
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/BDC0899A1FF511ECAE74F266C4F9AE02.roa
File: BDC0899A1FF511ECAE74F266C4F9AE02.roa (raw, json)
Hash identifier: QI3TTTsJntpzM6Jwiamem8N1Qiw1xr173Za9wXlnaQk=
Subject key identifier: E7:06:1A:11:1D:82:E1:61:D1:F9:C5:03:D2:D6:D1:68:FE:F4:CB:FF
Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Certificate serial: 0B1E
Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/BDC0899A1FF511ECAE74F266C4F9AE02.roa
Signing time: Sun 02 Aug 2026 19:39:25 +0000
ROA not before: Sun 02 Aug 2026 19:39:25 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 9268
IP address blocks: 43.247.64.0/22 maxlen: 22
103.26.172.0/22 maxlen: 24
2401:f80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2846 (0xb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Validity
Not Before: Aug 2 19:39:25 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6f9ced-eed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:0e:e8:70:00:9e:8b:17:4d:c1:1a:3a:94:
6a:db:ae:ac:ed:6a:27:d2:0d:23:c8:9a:dd:61:f4:
9f:ba:0b:d0:ce:0e:06:4c:82:66:43:9f:cf:45:0e:
48:20:08:d5:7f:eb:15:f9:dd:0d:7f:9a:f2:e2:33:
f7:c2:c5:50:d1:0a:29:27:e1:4b:af:72:38:5a:f8:
7f:72:2a:70:73:9e:c6:6f:8f:9b:9b:ab:a9:1a:bf:
61:03:bb:e2:7d:a6:00:d5:e1:97:7d:d8:1d:a8:84:
ee:57:a0:a6:0a:03:5c:b5:10:d7:ad:06:56:b1:76:
69:cb:2a:71:0d:a2:8b:53:55:4a:6c:c8:c2:59:9e:
0b:73:e8:85:dd:60:01:e2:1a:c4:63:7d:cf:b5:9e:
d0:85:4b:1e:1b:7b:b9:f9:c0:8a:49:19:08:8a:25:
f9:01:61:a3:e8:02:f2:ca:78:af:ee:aa:ac:fc:04:
a8:37:a4:ed:8a:65:5f:ea:3f:10:c3:b6:d2:68:35:
59:11:fa:31:99:a4:18:20:32:18:f4:5c:a6:dc:45:
4a:4d:58:57:e5:62:86:c6:dd:e0:73:c6:6a:16:53:
c7:49:03:94:69:09:9d:f0:2d:c7:df:9e:f5:4c:d0:
d4:b9:0c:b1:5d:f3:4c:c1:fc:13:6a:0b:80:c3:4c:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:06:1A:11:1D:82:E1:61:D1:F9:C5:03:D2:D6:D1:68:FE:F4:CB:FF
X509v3 Authority Key Identifier:
keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/BDC0899A1FF511ECAE74F266C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.247.64.0/22
103.26.172.0/22
IPv6:
2401:f80::/32
Signature Algorithm: sha256WithRSAEncryption
95:7b:cc:a5:13:90:17:bd:02:fd:cd:52:dd:ec:fd:cf:b4:94:
92:8c:22:e2:45:e0:ef:d7:21:36:75:bc:03:6b:4d:da:a5:08:
9b:11:59:ba:bd:bf:b8:36:9b:6b:5b:c1:b9:e2:e1:1e:4e:77:
67:9a:41:25:3d:e5:3a:c1:ce:13:c5:3a:12:85:b3:f1:3e:f0:
09:3c:ac:dd:0f:00:bc:fd:a0:c1:3a:8c:23:8a:0e:f2:09:8f:
85:0a:7e:de:00:f8:18:6a:d5:f3:4d:b9:0b:3b:a0:01:f8:2b:
51:f4:76:d1:8a:90:6d:86:3c:b8:50:0d:65:f0:0f:0b:ef:73:
08:6d:d9:58:ec:66:42:a6:d3:be:a1:50:3f:70:c0:73:61:04:
ae:0d:45:08:cc:35:87:7a:a4:c3:85:d6:15:8e:77:3d:be:38:
2a:a2:76:37:e4:a2:2d:bc:f2:de:61:8f:e1:a2:b0:01:0a:cf:
8a:e9:49:0a:97:56:89:b1:2e:ca:0f:e7:62:de:fa:26:a3:2b:
dc:fc:e8:f6:1c:54:93:c8:25:fe:52:fe:f4:da:82:5e:0f:60:
49:fb:e9:0c:34:8d:a2:88:07:16:53:2e:f4:52:77:9b:16:c0:
ce:26:9a:bd:29:1a:9f:1c:9d:fb:03:82:ef:17:74:0e:e1:21:
99:af:2e:19
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICCx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1
NTFBQjk3RDEwHhcNMjYwODAyMTkzOTI1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZmOWNlZC1lZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAswwO6HAAnosXTcEaOpRq266s7Won0g0jyJrdYfSfugvQzg4GTIJmQ5/PRQ5I
IAjVf+sV+d0Nf5ry4jP3wsVQ0QopJ+FLr3I4Wvh/cipwc57Gb4+bm6upGr9hA7vi
faYA1eGXfdgdqITuV6CmCgNctRDXrQZWsXZpyypxDaKLU1VKbMjCWZ4Lc+iF3WAB
4hrEY33PtZ7QhUseG3u5+cCKSRkIiiX5AWGj6ALyyniv7qqs/ASoN6TtimVf6j8Q
w7bSaDVZEfoxmaQYIDIY9Fym3EVKTVhX5WKGxt3gc8ZqFlPHSQOUaQmd8C3H3571
TNDUuQyxXfNMwfwTaguAw0wXYQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFOcGGhEd
guFh0fnFA9LW0Wj+9Mv/MB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF
MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js
OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjJBNkYvQ0FERkYyRkU2RTM2MTFFQUExMEVGRjc2QzRGOUFFMDIvQkRDMDg5OUEx
RkY1MTFFQ0FFNzRGMjY2QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCK/dAAwQCZxqsMA0EAgACMAcDBQAkAQ+AMA0GCSqGSIb3DQEBCwUA
A4IBAQCVe8ylE5AXvQL9zVLd7P3PtJSSjCLiReDv1yE2dbwDa03apQibEVm6vb+4
NptrW8G54uEeTndnmkElPeU6wc4TxToShbPxPvAJPKzdDwC8/aDBOowjig7yCY+F
Cn7eAPgYatXzTbkLO6AB+CtR9HbRipBthjy4UA1l8A8L73MIbdlY7GZCptO+oVA/
cMBzYQSuDUUIzDWHeqTDhdYVjnc9vjgqonY35KItvPLeYY/horABCs+K6UkKl1aJ
sS7KD+di3vomoyvc/Oj2HFSTyCX+Uv702oJeD2BJ++kMNI2iiAcWUy70UnebFsDO
Jpq9KRqfHJ37A4LvF3QO4SGZry4Z
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:06 2026 by rpki-client