
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/BC56EB8EA21811ED94424B59C4F9AE02.roa
File: BC56EB8EA21811ED94424B59C4F9AE02.roa (raw, json)
Hash identifier: gO+hBMH3/s/oXTICu0ZTmfv/sTcPVxE7XLPk8Q7xNVY=
Subject key identifier: F8:AF:A7:47:13:3A:A0:1B:B9:37:9D:9B:87:69:E0:9F:CC:29:08:CA
Certificate issuer: /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
Certificate serial: 06F6
Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/BC56EB8EA21811ED94424B59C4F9AE02.roa
Signing time: Wed 22 Apr 2026 22:28:07 +0000
ROA not before: Wed 22 Apr 2026 22:28:07 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 150744
IP address blocks: 103.162.228.0/24 maxlen: 24
103.162.229.0/24 maxlen: 24
2001:df6:180:ca::/64 maxlen: 64
2001:df6:180:cb::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl
rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 22:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1782 (0x6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5EF2, serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
Validity
Not Before: Apr 22 22:28:07 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e94b77-fd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:c8:bd:39:0e:58:2d:73:5a:4b:6b:8f:f6:
5a:16:bd:dd:2c:9d:75:59:7d:66:1e:5e:5c:86:85:
80:57:7e:73:4e:ed:a1:56:21:c3:24:0f:68:7f:d0:
32:14:ad:9c:14:b8:2b:54:55:78:ec:6f:57:a6:b9:
0d:4b:b1:75:d4:7f:7e:51:1c:07:a4:78:a9:9d:60:
e7:f9:e6:e2:57:72:22:59:e7:88:aa:9b:52:bd:1f:
2c:df:da:67:e6:48:2f:30:0e:1e:4b:dd:ff:58:ca:
31:73:6d:44:dc:5e:32:c0:8e:19:31:f0:5c:b7:39:
82:64:52:5c:98:f2:09:fe:10:3a:d2:df:c9:e7:95:
55:82:2c:61:1e:c0:ef:d1:cc:77:90:5b:4e:f9:bc:
e6:c6:00:cc:db:97:37:30:45:47:4a:47:0c:58:f1:
b7:2f:9b:97:cd:1f:66:2c:95:ee:72:30:91:73:df:
75:f9:b2:81:a5:aa:37:47:b3:2c:0d:1f:8a:50:40:
fa:53:f4:e4:46:bf:2d:c8:9c:e8:99:ea:61:f7:8c:
86:54:2e:bb:bd:df:9d:a2:72:b8:1b:27:c4:39:5c:
55:9b:d9:6a:80:a2:ea:7f:3f:f6:cf:e9:ee:31:ed:
4c:f6:39:42:e9:84:70:90:ad:a0:78:db:73:23:87:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AF:A7:47:13:3A:A0:1B:B9:37:9D:9B:87:69:E0:9F:CC:29:08:CA
X509v3 Authority Key Identifier:
keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/BC56EB8EA21811ED94424B59C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.228.0/23
IPv6:
2001:df6:180:ca::/63
Signature Algorithm: sha256WithRSAEncryption
39:ae:30:28:43:31:d3:20:45:4e:94:39:66:62:d8:c8:e0:b9:
a2:89:30:da:ea:21:d9:42:f9:08:f2:e9:39:43:7a:05:fe:12:
93:48:2c:01:bd:e0:96:61:06:c7:ed:31:2b:3d:0b:0b:b4:f2:
94:41:fa:34:35:d9:3d:04:9f:23:d3:40:a6:d8:7c:59:99:e7:
85:0e:a2:6e:4a:44:94:6f:dc:bd:f2:4d:87:75:cc:0b:b9:48:
03:f9:a9:18:fb:01:ef:41:fa:b8:b3:7c:71:8c:63:27:f9:f6:
c9:bb:16:58:66:09:67:92:27:f3:8c:10:f5:e1:c6:ca:29:7a:
12:7e:de:49:5e:c6:28:22:fb:70:e3:3c:e1:56:6a:43:ce:60:
f8:7e:e2:dc:32:2b:7b:49:75:0c:a4:22:80:23:bb:22:fb:b6:
17:af:3b:68:aa:fb:50:af:ee:a0:92:2c:34:c3:e3:5d:cf:9f:
10:0e:91:01:a3:b1:0f:fb:11:39:9b:25:da:35:8c:c3:43:6c:
43:76:67:0a:7c:4f:ea:52:17:6d:76:73:f0:6e:c2:69:26:c8:
ab:fa:ce:fe:28:4b:5f:68:dc:a8:8f:b6:59:dc:e3:bc:84:bd:
02:11:99:90:48:14:18:34:c6:75:20:f6:88:f4:a5:41:2a:aa:
4f:96:57:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 11:38:21 2026 by rpki-client