
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/BEC51400CAA011F080BFA487C4F9AE02.roa
File: BEC51400CAA011F080BFA487C4F9AE02.roa (raw, json)
Hash identifier: FD4V0DWod1Q3Tr13+NJIK1ULxDqkX6KBtcnJ6tLJOZU=
Subject key identifier: 45:7D:9E:23:86:DF:BB:68:08:5F:43:87:8D:1E:4B:09:8D:C5:02:3F
Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial: 025D
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/BEC51400CAA011F080BFA487C4F9AE02.roa
Signing time: Sat 31 Oct 2026 03:50:11 +0000
ROA not before: Sat 31 Oct 2026 03:50:11 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 151786
IP address blocks: 103.213.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 03:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Validity
Not Before: Oct 31 03:50:11 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ae56573-c43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:26:5c:76:0d:6f:e4:08:c7:55:a9:16:3b:
a1:0b:0b:84:39:8b:c7:65:fa:a8:3c:0f:5d:ed:f7:
5a:af:1c:e0:c3:77:d3:48:f3:02:79:6e:ef:14:88:
a3:8c:fd:67:cf:03:c0:8b:28:7c:4d:71:ed:b3:ce:
7d:06:bc:09:a8:da:be:76:3a:66:29:b6:09:c1:a2:
91:5a:64:b6:33:fc:21:60:e5:20:1f:83:a4:b2:54:
f8:70:82:52:4f:36:ce:39:8f:5f:79:ef:aa:e3:c4:
74:1e:5b:83:7b:f5:29:72:9d:59:e7:2c:3b:9d:4e:
63:85:15:72:ec:4f:cf:46:5c:d2:5d:1a:34:a7:9d:
fe:80:0e:20:41:7a:5f:01:05:4f:59:e4:9c:97:8b:
ed:28:4a:83:1c:17:3d:05:4a:99:c8:5b:1e:f5:de:
f0:f0:f2:0d:57:b3:f6:4c:5d:9b:da:02:ca:c1:03:
38:06:ac:a6:6e:73:3e:4a:59:be:d7:65:b2:e2:61:
f5:07:5b:1b:03:9b:83:30:a8:8b:06:bb:11:b2:8b:
58:a0:be:b1:bc:40:07:ea:1e:57:d4:a1:4b:20:fc:
26:55:7a:6d:d7:a9:54:d4:5a:02:83:f4:20:8a:d7:
19:87:23:f2:ea:15:ab:75:a3:35:b4:07:b9:f7:7b:
42:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7D:9E:23:86:DF:BB:68:08:5F:43:87:8D:1E:4B:09:8D:C5:02:3F
X509v3 Authority Key Identifier:
keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/BEC51400CAA011F080BFA487C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.213.221.0/24
Signature Algorithm: sha256WithRSAEncryption
48:32:b7:b0:d0:f7:a6:35:0d:2f:fe:17:50:35:97:df:46:95:
bf:f1:20:d4:21:c3:1a:30:43:d3:ff:b1:ee:98:f6:ed:86:1c:
11:9f:e5:aa:5f:81:33:1d:34:a3:3b:35:20:8d:ff:89:62:13:
80:88:c3:b6:cf:7b:a1:aa:60:b1:3c:2a:76:db:37:b8:a5:44:
b6:d6:e6:1f:f6:97:8e:7d:48:c2:7e:54:b2:3c:f0:47:19:e5:
5f:c1:e6:bd:9f:d3:5f:26:e9:b7:6d:d1:e9:e5:7d:dc:21:74:
09:d3:33:a5:9d:e6:47:fa:38:98:df:b5:bf:bd:64:ea:3c:5c:
8d:07:4e:30:4d:6e:4b:15:6b:36:ca:01:0e:65:98:40:dc:ae:
6e:3f:1a:10:67:34:29:e4:29:16:c2:e9:9a:d8:46:5f:20:3c:
48:be:43:27:77:00:cd:39:83:9a:d5:48:bc:d2:06:33:7e:e7:
6e:0d:71:fa:22:16:1d:88:e4:12:fe:45:14:ab:83:b5:86:3e:
93:4a:fe:71:9b:2c:f4:34:74:8d:35:ef:a3:99:35:c4:50:0a:
dc:72:37:55:32:48:e2:8d:45:77:9d:d2:69:e2:01:35:9c:83:
c3:4a:e6:37:40:56:9e:93:42:6d:7c:a8:36:9d:64:aa:ee:fa:
25:d6:28:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:21:55 2026 by rpki-client