
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/BCB00D18AA3411F199884E135211F970.roa
File: BCB00D18AA3411F199884E135211F970.roa (raw, json)
Hash identifier: ioGTh9GFvQ4kQHCP2Gi/w+boq7++x3V3C4G94SC7Uro=
Subject key identifier: 69:36:05:15:4A:78:D6:84:94:7D:F8:78:A6:1D:00:DC:99:66:2B:12
Certificate issuer: /CN=A91A6D85/serialNumber=8B17C26151F1141D69C15834B44E18EB1867FE3B
Certificate serial: 05
Authority key identifier: 8B:17:C2:61:51:F1:14:1D:69:C1:58:34:B4:4E:18:EB:18:67:FE:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/BCB00D18AA3411F199884E135211F970.roa
Signing time: Sun 06 Sep 2026 20:51:31 +0000
ROA not before: Sun 06 Sep 2026 20:51:31 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 152586
IP address blocks: 163.52.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl
rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:55:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6D85, serialNumber=8B17C26151F1141D69C15834B44E18EB1867FE3B
Validity
Not Before: Sep 6 20:51:31 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9dd252-ad53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:c5:0b:99:d0:df:39:7d:c2:e3:21:2b:2f:
f6:9d:6f:c4:0a:40:67:cd:a0:67:a1:84:89:85:f8:
7d:10:8f:46:46:dd:41:44:d2:7f:7f:3c:3b:38:50:
ca:58:fd:0e:9f:48:f2:a0:36:26:01:bf:72:6d:2d:
a8:e2:19:5b:ef:d0:eb:27:9e:38:7a:52:e0:f7:9f:
69:e9:ba:dc:15:80:01:64:eb:40:b8:63:54:16:5d:
a1:20:dc:55:62:54:dd:6b:c1:75:f7:56:3e:3d:e2:
a8:7b:8b:92:6a:2e:2c:d6:0a:cf:de:a5:4b:01:51:
b8:d5:ae:9f:57:3f:a4:da:14:f8:26:a7:bd:e4:3a:
8e:1c:e6:d4:53:4c:79:da:df:58:20:6a:94:79:1e:
fa:a6:8e:23:d6:22:39:85:1b:18:c4:b9:da:11:bb:
a5:ab:16:f2:d1:22:89:22:0d:ed:c9:0a:07:24:c0:
7d:9e:ee:6a:1e:8d:fc:d0:23:65:26:85:29:ae:5b:
e3:b9:45:6c:67:f7:32:fd:bc:46:b6:bc:ec:ec:e3:
70:80:da:6d:9f:a6:a4:8f:b3:c7:6c:ad:64:da:8a:
74:74:24:45:a4:40:87:f5:47:8b:e9:d2:5b:02:03:
9d:2d:27:cb:97:85:a6:70:54:55:dd:a3:02:02:04:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:36:05:15:4A:78:D6:84:94:7D:F8:78:A6:1D:00:DC:99:66:2B:12
X509v3 Authority Key Identifier:
keyid:8B:17:C2:61:51:F1:14:1D:69:C1:58:34:B4:4E:18:EB:18:67:FE:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/BCB00D18AA3411F199884E135211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.56.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:39:f9:ea:4d:e7:dc:f8:4c:d7:eb:77:14:36:6c:9d:79:65:
7e:95:06:f3:d3:04:5a:67:25:18:8b:b8:25:53:7d:94:af:3a:
b4:ba:bb:56:66:ab:db:97:dc:1b:9a:02:ae:a6:e8:35:19:ae:
ad:87:53:fc:21:14:27:c3:cb:35:35:54:43:14:c5:2f:5e:78:
29:2d:fe:72:a8:37:08:d7:87:3a:19:01:65:08:25:32:ef:a9:
db:60:f7:e8:49:80:11:85:a0:d7:b3:8c:c3:8b:28:5a:32:6a:
6d:e6:1d:ba:4c:38:8b:a3:5a:59:e2:a8:e8:cc:0a:54:cd:3d:
74:71:12:b0:eb:a0:78:98:bc:0c:6d:5d:54:82:49:02:3b:d1:
5a:ad:d9:11:c6:e7:df:37:41:91:28:44:ee:70:94:c3:c9:d7:
f4:81:d6:3a:62:c2:2e:73:8d:3c:9a:03:97:d3:1d:42:7f:77:
e7:d8:cf:b4:46:25:c9:2b:7b:f7:19:1c:5f:24:58:f0:9e:63:
68:1b:7e:91:67:0b:75:78:c9:2c:bf:61:58:eb:3a:71:3f:64:
8e:94:dc:19:e7:1a:20:24:3c:23:72:98:08:6d:21:2c:8d:fd:
3f:d8:e8:e8:c7:65:40:8c:a3:1d:d4:97:3a:8d:31:fc:5f:10:
83:21:26:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:49:05 2026 by rpki-client