
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BDAAB1AA28CF11F182DFCF19C1833773.roa
File: BDAAB1AA28CF11F182DFCF19C1833773.roa (raw, json)
Hash identifier: EUbPDZ1f47B08shYFzGSMEgH9wRN6fUKCzHVhyApXyQ=
Subject key identifier: C7:EF:B7:89:EE:58:73:79:AA:8E:BF:51:E9:81:C8:9D:67:E4:86:AE
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0A58
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BDAAB1AA28CF11F182DFCF19C1833773.roa
Signing time: Thu 26 Mar 2026 04:53:33 +0000
ROA not before: Thu 26 Mar 2026 04:53:33 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 59374
IP address blocks: 27.254.164.0/22 maxlen: 22
27.254.164.0/24 maxlen: 24
27.254.165.0/24 maxlen: 24
27.254.166.0/24 maxlen: 24
27.254.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 10:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2648 (0xa58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Validity
Not Before: Mar 26 04:53:33 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69c4bbcd-bcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3d:51:55:13:93:fd:76:ce:d4:0d:7a:23:2f:
0f:72:25:3b:9f:c8:07:5f:2b:b6:53:e1:1e:1c:17:
4e:ca:f4:81:ad:6e:19:c2:0b:b9:09:7e:72:6e:41:
e1:22:1b:d2:dd:3b:51:d6:79:d5:9c:6d:e5:4a:3f:
e0:86:6d:c9:35:6c:fc:c7:7b:b1:94:5f:b4:c2:f0:
97:35:64:e8:fd:3b:db:3a:16:77:0d:49:7b:a6:8b:
cc:23:4a:83:46:7e:3a:1b:8c:30:c4:2d:f7:15:19:
24:63:21:1a:bb:5a:f7:93:84:e2:a7:83:dc:4b:0b:
d4:a7:9b:cd:fc:69:32:e1:b9:01:75:52:ca:fd:c2:
a5:2d:d1:07:ec:8e:1a:8c:95:bb:5d:16:fb:8b:91:
ca:b7:b3:49:ba:0f:d6:71:36:a4:11:a7:f4:f0:32:
33:ff:04:ba:d2:e1:e3:21:1c:ac:86:39:5a:fd:91:
b5:ce:58:4c:e9:9f:40:92:49:eb:e5:8c:f6:13:64:
ef:a3:34:a7:83:24:bf:ab:49:0b:ab:99:21:01:a4:
27:34:1e:b4:81:77:be:37:e5:80:61:fe:5a:c3:5a:
e2:81:51:f2:96:10:ca:79:94:49:1f:f9:4f:d5:17:
66:e0:7c:dc:90:09:5e:2c:92:b1:75:05:02:47:9b:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EF:B7:89:EE:58:73:79:AA:8E:BF:51:E9:81:C8:9D:67:E4:86:AE
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BDAAB1AA28CF11F182DFCF19C1833773.roa
sbgp-ipAddrBlock: critical
IPv4:
27.254.164.0/22
Signature Algorithm: sha256WithRSAEncryption
55:c4:9c:5b:e9:23:63:47:bd:98:6d:bd:c4:55:c9:2d:20:1b:
04:cf:37:5c:f4:d4:71:6a:75:7d:5a:5f:de:3d:09:7a:8c:d7:
0a:b7:5b:2b:66:ef:f8:39:6f:3c:c2:b2:75:40:f9:cd:d2:dd:
36:29:f1:44:b4:b8:c5:b2:63:33:7b:12:e0:d9:73:fb:9b:21:
69:6f:ce:12:47:9c:87:76:e6:12:89:2e:da:f5:07:67:b2:7b:
c0:d6:7b:ed:a6:e8:30:0a:1c:eb:ac:76:2a:9c:40:9a:00:78:
61:85:c6:04:82:f4:77:f4:c5:07:9d:28:25:08:01:5c:7b:fa:
1d:46:77:72:6b:63:0a:ba:14:25:ff:54:c3:f5:48:43:70:35:
5c:d5:ed:3d:fa:44:b6:b2:8b:61:3f:c5:c6:f7:1e:4a:33:8b:
18:90:be:f6:89:21:2e:58:d2:45:86:d8:26:5d:ff:0a:7d:5f:
8b:4c:25:bf:a6:63:00:4b:b1:fb:bb:02:6d:83:66:0b:2b:f9:
2e:08:41:11:8d:d2:0d:96:16:ad:ce:b7:4c:b5:cb:63:c2:23:
cf:23:8b:6d:c0:3a:9d:eb:19:7d:1b:49:5a:20:c7:cc:ae:e3:
2e:3e:8b:c4:e1:01:73:8e:49:be:01:b3:c4:ef:87:1b:74:90:
d7:0b:15:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:08:38 2026 by rpki-client