
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/BCAE5314F75C11EB95BE8C87C4F9AE02.roa
File: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (raw, json)
Hash identifier: lki+CHXiL8jgebBM0y87J9S1Z38ejK6RVZBLe05r+fU=
Subject key identifier: F1:4B:34:66:74:9E:87:52:5A:ED:A0:4A:E7:EE:5D:7B:06:BF:89:38
Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial: 2809
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/BCAE5314F75C11EB95BE8C87C4F9AE02.roa
Signing time: Tue 28 Apr 2026 16:19:39 +0000
ROA not before: Tue 28 Apr 2026 16:19:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17557
IP address blocks: 124.109.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:39:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10249 (0x2809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Validity
Not Before: Apr 28 16:19:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f0de1b-51db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:75:f3:9b:64:26:3c:1e:57:6c:9d:d0:f3:
ae:fd:81:2b:ca:1b:ad:52:41:aa:e6:f2:ab:3e:dc:
b6:92:20:5e:dc:5c:b5:fc:08:8e:63:50:42:a3:18:
89:98:ce:c7:dc:d2:c1:f8:2d:8b:1b:64:fc:b5:9a:
a6:8a:db:4d:ef:3b:c3:12:ca:5f:78:88:b0:b8:14:
08:f5:cb:f6:7c:04:a7:0e:d4:82:cb:13:bc:ec:6d:
4b:d3:06:d3:1a:57:83:17:33:05:54:ff:5a:38:7a:
20:fa:05:74:0e:20:4c:c3:41:86:2b:b3:fe:7f:71:
4e:dc:cf:26:41:b7:75:75:8e:33:85:48:14:9d:0b:
d8:92:2d:3c:27:65:1c:4a:03:ea:8c:f8:ec:96:c8:
7d:6d:27:c5:49:b0:df:7f:67:0d:be:b7:df:26:c0:
9f:c8:ab:3f:a4:d5:d8:b9:22:44:b4:de:1c:ad:56:
db:d3:45:c9:0a:7a:9d:14:8a:37:73:5e:8a:85:e7:
71:5e:3a:b3:b4:7e:df:9a:66:e5:a1:73:64:0d:0c:
03:6a:36:82:17:70:50:fe:58:28:ac:4a:c6:29:a1:
42:d1:bd:f3:f4:62:ab:cb:55:49:d3:7c:11:d9:7e:
cb:66:dd:54:f6:b6:c6:a7:97:a5:d3:9b:9a:28:83:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4B:34:66:74:9E:87:52:5A:ED:A0:4A:E7:EE:5D:7B:06:BF:89:38
X509v3 Authority Key Identifier:
keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/BCAE5314F75C11EB95BE8C87C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
124.109.63.0/24
Signature Algorithm: sha256WithRSAEncryption
14:22:13:7f:dc:43:63:68:4b:4e:4a:50:8e:5c:58:08:83:67:
2d:ca:f0:6a:66:e7:8c:3d:fc:e0:0c:11:4a:06:ca:65:6f:3e:
a5:5f:40:09:88:9a:2c:18:b6:37:75:db:56:9b:03:db:75:e0:
6c:91:6e:f5:ae:94:2e:6a:a9:59:35:2f:a1:36:46:dd:5a:48:
ac:8e:d1:e1:54:bb:98:e5:0e:59:a7:8d:56:4c:ce:3d:83:da:
c3:4b:fe:54:e2:96:02:12:b2:f4:a5:5f:11:41:ed:75:5c:05:
d1:18:ae:93:39:af:ee:bc:a1:e8:65:c8:4b:a6:70:62:cd:bc:
e0:06:33:4c:27:cb:3f:d8:d8:76:71:1f:10:51:bd:d1:c6:fc:
52:6f:74:83:b4:ba:1c:a1:9b:ff:80:7c:e1:de:be:93:8e:3c:
51:d1:09:8a:4b:b4:31:6a:23:ea:6e:80:10:ac:36:cf:de:d0:
25:92:1e:6c:80:44:da:7c:1f:21:6e:57:02:35:89:b4:8c:55:
b7:4b:31:9a:7c:0c:bc:cd:2e:4e:2a:82:b4:34:0a:b0:eb:1e:
09:9f:51:23:7d:d5:54:35:7c:e4:01:1a:aa:1d:73:19:a5:7d:
c4:4d:d2:e2:96:c4:74:6e:74:38:e8:3c:bc:cc:4f:7d:5c:54:
14:b8:f1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:31 2026 by rpki-client