
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/BB90B3249BE811F188B60C046311F970.roa
File: BB90B3249BE811F188B60C046311F970.roa (raw, json)
Hash identifier: adapqyoaMpriFk8shJ47WPubnDhRH3fPAQYXpJULaPE=
Subject key identifier: F4:00:20:7E:C5:FE:D8:F3:A8:A7:60:A1:CB:33:D5:2F:FA:AB:93:20
Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Certificate serial: 056C
Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/BB90B3249BE811F188B60C046311F970.roa
Signing time: Wed 19 Aug 2026 16:12:11 +0000
ROA not before: Wed 19 Aug 2026 16:12:11 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 152605
IP address blocks: 103.115.197.0/24 maxlen: 24
103.115.198.0/24 maxlen: 24
103.115.199.0/24 maxlen: 24
2402:edc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1388 (0x56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Validity
Not Before: Aug 19 16:12:11 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a85d5db-61dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:02:38:c9:34:90:6b:2c:c4:a5:4d:dc:53:
1b:63:7d:a2:c7:c5:e5:42:2b:65:7c:59:6f:9c:67:
99:d7:a1:0c:ca:8b:3d:37:89:6c:98:46:66:4b:ad:
2d:54:35:b0:f7:a6:58:f8:ef:27:0a:11:d7:41:2f:
97:bd:b0:00:ec:b9:ca:1f:10:77:eb:af:d9:e4:b6:
d2:83:27:30:ca:07:53:f9:ca:b8:07:3b:90:90:23:
12:59:8a:22:78:0e:e2:d2:d2:15:bc:c6:1f:63:4e:
da:94:59:6e:3c:e7:1e:40:90:d1:f5:b9:f3:f0:aa:
f0:ad:6b:f1:ae:b5:84:18:d5:a6:12:7b:1c:d8:dd:
0f:af:0b:5a:b0:d6:4d:42:a5:5e:d6:a7:bb:03:4a:
4c:4a:4f:a8:31:57:6f:b3:67:34:e3:a8:f0:6b:62:
63:c7:bf:53:5a:af:a9:59:53:e3:43:6d:a9:01:96:
2a:59:ca:08:8c:3b:ea:9a:e1:bf:89:c7:20:66:e7:
8b:a0:b7:6a:cb:81:9e:80:ff:10:b1:61:ab:3f:24:
44:f2:dd:23:0a:1b:67:9a:ab:7c:d0:4a:77:11:b5:
f9:1a:3a:ab:0f:2d:89:e1:87:c2:05:a5:e2:c6:f4:
5b:ab:f7:00:c1:af:b1:4c:c3:f0:e4:14:e5:64:29:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:00:20:7E:C5:FE:D8:F3:A8:A7:60:A1:CB:33:D5:2F:FA:AB:93:20
X509v3 Authority Key Identifier:
keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/BB90B3249BE811F188B60C046311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.197.0-103.115.199.255
IPv6:
2402:edc0::/32
Signature Algorithm: sha256WithRSAEncryption
01:a3:52:eb:ec:73:e9:16:87:14:04:27:e2:77:02:e0:62:40:
bb:d0:33:76:ad:a6:14:14:3a:75:dd:04:51:6a:09:28:42:42:
2d:42:e3:2f:1f:de:12:4e:40:bd:a2:c6:66:52:ff:4c:c6:20:
53:25:cf:10:e8:b8:51:a8:cb:eb:40:d4:bb:e6:7d:5c:4e:0e:
0d:86:44:9d:a2:5f:75:25:51:77:44:62:a8:60:49:dc:87:d1:
3e:02:d3:ff:d4:65:df:d4:3e:1f:22:ea:d4:48:3c:fa:c8:5a:
73:64:30:70:70:fa:d2:7b:bc:67:d3:85:99:7e:bd:a2:c8:bd:
bb:6c:3a:10:a9:b8:40:b0:54:9c:05:b4:f2:9b:69:c6:44:b2:
46:3f:9f:e2:f4:c2:7b:bc:5f:37:6f:6d:11:d2:29:49:bd:d4:
e6:a8:21:a3:23:ba:06:62:7b:32:07:e5:a3:a0:11:30:15:84:
22:fc:c5:06:42:bb:2b:59:f1:51:07:d1:40:eb:33:8e:cb:2f:
f6:f4:54:be:46:f9:33:86:c6:e5:31:a6:82:b6:c3:65:c2:4e:
af:fd:da:b7:d2:a2:76:cc:aa:e2:77:5e:28:b7:64:92:e3:ae:
1f:c3:2a:b9:51:2d:2d:4a:9e:0d:74:d4:d3:bd:f7:f3:35:a8:
06:d8:20:0d
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U4MjExMTAvBgNVBAUTKDA2MzdFNUIzOEM2MURGODNFQkIzMzAyMDkzQkI1NzZD
QjMxRDlCMTAwHhcNMjYwODE5MTYxMjExWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg1ZDVkYi02MWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAptcCOMk0kGssxKVN3FMbY32ix8XlQitlfFlvnGeZ16EMyos9N4lsmEZmS60t
VDWw96ZY+O8nChHXQS+XvbAA7LnKHxB366/Z5LbSgycwygdT+cq4BzuQkCMSWYoi
eA7i0tIVvMYfY07alFluPOceQJDR9bnz8KrwrWvxrrWEGNWmEnsc2N0PrwtasNZN
QqVe1qe7A0pMSk+oMVdvs2c046jwa2Jjx79TWq+pWVPjQ22pAZYqWcoIjDvqmuG/
iccgZueLoLdqy4GegP8QsWGrPyRE8t0jChtnmqt80Ep3EbX5GjqrDy2J4YfCBaXi
xvRbq/cAwa+xTMPw5BTlZCnitQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFPQAIH7F
/tjzqKdgocsz1S/6q5MgMB8GA1UdIwQYMBaAFAY35bOMYd+D67MwIJO7V2yzHZsQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw
NTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0UHJzekFnazd0WGJMTWRt
eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JqZmxzNHhoMzRQcnN6QWdrN3RYYkxNZG14QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0U4MjEvODExRkI1OTA2MDUxMTFFODhDRDhFQzQ3QzRGOUFFMDIvQkI5MEIzMjQ5
QkU4MTFGMTg4QjYwQzA0NjMxMUY5NzAucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU
BAIAATAOMAwDBABnc8UDBANnc8AwDQQCAAIwBwMFACQC7cAwDQYJKoZIhvcNAQEL
BQADggEBAAGjUuvsc+kWhxQEJ+J3AuBiQLvQM3atphQUOnXdBFFqCShCQi1C4y8f
3hJOQL2ixmZS/0zGIFMlzxDouFGoy+tA1LvmfVxODg2GRJ2iX3UlUXdEYqhgSdyH
0T4C0//UZd/UPh8i6tRIPPrIWnNkMHBw+tJ7vGfThZl+vaLIvbtsOhCpuECwVJwF
tPKbacZEskY/n+L0wnu8XzdvbRHSKUm91OaoIaMjugZiezIH5aOgETAVhCL8xQZC
uytZ8VEH0UDrM47LL/b0VL5G+TOGxuUxpoK2w2XCTq/92rfSonbMquJ3Xii3ZJLj
rh/DKrlRLS1Kng101NO99/M1qAbYIA0=
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:52:34 2026 by rpki-client