
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/BC1F804CCCF611F182B45AE5FA65CEF9.roa
File: BC1F804CCCF611F182B45AE5FA65CEF9.roa (raw, json)
Hash identifier: O+siAOAZQB/bYuNnUYz6iKtDKruZ4svnYH9aiihw9gE=
Subject key identifier: BE:AA:BE:9C:4D:B8:FF:20:E8:90:4A:44:89:96:53:B0:DA:64:89:81
Certificate issuer: /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Certificate serial: 0631
Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/BC1F804CCCF611F182B45AE5FA65CEF9.roa
Signing time: Wed 21 Oct 2026 02:25:52 +0000
ROA not before: Wed 21 Oct 2026 02:25:51 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135598
IP address blocks: 103.167.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 22:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE352, serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Validity
Not Before: Oct 21 02:25:51 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6ad822af-f426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:a1:32:79:7d:73:5f:a0:93:5c:89:69:6c:
30:e8:b0:d6:c2:d1:99:a5:3d:64:44:c5:00:d3:4d:
24:4d:44:e3:1e:a0:96:c4:1c:5e:0c:82:4f:05:09:
b9:51:8f:f0:6b:1d:ca:3e:1f:e3:1b:c7:88:d5:6a:
e9:34:82:1d:e6:05:72:e6:41:08:51:9c:fb:10:e8:
2a:c7:44:7d:2a:c7:82:e5:a2:8a:cf:ba:20:6a:08:
03:1b:3a:78:e9:2a:58:38:ea:f9:ad:e1:a1:19:f5:
b0:00:38:80:1d:ac:df:99:60:21:14:d9:00:7f:25:
72:ef:80:62:49:91:c7:51:e6:07:0c:52:cd:4e:56:
3d:ae:0f:bf:30:c0:99:e7:18:9b:6d:8c:5e:42:bb:
c2:9c:8e:9f:47:10:9e:34:2a:51:81:67:37:ae:fa:
39:6f:22:59:e9:4d:8b:98:41:88:81:f3:60:24:56:
ed:75:8b:40:0b:10:9e:23:6b:de:fa:1a:e8:fb:af:
cf:f0:62:9e:d1:f5:19:bc:bd:c5:e7:c3:5b:2c:68:
71:0b:c1:37:ff:28:fe:81:2b:fb:c1:5d:c9:c4:e5:
24:07:2b:e8:87:05:6e:c5:f6:06:9f:ce:10:35:f9:
80:44:d7:7a:43:74:3c:5c:72:b1:08:b3:de:c8:63:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AA:BE:9C:4D:B8:FF:20:E8:90:4A:44:89:96:53:B0:DA:64:89:81
X509v3 Authority Key Identifier:
keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/BC1F804CCCF611F182B45AE5FA65CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.150.0/23
Signature Algorithm: sha256WithRSAEncryption
89:c9:3c:ce:a5:36:af:a0:4b:80:13:aa:3e:2a:e0:e6:ab:33:
31:a1:c0:71:0f:c8:9f:74:90:6e:28:d9:7e:7c:a9:e1:83:f3:
e8:56:ba:ba:49:32:a1:4d:ca:38:9b:95:e1:e3:07:19:58:8f:
f3:64:92:13:bf:bd:c5:15:e7:d0:00:bc:bb:a5:9f:d2:ee:a5:
14:82:2a:92:4d:16:86:81:98:ae:79:74:ee:f3:48:80:9b:e0:
85:e3:b1:39:05:61:7c:27:57:36:f3:21:75:60:53:60:be:3f:
70:8c:51:aa:b2:e5:7f:d3:96:4f:d0:b7:14:a5:e6:7e:8c:68:
85:ad:d8:fa:d4:3d:60:b4:b6:95:d9:3d:34:83:92:8a:be:53:
8f:c5:0b:53:69:ca:bb:24:80:f8:83:23:43:3b:9f:7e:70:ec:
fa:cf:8c:12:6e:6b:4b:44:2f:2a:d4:dc:be:b7:dc:33:e7:02:
2b:2f:12:17:b5:bf:98:e6:8d:d4:22:07:7e:7c:f6:65:1e:58:
57:05:4b:5e:4d:2b:1c:41:c5:a5:c1:76:30:bf:c7:e1:a2:ab:
03:ee:00:85:74:69:e6:2f:a2:96:a6:21:ed:e0:76:1e:32:cd:
79:7d:0f:75:26:9d:8d:a3:fe:d1:34:e5:96:46:60:b4:69:ef:
75:84:de:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:52 2026 by rpki-client