
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/BC5887A44B6E11EFA3355126C4F9AE02.roa
File: BC5887A44B6E11EFA3355126C4F9AE02.roa (raw, json)
Hash identifier: 6BeZ+T2YK4xcHE67iF1LQq1UDXWYxRVhMGtHVY4KZKQ=
Subject key identifier: E6:2C:DA:56:7C:98:D4:5C:E9:A7:67:67:39:92:AF:E1:6B:C8:8D:1C
Certificate issuer: /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial: 05D8
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/BC5887A44B6E11EFA3355126C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:40:05 +0000
ROA not before: Sat 17 May 2025 00:14:37 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.116.4.0/24 maxlen: 24
103.116.5.0/24 maxlen: 24
103.116.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1496 (0x5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Validity
Not Before: May 17 00:14:37 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a433a5-afc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:f1:a3:6f:7a:3b:d2:61:51:79:d2:9a:99:
58:aa:16:c9:4c:10:99:8c:f8:39:04:3f:8d:06:95:
9c:99:c5:5f:5d:77:62:09:4b:06:6c:42:b0:f6:1a:
16:21:ab:4f:b7:6f:b3:fa:80:59:69:4a:5f:70:77:
10:bb:3f:23:3e:fd:cd:3f:63:62:6a:49:5c:f0:c4:
1b:9d:76:3d:13:13:4e:f9:a5:6a:06:2d:e4:c9:29:
e0:ce:4a:64:8f:fe:88:bc:e8:81:2a:30:4a:15:fd:
06:2b:f5:25:e6:69:fb:4c:ab:5b:c9:86:84:87:77:
ed:2d:c5:b7:86:f7:75:4c:5d:ce:15:8c:0a:4e:14:
87:ab:47:59:a3:ba:9f:8a:8a:e6:86:ea:c1:31:54:
f5:89:50:05:ef:60:20:ef:93:2c:27:fd:b3:80:fa:
2e:b9:24:ac:1f:c4:a1:0b:a0:78:4b:17:ca:96:f9:
3e:a2:fd:7a:bd:4a:a1:c3:f5:50:c6:88:34:eb:33:
5f:aa:a9:95:62:a7:7a:ff:71:fc:e5:47:cc:a7:44:
02:50:98:8c:ae:fd:e9:21:b9:e2:72:fb:08:15:71:
4c:48:c1:bf:21:c7:30:25:98:10:a6:83:9e:db:5e:
e8:80:f9:44:be:18:1b:d4:46:5a:39:ce:59:60:f0:
e9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2C:DA:56:7C:98:D4:5C:E9:A7:67:67:39:92:AF:E1:6B:C8:8D:1C
X509v3 Authority Key Identifier:
keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/BC5887A44B6E11EFA3355126C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.116.4.0-103.116.6.255
Signature Algorithm: sha256WithRSAEncryption
0b:98:8e:a5:f1:f7:14:d9:50:08:a0:22:13:17:fe:84:d5:ba:
c6:3a:f1:d1:2a:fe:41:e7:b6:67:d2:a0:c9:44:e2:45:cf:fd:
c4:a9:01:da:f3:b9:b1:4b:b7:a9:aa:91:9a:f0:cc:fa:64:32:
86:55:82:b9:69:ea:1e:d1:09:d4:73:8e:24:61:94:14:c5:21:
14:7b:69:c1:da:cd:6f:59:e1:b9:03:24:82:1b:e2:d2:4d:fc:
56:a3:d8:6d:f5:77:04:35:d8:2f:2b:ef:a3:eb:c8:7c:13:63:
50:da:75:33:ed:ac:0f:52:b9:de:8f:c9:a7:73:7e:14:56:fe:
c7:8a:26:ec:fa:fe:16:4d:34:95:c1:54:fd:aa:cb:99:d8:2b:
b6:23:4e:c4:09:1e:d4:82:24:b6:4c:76:5e:f8:53:d2:28:c3:
9b:81:28:cd:ac:41:9f:00:10:dd:f3:b0:84:c5:1e:6b:44:90:
42:8d:c4:d0:3b:dc:6c:16:b9:58:20:c5:16:f7:6c:41:36:25:
2e:80:d1:e7:2e:82:ad:44:69:ab:fe:4f:83:8f:05:73:10:25:
f3:da:ba:a5:17:d0:ed:d5:46:90:07:89:59:0e:45:9c:be:14:
05:72:76:39:a6:07:5d:da:d1:24:ed:f6:6a:7f:65:db:f8:c4:
e8:dd:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:58 2026 by rpki-client