
$ rpki-client -vvf rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/BFEE74284D9811F0930F6465C4F9AE02.roa
File: BFEE74284D9811F0930F6465C4F9AE02.roa (raw, json)
Hash identifier: 40BbeTseOH9cOE/V8iDSe91ozItNcwOvKSn/Wv2JFTU=
Subject key identifier: C7:F1:AD:DC:FB:7E:04:69:5C:C2:41:4B:BF:68:D3:00:FD:89:F4:7A
Certificate issuer: /CN=A91657FE/serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
Certificate serial: A5
Authority key identifier: C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/BFEE74284D9811F0930F6465C4F9AE02.roa
Signing time: Tue 21 Apr 2026 07:41:04 +0000
ROA not before: Tue 21 Apr 2026 07:41:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132584
IP address blocks: 203.56.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl
rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91657FE, serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
Validity
Not Before: Apr 21 07:41:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e72a0f-97fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:13:09:05:2f:6e:78:82:f6:d7:ae:c9:f9:
82:6d:3f:ba:83:f0:aa:29:19:f6:bf:9b:5a:78:5b:
ec:03:e3:ca:46:64:71:a6:2f:8c:10:c9:49:6b:7f:
29:5c:b5:ea:ee:c4:6c:3c:c2:62:5c:22:aa:89:64:
c8:55:56:b5:0a:a9:14:9b:09:f8:46:fd:3a:aa:5d:
ac:c8:1c:76:99:11:25:6a:37:9c:bc:e7:4b:e1:00:
2f:3e:d5:e3:ac:b0:c4:c3:c6:85:06:8e:5b:7f:22:
98:cb:73:f9:8e:df:89:2d:74:41:96:2d:44:ee:d8:
95:bd:2e:18:41:71:ec:6f:34:1f:21:62:3f:65:67:
d8:e7:5e:65:0a:9f:de:2b:db:75:29:a7:fc:9b:55:
20:01:8f:99:9b:55:b9:fe:f1:36:15:14:9f:9e:47:
b1:c8:de:7a:8c:d9:78:92:e1:76:ad:1b:90:fd:a0:
e7:26:26:a9:d8:44:3c:c2:5d:1f:66:31:3b:e7:8c:
73:0c:1a:86:dd:8a:1b:06:42:0f:2a:41:1f:ef:2a:
4d:12:aa:98:e3:f1:04:18:94:02:94:33:7f:e2:73:
b2:a5:0e:b5:1d:f6:45:f9:71:c6:31:bf:f7:a0:39:
ca:97:fd:09:2f:50:c0:af:08:91:b7:f2:ea:8d:8d:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F1:AD:DC:FB:7E:04:69:5C:C2:41:4B:BF:68:D3:00:FD:89:F4:7A
X509v3 Authority Key Identifier:
keyid:C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/BFEE74284D9811F0930F6465C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.56.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e1:3f:44:bc:62:d2:b4:63:5f:3b:8d:6d:22:e5:4b:cb:b1:
8c:ca:66:35:e2:31:35:37:d5:02:67:7a:09:04:09:e9:58:c4:
99:8e:36:4b:fd:21:8b:00:93:a9:3b:f1:3f:c5:dc:72:04:3a:
65:23:59:23:0b:67:9d:df:a3:83:90:78:43:53:a1:7f:c2:3d:
2a:7b:85:c4:9d:b6:d4:ed:de:af:a0:28:89:44:11:da:95:ef:
4f:c6:28:f9:7e:9d:b4:e6:a6:90:1c:7e:2d:59:79:1b:60:c8:
87:88:f6:19:f4:c5:ea:29:c8:83:99:74:e2:2b:4e:0f:b1:cf:
82:d3:7b:64:cf:54:6d:93:67:58:26:0d:7d:f2:38:00:a5:f8:
3b:6d:80:89:39:ac:11:0a:8e:fe:4e:20:99:b4:a4:6f:9f:ce:
d5:e1:3f:5e:29:c7:cd:71:29:23:66:c4:14:aa:8d:af:46:1b:
05:d8:9c:3a:83:7e:9c:d4:6a:90:4a:73:ec:06:3a:73:91:30:
eb:f2:e8:72:6d:76:9a:c5:90:07:57:30:cd:14:c8:5a:cf:04:
3e:b4:a1:1e:0f:19:2b:5c:30:24:2f:e1:6a:76:29:61:26:db:
87:1a:44:7c:65:1d:85:5b:c3:0e:01:4f:cc:42:41:ef:78:95:
89:46:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:23 2026 by rpki-client