
$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/BE82B5AE31C911EFA31A8D3AC4F9AE02.roa
File: BE82B5AE31C911EFA31A8D3AC4F9AE02.roa (raw, json)
Hash identifier: TP1lZPycmwhzIV9eyCEIRMOWox0jw70KYaYid67Sq48=
Subject key identifier: 52:A4:16:70:DD:88:13:B7:20:EE:9D:95:B0:9D:C8:3E:1E:2A:90:8F
Certificate issuer: /CN=A91504D6/serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163
Certificate serial: 0148
Authority key identifier: EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/BE82B5AE31C911EFA31A8D3AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:05:18 +0000
ROA not before: Wed 05 Nov 2025 05:20:19 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 7575
IP address blocks: 131.181.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl
rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91504D6, serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163
Validity
Not Before: Nov 5 05:20:19 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a5a72e-b4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1c:97:06:8a:e0:4e:c9:f7:96:15:6c:a8:1a:
7d:04:9e:35:30:f1:84:4a:ab:7e:f7:5c:ec:8b:54:
d0:79:2a:83:d9:ae:28:fa:f1:f5:81:6a:ad:9a:8b:
03:4b:a4:35:d5:03:08:b2:17:e7:13:ba:64:f6:3c:
5a:93:e4:f7:ef:78:5a:ce:ec:2b:fa:98:03:8e:8d:
e8:1a:d1:40:0c:6f:48:2f:0c:67:e8:86:e0:b9:aa:
4f:d5:37:23:c8:c9:43:e6:d2:d1:1e:b5:43:d0:cc:
b8:5b:02:ff:7f:ce:5c:d5:ec:59:68:a9:7f:58:53:
8f:44:d9:df:9b:92:bd:0d:fa:ad:02:f6:9e:6e:3d:
be:04:63:6c:27:58:f9:e0:2b:38:62:38:c4:a4:79:
0c:1a:f0:97:bc:3a:d2:c5:61:21:a8:01:46:a0:17:
34:16:0f:f1:5d:6a:46:fe:cf:92:40:55:29:8d:ee:
6c:66:ff:6d:c9:43:e5:97:49:61:5f:71:cb:40:61:
3f:95:09:0c:7f:62:c5:82:a0:b0:18:98:cb:49:e8:
cd:db:b8:49:b4:ee:3d:5b:5a:18:d6:8b:dc:2a:76:
dc:5d:ec:37:76:d7:32:8e:ac:7f:77:82:9a:7a:bb:
44:41:6b:b1:30:02:18:74:44:d5:28:2f:d2:72:8e:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A4:16:70:DD:88:13:B7:20:EE:9D:95:B0:9D:C8:3E:1E:2A:90:8F
X509v3 Authority Key Identifier:
keyid:EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/BE82B5AE31C911EFA31A8D3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
131.181.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:15:97:dd:52:f5:68:4c:a3:ae:a5:a2:17:36:02:ad:b4:9d:
ef:be:9e:64:62:6c:5f:7d:8d:26:7a:0c:c9:43:41:db:26:e6:
50:99:af:74:a1:d2:1f:7b:26:99:05:e0:47:59:3e:de:7d:9f:
7b:00:4a:ea:52:5b:96:37:c8:75:a0:d7:d1:36:97:2f:6e:90:
6e:2f:18:59:eb:4a:d3:15:23:e3:62:25:4f:40:72:af:7a:f7:
f5:dd:92:b6:57:7f:8a:aa:c3:7b:20:80:c8:4c:f1:8d:61:81:
f7:5a:1b:9a:81:f8:77:a8:41:ca:04:de:3d:79:a6:32:71:af:
09:a5:8d:bd:53:ca:c3:59:07:63:5a:9b:91:2e:1d:d2:fc:04:
36:2a:98:3b:6e:03:51:fa:dd:d1:cd:24:7a:01:58:17:0d:cf:
d9:ef:6e:6d:39:9b:0f:46:0e:6a:38:15:7a:c2:cc:6c:e3:7b:
f7:85:39:93:8c:00:0e:53:a3:bb:44:37:d7:38:63:40:d3:a9:
97:19:a0:bc:7c:37:29:f0:66:04:29:41:18:41:e4:dc:61:59:
d8:12:34:7d:f4:82:2e:c4:12:e3:3f:c1:29:dc:23:95:c6:6b:
69:47:01:49:e6:12:dd:a7:ff:57:53:d2:85:b5:4e:15:28:73:
6a:b3:d5:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:38 2026 by rpki-client