
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/BE8369D6053711EA9A24E761C4F9AE02.roa
File: BE8369D6053711EA9A24E761C4F9AE02.roa (raw, json)
Hash identifier: KQXQWVKvFfDKiZ/mb3rYBqHTBLYMAEaG90VtAXLATr4=
Subject key identifier: 73:25:CE:38:C0:B7:79:39:56:54:8A:E5:16:31:31:94:77:07:39:2E
Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Certificate serial: 0D7C
Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/BE8369D6053711EA9A24E761C4F9AE02.roa
Signing time: Tue 06 Oct 2026 18:35:27 +0000
ROA not before: Tue 06 Oct 2026 18:35:27 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 16276
IP address blocks: 103.5.12.0/22 maxlen: 22
2402:1f00::/32 maxlen: 32
2402:1f00:8000::/40 maxlen: 40
2402:1f00:8100::/40 maxlen: 40
2402:1f00:8200::/40 maxlen: 40
2402:1f00:8300::/40 maxlen: 40
2402:1f00:8400::/48 maxlen: 48
2402:1f00:8401::/48 maxlen: 48
2402:1f00:8402::/48 maxlen: 48
2402:1f00:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 18:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3452 (0xd7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Validity
Not Before: Oct 6 18:35:27 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac53f6f-5fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:3f:6c:4c:64:ce:01:f9:2c:6d:27:d4:7a:
41:9e:63:e4:4a:76:c0:b2:d7:e9:d6:09:48:b3:f0:
5c:a8:0b:05:da:71:c7:82:7a:39:55:3a:18:f7:a1:
40:8f:e1:1a:4f:13:16:a0:46:c6:2d:c1:4f:3b:d4:
3c:cd:f7:51:b2:8f:15:3d:31:92:06:84:eb:de:76:
9d:2a:d6:b8:04:ae:28:82:29:40:55:3a:74:18:43:
a4:7c:8d:31:5f:74:7e:93:06:0e:50:f5:72:71:5d:
c5:0f:43:13:7d:e4:ca:dd:83:7e:54:ba:f2:89:bc:
85:9d:49:0f:30:f5:1f:5e:63:7a:f1:49:d0:c9:0f:
ba:de:e7:85:09:b3:33:5c:14:8a:3e:08:9c:d3:53:
58:62:9a:c0:b9:97:eb:ba:4b:7b:74:35:87:72:4f:
7f:5e:9b:60:1e:0f:d1:b2:ac:6a:cc:fb:bb:3a:6d:
30:ec:d2:9e:89:4f:84:b9:42:0b:35:3e:f1:63:0e:
59:98:a6:51:3a:f7:74:52:43:b7:08:00:4a:4d:12:
54:04:c8:d9:2b:9e:c1:9f:8a:9a:e3:a9:cb:51:2a:
d2:84:08:87:d1:ae:d0:d8:fc:e2:a0:a5:59:d2:52:
93:89:37:d3:39:23:4d:c5:0d:90:f9:23:1b:04:4c:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:25:CE:38:C0:B7:79:39:56:54:8A:E5:16:31:31:94:77:07:39:2E
X509v3 Authority Key Identifier:
keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/BE8369D6053711EA9A24E761C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.5.12.0/22
IPv6:
2402:1f00::/32
Signature Algorithm: sha256WithRSAEncryption
6e:3a:64:71:56:33:c5:c2:f3:f6:79:29:7b:f0:c9:50:56:a6:
1f:20:37:60:a0:b2:88:96:f8:c4:0a:fc:50:79:8f:8d:9f:b3:
5d:b9:53:e6:0f:95:e8:ed:8c:c0:09:67:52:dd:bd:9e:45:ef:
06:46:ab:93:6a:83:03:80:97:23:f5:a4:8c:89:11:01:75:94:
95:42:63:c4:3d:0b:6f:50:3f:39:9d:57:89:ef:ac:5e:a7:d3:
d8:39:f1:a8:f4:d3:6b:c1:9f:b9:50:ee:33:1c:ef:a3:33:51:
fb:65:73:53:7b:bf:b8:cc:28:fb:dc:81:42:19:02:02:47:e4:
e0:a7:ca:75:c7:b1:48:d6:a9:f6:ce:e3:4c:b7:1b:6e:a6:b1:
db:a3:8d:5c:2a:61:1a:df:70:5a:92:be:0a:f7:56:a9:9c:12:
94:40:ac:65:17:2d:0d:d8:cb:1d:55:9e:63:8d:9a:cb:fd:db:
a3:19:ed:85:d0:6a:33:49:ae:9b:ed:2e:03:b8:5e:9a:03:1b:
72:08:bc:4c:b6:4b:9d:b0:98:e3:d3:4b:45:f0:9a:95:47:73:
a4:83:5a:02:cd:2a:7f:24:4a:f9:fa:c3:45:40:cd:92:bc:53:
69:db:5e:ea:a1:52:bd:6f:f1:7c:68:ba:37:60:f5:91:23:cd:
f8:19:a0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:21:31 2026 by rpki-client