
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/BACC6D0A4F7411F0A8124536C4F9AE02.roa
File: BACC6D0A4F7411F0A8124536C4F9AE02.roa (raw, json)
Hash identifier: VpLGpucUcqgFegrPJ8j6XurYhNQBjCABSxVsDN9Xp/A=
Subject key identifier: EF:EB:17:C7:F0:4B:67:3D:9D:2B:E7:7C:99:B4:8D:09:DF:BB:10:FC
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 02FE
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/BACC6D0A4F7411F0A8124536C4F9AE02.roa
Signing time: Thu 05 Nov 2026 03:49:28 +0000
ROA not before: Thu 05 Nov 2026 03:49:28 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 26445
IP address blocks: 2402:be0:fff0::/46 maxlen: 48
2402:be0:fffc::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 02:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 766 (0x2fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Nov 5 03:49:28 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6aebfcc8-3b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:cf:6f:37:78:6d:bf:e6:b0:8f:01:94:61:
81:86:e7:6f:76:10:55:89:44:bc:27:61:78:24:ec:
08:c0:5d:0d:fa:69:25:ae:63:96:0a:ee:06:38:34:
56:2a:ad:e8:28:0e:54:a8:df:8e:3b:a3:a8:2f:78:
c4:d4:a4:e3:de:d5:a2:22:33:a6:0c:5b:2d:76:08:
77:d1:7b:bc:00:7b:c4:1f:69:a7:c8:12:36:05:8e:
73:23:e1:01:05:96:8b:91:31:42:ed:40:3e:85:c4:
b6:a6:d2:43:02:d2:60:64:40:63:7e:e9:f6:32:66:
47:ea:ad:b4:08:d4:f8:b2:36:cc:55:54:a5:90:6d:
5b:86:56:f0:31:b2:e3:fb:00:db:82:44:41:93:9d:
04:a2:10:d2:91:27:08:88:1d:3c:59:bd:2b:15:58:
02:5c:3c:a2:b2:dd:52:3e:8b:14:71:e4:3b:28:e7:
9e:f3:58:c8:1f:d1:90:ec:9b:8e:30:80:50:a3:7d:
d1:e1:9c:0a:e8:33:e2:a2:80:47:98:0f:80:e9:18:
24:6b:bc:74:07:04:2b:1e:77:3c:15:e5:5e:32:2e:
72:b2:18:04:a6:e9:37:3b:50:0c:86:9f:31:ac:79:
cf:fe:fa:b8:06:29:7b:a7:b3:4f:79:9d:bd:8a:1c:
07:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EB:17:C7:F0:4B:67:3D:9D:2B:E7:7C:99:B4:8D:09:DF:BB:10:FC
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/BACC6D0A4F7411F0A8124536C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:be0:fff0::/46
2402:be0:fffc::/46
Signature Algorithm: sha256WithRSAEncryption
6e:f7:86:60:37:8f:93:f3:00:d9:a2:29:d1:27:7e:38:d2:c8:
29:55:7b:f4:68:18:82:c0:f9:e9:63:05:d7:f2:5d:d4:c4:0f:
a0:79:95:12:9c:83:f8:34:3f:42:29:1d:de:e3:9a:50:5d:8c:
f8:07:83:52:f8:2f:23:c4:11:07:4f:5b:11:fa:50:42:53:5b:
94:44:74:02:15:2d:bf:ff:e9:8e:80:57:87:6f:38:0c:6c:1e:
8b:5e:cd:b7:04:c8:84:e8:09:fb:67:22:48:69:ea:09:14:12:
a0:02:e4:8d:81:4c:dc:2d:cf:10:ce:eb:d0:b3:bc:68:dc:be:
a4:0c:fa:bb:e0:7c:15:30:19:52:3a:f6:16:9f:4d:d3:b9:46:
2e:df:a4:6f:51:c1:37:a5:2f:47:d3:5d:7a:90:a1:20:b3:98:
97:e0:a6:5e:90:a9:2f:a5:c7:0a:b2:5f:a2:52:7b:58:2e:37:
14:90:4f:2a:51:73:5b:b4:34:4f:84:06:c9:bd:ab:a5:0d:4a:
7f:0e:7e:29:05:2c:0a:b2:9a:87:bd:df:b6:50:31:26:10:52:
1e:c0:ca:53:45:0f:af:bb:2f:c8:44:57:73:82:4c:a9:ca:60:
d9:ea:35:f2:91:5d:0f:7c:56:f2:7b:e3:37:89:62:f9:a7:77:
20:da:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:30:37 2026 by rpki-client