
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/BE8369D6053711EA9A24E761C4F9AE02.roa
File: BE8369D6053711EA9A24E761C4F9AE02.roa (raw, json)
Hash identifier: r6NMGYsxb0CTrW+33MllDccXL4xyxMC+FjKpakw8GUs=
Subject key identifier: 38:40:10:BB:DD:A5:D9:E4:28:4B:EC:A7:D9:F2:57:4F:08:00:0E:D2
Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Certificate serial: 0D08
Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/BE8369D6053711EA9A24E761C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:58:38 +0000
ROA not before: Fri 23 Jan 2026 13:35:34 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 16276
IP address blocks: 103.5.12.0/22 maxlen: 22
2402:1f00::/32 maxlen: 32
2402:1f00:8000::/40 maxlen: 40
2402:1f00:8100::/40 maxlen: 40
2402:1f00:8200::/40 maxlen: 40
2402:1f00:8300::/40 maxlen: 40
2402:1f00:8400::/48 maxlen: 48
2402:1f00:8401::/48 maxlen: 48
2402:1f00:8402::/48 maxlen: 48
2402:1f00:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 17:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3336 (0xd08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Validity
Not Before: Jan 23 13:35:34 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4622d-4d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:9a:17:58:f7:c7:16:86:0d:fd:e1:04:3c:
b5:01:ef:e3:fc:c7:90:37:4c:a0:31:db:65:39:a8:
6d:c5:6e:e7:5c:20:92:d1:52:db:f7:99:4a:bb:fc:
93:b6:90:62:1f:55:17:09:e8:48:63:2a:46:94:4b:
a8:8e:2e:6d:6f:cb:31:0d:7b:b4:7c:68:ea:aa:43:
3d:f0:c6:ae:7d:86:4f:db:09:c8:9f:99:71:c4:b5:
bc:49:ba:68:fb:0f:64:b5:d9:e0:9e:26:81:f6:3b:
93:c9:98:f0:90:87:b0:3a:e8:07:68:86:75:46:97:
03:5d:5d:6c:4f:be:cc:6e:93:a9:66:e8:f7:8a:4d:
a3:c1:44:d8:c3:7b:d0:67:f4:04:f6:0e:6a:9d:ec:
4f:c5:a2:d2:8c:e1:b4:6f:51:fb:db:09:b8:9e:0b:
6c:46:20:7c:83:60:18:94:32:05:0f:24:c1:fd:a0:
4e:91:00:0a:ae:92:4c:cd:cc:d9:c8:cf:b3:3c:a8:
0f:f5:f7:1d:a7:6b:4a:47:0f:db:77:31:5d:24:5b:
88:83:de:d2:80:57:53:17:a5:c3:65:7a:43:f3:43:
92:7e:a2:84:f0:9d:c4:6a:35:1b:a4:76:4e:e3:85:
80:fc:d1:59:6d:c4:83:a8:24:85:ee:8f:a2:59:4e:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:40:10:BB:DD:A5:D9:E4:28:4B:EC:A7:D9:F2:57:4F:08:00:0E:D2
X509v3 Authority Key Identifier:
keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/BE8369D6053711EA9A24E761C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.5.12.0/22
IPv6:
2402:1f00::/32
Signature Algorithm: sha256WithRSAEncryption
a1:2e:0b:42:19:a8:54:a8:46:f9:61:75:a6:ba:7e:86:c8:e3:
0e:d2:8f:fe:3f:5e:b2:1e:bf:99:9c:71:12:60:32:66:62:44:
22:e1:85:a8:b7:e5:4d:89:17:b7:88:af:2c:7a:f9:e9:f7:11:
ed:b3:a3:9b:4d:4f:28:1f:1f:e6:59:cc:ee:6b:9a:0b:19:77:
cc:a1:82:02:3d:a1:42:fc:b7:9f:7a:7f:52:d9:d9:ea:e0:27:
5b:2e:fd:c1:bf:f7:4e:1c:ee:bf:30:2c:aa:40:c9:d1:e6:66:
8e:5c:3e:8a:67:44:2b:50:1b:c8:ee:1c:c0:fc:8f:89:3c:f0:
36:23:60:f7:ab:77:f5:49:86:b0:e8:86:63:46:d7:10:f3:55:
ee:47:39:16:42:96:25:a0:4f:cb:9a:e0:66:61:3a:ea:6e:68:
b0:f1:77:1f:d9:3e:fc:03:f6:ec:b6:be:19:99:72:eb:8d:9f:
05:15:ff:ac:cb:79:f1:17:79:e1:e0:bb:d5:66:bc:20:88:b4:
08:b8:d2:98:19:93:cb:67:c2:29:96:03:d1:f0:05:02:cf:c8:
cf:3f:86:be:f8:d3:0f:ac:aa:e3:58:9f:a6:e3:bc:3c:c7:4d:
4f:81:68:d0:81:f8:4a:e0:30:f6:0b:e7:0f:e8:d6:d7:e3:66:
ef:7d:07:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:16:08 2026 by rpki-client