
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/BD4E85B09E6311ECA6EC8071C4F9AE02.roa
File: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (raw, json)
Hash identifier: 7BVtLLotMLGpAMIjNPPakQoOlPGO61uSEIii5dgYdzo=
Subject key identifier: 9A:AF:41:6E:3A:ED:DD:1E:78:8F:94:EF:C3:A5:6B:27:1D:5C:B3:42
Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial: 05E2
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/BD4E85B09E6311ECA6EC8071C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:22:37 +0000
ROA not before: Fri 02 Jan 2026 23:19:19 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 25369
IP address blocks: 202.43.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1506 (0x5e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Validity
Not Before: Jan 2 23:19:19 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a483ed-88e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:56:bd:24:90:06:6d:d9:6e:3f:7c:d4:49:b4:
3d:31:38:f4:6a:a0:b0:68:6e:6e:f8:d9:54:12:50:
06:6b:cf:25:8f:5c:0b:1c:61:1e:65:42:9a:ee:ec:
ea:bc:45:7a:79:aa:c9:bf:ea:7d:c7:75:09:8f:1c:
ac:1b:2f:3c:1a:97:51:53:92:ca:41:fd:85:c8:97:
d8:09:9b:f0:b1:10:3c:39:46:b7:69:2c:29:49:96:
3f:fe:c7:30:0d:6f:86:b8:76:e0:d2:69:84:3d:21:
11:e6:ac:e9:c3:93:f0:c6:4d:07:c2:77:5d:0a:de:
aa:f4:8b:ca:ca:ea:2d:30:55:0e:c0:a4:0a:8a:1e:
76:57:7d:58:dd:84:d6:70:b0:69:ea:0e:19:15:da:
cb:e0:0a:e9:94:78:89:f2:9b:e4:65:ec:15:62:e6:
b7:2e:91:d4:5b:3d:4b:67:e7:92:e5:92:73:22:dd:
f7:77:1b:ee:a1:ed:c8:8a:cd:24:bd:33:2b:48:8a:
ac:d4:36:3e:29:e3:ec:1d:9d:98:76:0f:1a:c0:87:
3b:07:69:eb:74:9a:1a:2e:57:09:69:77:e3:68:20:
53:82:4f:a7:63:7a:78:2e:e8:6b:9f:b5:06:88:b8:
a6:bd:5c:f5:b0:04:60:af:4f:fb:be:f5:c6:77:67:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AF:41:6E:3A:ED:DD:1E:78:8F:94:EF:C3:A5:6B:27:1D:5C:B3:42
X509v3 Authority Key Identifier:
keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/BD4E85B09E6311ECA6EC8071C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.43.6.0/24
Signature Algorithm: sha256WithRSAEncryption
61:56:e2:9e:84:a6:76:35:f7:c0:00:ef:da:a5:f8:f0:0d:7a:
f4:65:82:4c:20:aa:7b:09:b7:17:5a:70:7e:9e:41:ce:93:55:
20:6a:0a:c4:e5:3c:fa:fd:19:92:2f:54:41:df:c2:3c:7e:0a:
39:f6:de:3c:57:6a:99:fe:b9:29:a5:16:cc:bc:ae:ef:62:89:
17:69:e7:36:99:46:64:53:b5:8d:39:79:c1:07:33:60:a1:07:
47:80:fb:1e:f9:1b:60:80:04:30:b0:bc:d7:12:24:43:ab:c4:
f0:8d:ff:98:4f:25:e8:2f:8c:70:e2:2c:71:bc:c1:ce:e2:e7:
6f:00:5a:66:c8:e1:db:ae:ab:40:30:6b:7a:67:11:35:48:76:
c4:4d:fc:f3:96:5a:ce:13:a9:8f:3f:0f:db:91:d1:a9:dd:c5:
b8:7a:ae:ca:d6:e1:d6:d0:1e:ca:e5:4b:6a:5b:cd:f7:cd:ed:
39:f9:d0:57:9f:f0:d2:c0:5e:26:77:7a:96:db:49:bd:d7:c1:
6d:d7:27:76:db:ec:b3:ce:2b:00:1d:98:d0:2c:cf:15:4f:a8:
b7:16:2d:fe:fc:4a:ee:44:7c:a8:72:d2:27:f3:10:28:da:56:
54:ec:dc:03:e7:df:10:d8:0a:e3:fd:40:aa:56:7a:46:ca:94:
db:ff:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:16:50 2026 by rpki-client