
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/BF8E316480F311F1948786A865A30FBC.roa
File: BF8E316480F311F1948786A865A30FBC.roa (raw, json)
Hash identifier: PeNghzeUXrf6ti+HRsaZOotNYnd+fY4xMOkVpf/Gtss=
Subject key identifier: 54:CC:6D:8B:5B:E1:7F:27:F0:46:7B:8B:35:CB:00:68:FA:CB:F6:61
Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800
Certificate serial: 01F2
Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/BF8E316480F311F1948786A865A30FBC.roa
Signing time: Thu 16 Jul 2026 08:53:34 +0000
ROA not before: Thu 16 Jul 2026 08:53:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133199
IP address blocks: 103.149.182.0/24 maxlen: 24
103.149.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl
rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800
Validity
Not Before: Jul 16 08:53:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a589c0e-f947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:66:8d:98:89:d9:13:5f:f6:d1:5a:c9:61:
45:75:a4:5a:03:ed:53:c4:47:8a:cf:20:82:7c:e3:
26:03:2e:d8:78:9b:c0:ab:06:0a:47:cb:21:67:cc:
6b:88:01:87:52:17:4b:28:94:25:1a:a8:61:d5:9e:
32:5f:21:2c:81:25:03:32:b3:f2:1c:38:46:0b:bc:
a6:07:01:fa:18:25:fc:9b:19:3a:e7:5b:c7:e2:01:
52:3e:1b:ca:2e:d5:69:fc:e6:a7:39:cb:25:7b:57:
f7:c0:2a:1d:e3:90:6e:d6:36:64:2a:61:ac:9c:3c:
ab:cd:a6:f6:e1:cd:c9:32:de:e6:69:ca:ac:24:f8:
16:19:1e:b4:18:cb:01:79:fc:54:07:11:74:2b:1e:
d7:29:af:fd:f5:df:fb:06:80:76:dd:d9:11:9b:97:
44:db:af:89:ef:f7:74:d5:0f:27:2f:36:bc:1a:50:
30:cb:24:a6:3a:ed:42:f7:d2:86:96:2e:e7:91:c4:
ba:59:88:72:7a:68:86:9e:da:ea:3b:88:10:95:15:
71:2a:b5:ba:a6:36:37:e4:6f:19:9e:a3:80:53:c6:
d1:6a:d8:8f:57:13:85:37:a4:fc:d0:6f:4d:92:4c:
7b:4e:20:42:14:1a:42:ea:e2:26:d8:99:ab:32:a0:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CC:6D:8B:5B:E1:7F:27:F0:46:7B:8B:35:CB:00:68:FA:CB:F6:61
X509v3 Authority Key Identifier:
keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/BF8E316480F311F1948786A865A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.182.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:86:23:ab:f8:7e:b5:54:dd:39:4b:22:47:ce:db:01:e2:98:
f2:4c:c2:11:f8:21:d1:7d:d1:35:ef:3b:9c:74:0a:6b:da:db:
f7:16:c0:96:f5:0f:a2:4b:f9:af:3b:35:53:91:ad:db:08:03:
3c:d5:8d:3a:a8:d6:3a:5c:4d:cd:c3:bd:91:62:42:53:2e:b6:
08:09:c3:f3:92:f6:08:2f:4d:2b:39:cd:b8:3b:05:e8:75:6a:
86:c0:13:8d:82:e1:c4:db:b9:7e:05:15:31:ba:78:a2:51:f5:
08:8c:42:26:79:fe:7f:ba:24:b7:5a:8a:82:44:2a:12:05:70:
ee:f9:aa:d9:38:fb:8b:c2:1a:91:47:2d:4f:26:ec:d0:34:cc:
0f:0d:ab:20:36:a1:e5:ea:aa:79:68:a8:0d:a8:6b:74:ad:fd:
7c:0a:c0:da:4c:ff:24:2a:f7:2a:df:82:be:fb:7a:58:85:e7:
4d:c2:36:21:09:2a:7e:90:ff:3d:bc:5d:ca:b2:e7:b7:6c:99:
9f:e3:48:c7:69:2f:45:5b:96:0f:09:47:7c:7e:74:e3:90:b8:
9f:06:29:31:c7:0d:16:26:7c:be:3a:6b:56:e5:8c:c9:2f:76:
92:85:51:4c:f5:64:a2:95:0f:52:1b:1c:d9:a1:23:5a:c2:33:
31:34:c1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:18 2026 by rpki-client