
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/BE9D813ACD0411F1A0FC957FFE65CEF9.roa
File: BE9D813ACD0411F1A0FC957FFE65CEF9.roa (raw, json)
Hash identifier: wjcHfzg5XzjqF241R6UWVBuMExK0ROrujRi2QXi+/tQ=
Subject key identifier: 6A:42:0E:C2:9C:A8:31:E6:B5:31:A1:E8:12:22:AA:4F:BD:54:D1:41
Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial: 23E9
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/BE9D813ACD0411F1A0FC957FFE65CEF9.roa
Signing time: Mon 02 Nov 2026 16:26:36 +0000
ROA not before: Mon 02 Nov 2026 16:26:36 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 834
IP address blocks: 180.210.223.0/24 maxlen: 24
220.158.204.0/24 maxlen: 24
220.158.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9193 (0x23e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Validity
Not Before: Nov 2 16:26:36 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ae8b9bc-5119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:cc:10:1e:6a:45:a7:8c:62:dc:40:07:38:
cb:81:0e:57:34:73:c4:31:47:7a:8a:1b:54:f1:29:
3e:ba:c6:8e:57:5a:d7:f7:b3:d5:d2:93:b8:d8:dd:
d8:e6:84:a7:39:18:cd:67:c0:1c:37:3d:c5:3d:ff:
4c:c6:8c:5d:16:77:8a:04:ac:2a:12:29:c5:bb:24:
d2:00:c5:e8:3c:6b:ec:86:45:ab:16:5b:e8:79:d3:
07:00:36:da:7c:3c:b7:f3:81:29:bd:2b:83:43:10:
38:d1:3c:a6:ee:80:a0:c2:3e:2f:e5:28:bd:92:44:
a8:1c:49:86:36:67:6b:1f:bc:47:40:c4:03:d4:3c:
d9:26:7e:8f:fb:ab:f4:ef:6c:c5:4e:de:7b:51:4e:
23:57:35:82:45:0f:90:77:fd:0b:43:6b:88:cb:28:
72:f6:2a:4c:4a:41:e8:9f:76:41:8d:31:2c:54:83:
0c:77:ef:60:bd:2e:75:c0:48:e7:56:fc:eb:56:ab:
ff:06:e3:53:5f:ca:e1:19:4d:cf:19:18:c9:fa:94:
ff:29:7c:7d:ef:bc:93:d5:23:97:3b:b0:8e:be:24:
61:80:51:46:38:8c:86:33:e5:fb:6b:90:c6:04:8e:
2f:0c:67:da:45:14:77:f1:70:40:eb:e7:10:e4:c3:
3d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:0E:C2:9C:A8:31:E6:B5:31:A1:E8:12:22:AA:4F:BD:54:D1:41
X509v3 Authority Key Identifier:
keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/BE9D813ACD0411F1A0FC957FFE65CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
180.210.223.0/24
220.158.204.0/24
220.158.207.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f4:11:5b:cb:df:41:d2:0a:39:9e:fa:a3:32:3f:d2:44:4e:
30:2b:b3:f4:91:13:8b:a1:ea:2b:d5:68:17:6a:f2:3e:7d:aa:
7d:6c:6d:6a:59:af:53:bd:b1:f0:a9:a9:ce:37:9c:34:4d:68:
d3:27:a3:58:df:fc:ca:d5:b2:f3:b2:bb:f9:98:a2:01:d2:e7:
d2:87:4f:11:e3:5f:a5:c7:e5:e4:e2:5e:d4:fd:58:82:83:3a:
32:e8:1f:b2:ca:79:95:ca:5c:0b:cd:f9:c3:40:07:5a:c4:de:
91:14:ab:92:dc:f8:fc:dd:9f:18:03:85:2b:db:b5:9c:fb:ec:
45:2c:f8:b7:1f:bc:9f:b4:bf:a7:98:6e:42:92:91:bf:c8:f9:
da:0c:83:dc:d3:be:63:fd:71:9f:ed:42:1c:77:09:2a:02:53:
12:53:ba:d5:68:f9:4d:6e:9d:d3:ff:96:9b:f6:4b:24:08:24:
f3:ee:e5:cf:79:44:d8:ed:0c:3e:96:4b:80:65:ba:ba:c4:64:
d9:c5:7b:14:65:bf:20:cb:67:b3:83:53:64:8d:4f:77:8e:4a:
de:c4:5b:16:18:36:90:ca:01:d8:c2:f2:c8:d5:1e:9f:93:a7:
40:f6:b7:30:c1:3c:d5:93:67:31:6f:12:9c:59:f4:39:13:30:
08:78:1c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:34:03 2026 by rpki-client