
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BB250202BC2C11EA96657B4BC4F9AE02.roa
File: BB250202BC2C11EA96657B4BC4F9AE02.roa (raw, json)
Hash identifier: mH/kM+3rqWh6tWSsikS5qDnxx87ieq8dd2YHV0YNADM=
Subject key identifier: 33:8B:01:68:1F:65:D6:B4:8F:23:9F:C3:7B:5B:CD:AD:15:27:7A:82
Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial: 09B6
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BB250202BC2C11EA96657B4BC4F9AE02.roa
Signing time: Wed 02 Sep 2026 20:40:38 +0000
ROA not before: Wed 02 Sep 2026 20:40:38 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 9919
IP address blocks: 103.240.80.0/24 maxlen: 24
103.240.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2486 (0x9b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Validity
Not Before: Sep 2 20:40:38 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9889c6-7078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:7f:61:aa:77:55:b9:18:07:59:c5:84:f2:
b4:0a:dd:b0:8e:aa:74:ef:94:dc:db:44:c2:11:ae:
74:5d:7c:75:b2:a7:73:83:ed:8b:fe:79:7d:e2:c6:
95:75:6b:b7:5b:6e:74:b2:62:17:00:f4:33:0c:2f:
58:3c:59:6a:8c:b3:cb:3a:99:20:68:be:df:52:a5:
19:1d:81:7d:83:52:76:b7:8e:97:22:d0:13:f7:91:
9e:bc:b6:b5:93:3d:73:eb:81:ec:dd:3a:e1:f0:37:
98:e8:b9:d0:2e:7c:79:97:f4:68:fe:87:2a:fe:f3:
b5:e3:e9:41:46:dc:f6:fd:cf:cb:35:67:cc:73:6e:
6d:12:ec:15:a7:b5:b0:e1:ad:d5:be:51:2a:19:a4:
e6:eb:e4:5f:75:3f:75:2f:37:37:a6:5d:4e:6b:63:
ab:ca:d4:ab:0b:b7:72:18:a5:d5:29:d2:ab:a0:15:
97:2e:4d:c4:67:80:64:fa:a0:18:28:f2:7a:4a:7e:
2b:a6:71:ae:79:6b:33:e1:24:23:67:31:ab:89:98:
2a:fe:f7:a5:fb:5e:a6:47:4e:90:23:5a:20:f8:2b:
ca:a8:c6:93:98:77:cd:18:a1:b2:28:cb:d3:a4:ba:
e9:d5:ec:a5:16:eb:33:be:72:52:0e:f5:d1:b4:55:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8B:01:68:1F:65:D6:B4:8F:23:9F:C3:7B:5B:CD:AD:15:27:7A:82
X509v3 Authority Key Identifier:
keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BB250202BC2C11EA96657B4BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.240.80.0/24
103.240.82.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:9b:b1:d1:66:1b:f2:4f:64:ea:d3:71:77:53:a1:c1:6a:6c:
24:8b:3d:a8:3b:8f:a9:b7:0f:f9:a0:f9:42:88:0e:c5:60:65:
6f:80:3b:d1:cd:b5:d7:57:f8:d5:b2:5b:8f:e2:05:bc:71:e1:
20:ce:ab:e6:36:32:6f:e9:a3:90:4f:6b:20:cd:18:eb:9e:0e:
87:d2:60:7a:4c:4c:f4:54:5c:26:26:9d:b3:ff:1c:54:fb:ea:
eb:17:3c:59:f9:b0:26:e2:c0:86:c2:63:93:f4:39:81:97:79:
e2:b1:37:b9:75:d0:e8:73:4d:1d:3d:51:58:8a:e0:50:39:5f:
57:b7:b7:b7:1e:d3:e3:e1:0f:f8:df:86:73:2f:aa:f3:89:d3:
bc:87:2e:e5:a1:8d:c0:9a:8b:fb:93:ee:3d:0e:b3:6f:91:48:
71:d8:51:44:bb:52:5c:2e:96:d7:46:27:c8:80:2a:00:52:53:
21:2d:8c:59:f1:d9:c0:4d:54:44:c2:cd:63:53:72:07:e5:fb:
61:8a:09:08:12:52:99:49:76:de:f1:79:80:ea:4d:fe:73:2d:
a4:4d:07:8b:6e:64:0c:23:2b:5d:ce:96:d8:e8:ef:19:ec:cf:
39:ba:1b:a1:02:a2:47:64:1f:80:a3:14:14:4d:c1:ab:62:d4:
ae:5f:3d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:27:05 2026 by rpki-client