
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/BC630BAE84FC11EE9887345FC4F9AE02.roa
File: BC630BAE84FC11EE9887345FC4F9AE02.roa (raw, json)
Hash identifier: S4KMnGrW45erDoNlmpjKyxDJPIiWWrvViUDoh+MBKjI=
Subject key identifier: 75:97:36:9C:8E:0D:7B:2D:87:9D:F7:FE:56:E2:92:29:FA:2D:A2:FF
Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Certificate serial: 01C2
Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/BC630BAE84FC11EE9887345FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:04:07 +0000
ROA not before: Fri 05 Dec 2025 02:11:56 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45671
IP address blocks: 103.67.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 02:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Validity
Not Before: Dec 5 02:11:56 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a43947-60a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d6:1a:5d:7e:24:b3:a8:41:45:87:d0:fb:85:
f6:ae:be:0d:1c:42:fb:be:45:aa:e4:ef:3d:01:88:
5e:22:2a:45:af:b2:3e:4c:ef:07:d4:8c:00:93:76:
02:1a:57:26:44:28:24:15:d0:80:95:8a:ff:5a:62:
df:8d:e0:5e:e3:04:45:97:a1:06:0e:eb:fb:de:86:
b0:4a:14:69:f2:ac:5f:1f:00:c9:d8:ff:2a:2b:e1:
43:34:b6:8e:b8:58:ea:a1:e6:68:81:f0:23:59:f6:
30:2a:62:94:92:6a:f6:fd:ba:ed:57:93:af:ff:9f:
59:13:50:ea:6d:c2:12:68:a1:21:fe:94:3f:8f:c2:
c6:ad:b6:05:d3:a5:3c:55:78:81:78:19:85:72:97:
86:2a:64:09:1a:f7:bc:94:16:d3:2b:7b:b3:ab:05:
4d:3d:f3:31:a9:00:83:52:d6:49:86:db:52:3f:46:
50:08:61:ee:c8:dc:d3:a8:83:ec:71:70:4b:31:4b:
d2:e7:ad:51:20:5d:e7:31:1c:9f:ec:ae:32:fb:33:
2b:9f:de:9e:78:03:70:cb:e3:f4:32:f5:b3:b5:bc:
b6:ad:52:38:47:88:a2:6e:f1:7a:31:14:d3:de:e6:
00:28:e8:04:33:19:24:ab:81:89:72:23:d7:e7:eb:
d6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:97:36:9C:8E:0D:7B:2D:87:9D:F7:FE:56:E2:92:29:FA:2D:A2:FF
X509v3 Authority Key Identifier:
keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/BC630BAE84FC11EE9887345FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.67.94.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:6c:d2:b3:17:39:dd:77:bc:12:fe:48:96:19:c9:1d:13:25:
2b:6b:ae:28:39:95:2c:af:e8:8e:c7:e5:85:10:a5:28:4d:0a:
8d:1d:63:b9:cf:2b:90:a2:e5:47:8f:78:53:b6:05:b2:0a:12:
a5:c4:0c:7e:ae:10:58:6e:9c:fc:26:69:73:72:84:6b:0c:bb:
8c:2d:ea:7e:12:af:16:12:ba:42:ee:9c:2b:37:2d:e7:fe:07:
1d:96:eb:ba:be:fc:80:d3:ef:ad:ef:16:00:c8:d4:85:be:c0:
4f:89:97:30:2a:42:4d:04:a2:08:22:76:74:a8:39:9f:22:dd:
25:ba:01:67:96:c9:f1:04:d2:bd:3a:6a:c9:c7:03:fc:3c:02:
bd:15:c9:a0:46:40:e0:e8:ac:8d:9f:0d:8b:94:b4:8d:8d:51:
61:8b:08:e8:da:d9:63:2f:92:1e:e8:b6:a1:27:0f:c1:f2:fe:
a5:47:fa:2f:a3:69:b8:eb:fd:d5:34:e7:78:6e:5a:82:a3:a3:
53:ae:f6:fc:3f:a5:1c:3d:9c:45:60:a3:e2:f8:1c:8d:64:fe:
d7:7e:72:d1:d7:bd:78:7a:0e:39:fa:08:2b:bf:04:87:31:60:
99:d6:20:31:16:2e:22:87:fa:1b:2d:f9:78:71:b2:7b:e3:ab:
be:c0:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:20 2026 by rpki-client