
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/BEDA89FABC1411F180DDD3483C11F970.roa
File: BEDA89FABC1411F180DDD3483C11F970.roa (raw, json)
Hash identifier: eVuRTO7STTEgwRq3+fBY8S6wle3YPlh/UKWKAwUhgYk=
Subject key identifier: 0E:FB:4A:2D:9A:B0:79:8A:70:F5:B2:EC:1F:B4:D5:E3:26:7E:29:50
Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial: 0893
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/BEDA89FABC1411F180DDD3483C11F970.roa
Signing time: Wed 30 Sep 2026 21:41:16 +0000
ROA not before: Wed 30 Sep 2026 21:41:16 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 139088
IP address blocks: 103.12.196.0/24 maxlen: 24
103.12.197.0/24 maxlen: 24
103.12.198.0/24 maxlen: 24
103.12.199.0/24 maxlen: 24
103.73.100.0/24 maxlen: 24
103.73.101.0/24 maxlen: 24
103.73.102.0/24 maxlen: 24
103.73.103.0/24 maxlen: 24
103.125.176.0/24 maxlen: 24
103.125.177.0/24 maxlen: 24
103.125.178.0/24 maxlen: 24
103.125.179.0/24 maxlen: 24
103.150.208.0/24 maxlen: 24
103.150.209.0/24 maxlen: 24
103.151.236.0/24 maxlen: 24
103.151.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 21:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2195 (0x893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Validity
Not Before: Sep 30 21:41:16 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abd81fc-bf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:e4:f1:1e:2a:33:4c:3a:d5:fd:72:68:b9:
bd:57:d0:ad:ec:c3:7b:a2:6f:13:3c:7d:3a:8b:f3:
ad:d6:81:18:a4:ac:eb:e1:82:31:1e:9e:de:5d:f0:
33:87:75:a0:72:ee:e3:ed:8f:43:79:93:00:d2:a4:
a0:84:b1:64:58:a4:6c:6f:25:98:e9:3b:1c:59:8b:
6b:d0:7e:a9:75:dd:e7:ef:e4:26:19:f6:c7:c3:79:
d5:3a:22:51:20:38:b5:a5:2b:30:a0:fd:58:1c:c3:
ef:80:9f:af:2c:4b:03:b0:8a:ec:ff:ac:e5:53:26:
ec:7a:49:9b:f5:5b:5e:f0:e1:a2:a4:49:7a:36:17:
d2:22:d4:0d:27:1e:8a:2f:8a:14:d4:df:a8:28:10:
fe:8b:ee:57:c7:0f:a4:ae:bd:6f:6f:c0:d6:98:70:
e1:8b:59:d1:44:f5:1b:e8:9f:26:97:f3:5f:ab:2a:
a2:17:29:74:c2:b3:af:12:91:d9:2e:87:10:21:9f:
23:3f:fa:71:f4:ec:7f:8f:34:ae:60:d4:31:15:5f:
6c:83:a2:ac:1b:e5:3a:71:33:c7:10:15:92:d1:07:
6a:b2:cf:0d:d5:28:db:fc:5f:f5:38:ee:56:22:0b:
84:11:4d:6e:d4:5c:d3:db:d9:d9:1d:9b:c0:c0:ea:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FB:4A:2D:9A:B0:79:8A:70:F5:B2:EC:1F:B4:D5:E3:26:7E:29:50
X509v3 Authority Key Identifier:
keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/BEDA89FABC1411F180DDD3483C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.196.0/22
103.73.100.0/22
103.125.176.0/22
103.150.208.0/23
103.151.236.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:3b:76:78:af:2e:d7:a7:ca:9d:b8:19:a7:0d:d0:4a:c8:a0:
94:7e:06:24:e2:89:65:59:75:7c:e5:59:a0:ef:ae:11:4c:1b:
d2:35:0f:27:62:20:28:6c:2f:a2:2c:de:11:cb:05:cf:d0:8e:
0c:54:85:60:ec:81:6f:29:a5:02:33:24:18:f0:2b:83:5e:be:
59:1b:51:8f:35:7e:7f:19:80:db:dd:4b:5f:68:4e:fa:1e:b9:
d9:a6:b0:75:19:2c:66:16:4c:c0:e1:4d:f5:11:ca:2d:33:67:
1b:61:e1:13:13:26:26:83:80:a3:b1:07:6e:76:85:ec:10:ba:
9f:08:02:ef:c9:00:2e:30:f4:84:9b:f6:d1:73:3e:09:30:dd:
5a:66:7d:10:b0:84:bc:0e:a1:6f:b4:91:ad:56:2f:d8:09:13:
fb:66:2a:5d:e1:57:b5:f5:45:6b:37:c1:09:bf:72:df:bd:b0:
8a:77:21:92:6f:7c:21:5c:d0:ed:54:fa:cf:71:86:80:ec:ac:
10:63:d2:45:df:7e:b1:e8:91:da:ab:9f:55:46:a6:cc:11:2b:
2f:b5:1a:5c:70:fb:f0:21:8f:5a:25:5b:b7:01:34:34:cf:db:
32:d3:e0:06:8a:d1:7d:39:aa:50:36:c2:d8:4c:73:8b:4d:3d:
de:b5:f0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:52:25 2026 by rpki-client