
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa
File: 8BEC7D66E54911F091014A6A756F56BC.roa (raw, json)
Hash identifier: 4C096ArVcesRWHBQTftG7NRJZ0QLoRJXsJlu3Awv0GU=
Subject key identifier: B4:1F:44:FA:95:82:BD:B2:41:C0:3F:43:5B:49:41:F1:EE:01:F9:BB
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0E0B
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa
Signing time: Wed 23 Sep 2026 12:20:14 +0000
ROA not before: Wed 23 Sep 2026 12:20:14 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 2497
IP address blocks: 43.246.129.0/24 maxlen: 24
43.249.241.0/24 maxlen: 24
45.115.35.0/24 maxlen: 24
45.124.63.0/24 maxlen: 24
103.7.209.0/24 maxlen: 24
103.7.210.0/24 maxlen: 24
103.26.164.0/24 maxlen: 24
103.26.165.0/24 maxlen: 24
103.26.166.0/24 maxlen: 24
103.26.167.0/24 maxlen: 24
103.244.211.0/24 maxlen: 24
160.20.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 12:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3595 (0xe0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Sep 23 12:20:14 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ab3c3fe-aa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3d:31:00:a1:f4:8d:05:eb:05:49:fe:ce:54:
77:4a:8b:b9:24:fa:b1:75:dc:cf:d8:96:89:bb:09:
38:eb:1b:4f:82:20:69:57:7c:8b:ce:b5:ab:f1:be:
34:8e:13:3f:42:08:c3:5f:b9:5d:fc:2e:cd:10:14:
54:87:53:f6:c4:a0:43:8e:f3:7b:5f:1c:43:cd:0b:
65:e6:b8:d4:8b:02:ec:92:3c:2f:1c:74:42:e3:8d:
88:4c:79:67:eb:bf:e5:93:ec:ae:37:11:c5:11:0e:
89:46:50:1d:e0:f5:af:8d:93:80:7d:42:0c:c0:e3:
c0:d9:e4:28:66:57:f2:5e:35:73:4f:1f:f9:97:d4:
38:59:81:09:98:0b:8b:43:f2:40:ca:08:e2:82:0d:
a7:17:19:ef:56:0f:20:ee:da:9b:66:67:ce:10:c6:
70:f7:bf:58:e3:37:60:ec:61:8f:e4:cc:12:1a:ad:
56:0c:60:21:46:c7:1b:16:fb:48:50:f8:79:30:76:
56:97:26:aa:54:bc:0a:0e:8e:20:1d:52:77:c7:54:
b2:cd:66:11:85:2d:8c:9f:a6:0e:82:2d:bc:18:7a:
3d:08:5c:6b:e6:6c:7a:13:ae:33:60:53:a9:95:1c:
8f:cb:d2:0a:5d:00:30:d3:61:4a:26:2a:c5:d7:12:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1F:44:FA:95:82:BD:B2:41:C0:3F:43:5B:49:41:F1:EE:01:F9:BB
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.246.129.0/24
43.249.241.0/24
45.115.35.0/24
45.124.63.0/24
103.7.209.0-103.7.210.255
103.26.164.0/22
103.244.211.0/24
160.20.45.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:0e:3f:89:f6:38:7c:59:67:e4:92:ee:fa:cd:c2:3c:0b:83:
b4:a2:56:b4:ec:b1:db:3f:40:b3:f7:87:a0:13:a3:ae:f7:aa:
e2:2f:00:cc:52:67:93:ad:65:6b:85:29:fe:bc:fa:2a:76:09:
5d:84:39:fc:0b:72:04:98:40:02:a3:52:5c:3d:e3:c2:7e:82:
3d:1e:dc:44:aa:bd:d6:02:08:bd:ce:80:a2:41:10:fb:e7:be:
ea:16:b3:a6:7e:e9:ea:93:46:76:fb:13:f4:8f:70:76:78:f0:
a0:c6:de:34:b4:71:4e:0e:b4:77:79:96:86:b8:1a:e3:93:28:
de:53:0f:ff:0e:31:86:02:29:a7:a5:d7:75:ac:e1:b4:63:4a:
cc:9d:c2:c0:e1:06:45:9e:75:a2:d5:5e:88:09:22:2c:41:86:
52:ce:3d:83:93:44:38:81:07:f1:a5:bc:8a:98:5c:f1:92:49:
d2:90:b6:24:90:3f:70:b6:6e:77:5c:ba:ae:e3:05:39:1a:42:
59:ec:73:f0:96:58:7d:0a:84:f4:a8:86:8b:7d:b1:3c:63:3c:
54:09:bd:23:50:72:4e:d9:83:23:3d:5c:7d:7f:a7:42:49:94:
e4:5c:9c:0d:92:76:c4:a3:eb:2f:77:6f:e7:88:58:e5:91:43:
38:0f:cf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:33:01 2026 by rpki-client