6
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICXq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjEzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MGNlMy02ZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtso+mJLr/kU0LyzHryjqQr3iWOpdE7Uvca8TWYMzqNLwiN9okPuRatxgCjh4
Q5snLuzJFoC0cpTXf8pLLj4s92G35Ice2VZgaWcfxWyxacBD0vd7zl+UXkfRwcfp
pnb5t7IGb5M2F5GukgkCvFUKlBxAPtrvixOQpMsqQfqdiIby5ZNDcpCzyPoJlksf
Qbg7vgGESaCxiUKsh2l+3B4Td8yoOQocCy6dKm+aybg4vMTiPX8B6EHUuDRSfL4+
8JY74WHhZu58/Rz8ZX5BqNQlH+q0BJDS8I0rm1RxWrEAz9adPai+f2PTXpP18LAu
1gFGBIRIiQ3w41TcwaZRzk+K6wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFKIlRDlx
YdMK6PIejfrkZeEQT0f6MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkUwOTIxNDA4
QTA2MTFFRkI2ODRCNDM5QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9FhAMA0GCSqGSIb3DQEBCwUAA4IBAQAB9QtzAoQBVOh03TVI
fJ90QzY56kW9kXgxRVukXQUoWDLFZfT+rUV+mz6C9oUhPdRDQ6o8z81ICEPCoPml
J9BdIJ/ut3Y9ds7BKMOnVZV+z62r104xcpE83VT3VBHZtT/O5hwEodSL5yW/IIiC
TgmXYUD+njdrXQISF6EFvtVnfJiQeT/4inahi2vmrYlIqsu55WOT7mpkbRZdPCW1
QxUQh+o3dtp8Y3XOmschToV6qnMqjb9IBdc69+5Al1NOiNrh/+FSf3s2bLam0JXu
NdGW44OCGRNRC2qWbXMg03s1pVfNStQWArft8hG11LHFA/CuAFItKsCw0s8g2DWk
HXum
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:48:58 2026 by rpki-client