
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF6664C04C1211F0949D8B25C4F9AE02.roa
File: BF6664C04C1211F0949D8B25C4F9AE02.roa (raw, json)
Hash identifier: z56uJ2U87y4BZLiIWCO/gwAwKZ33is7HYYG+KYeN+9U=
Subject key identifier: 1B:D8:31:50:76:A8:5D:1C:9D:75:C8:73:73:B5:A6:75:0C:58:F5:8B
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 2971
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF6664C04C1211F0949D8B25C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:36:26 +0000
ROA not before: Sat 10 Jan 2026 16:12:45 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 209181
IP address blocks: 103.254.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10609 (0x2971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Jan 10 16:12:45 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4872a-2c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:fd:73:30:03:ab:ec:df:02:7d:ef:26:35:
1b:90:f4:0d:1c:a4:88:e9:2a:63:5e:ba:0f:be:c1:
54:1a:8a:f8:c5:c5:71:a3:8f:d9:83:59:a0:e8:15:
6a:6b:34:0e:ed:7e:10:39:a8:ac:ea:c9:26:f0:08:
79:d2:33:a9:15:44:64:d0:e0:ce:0b:04:da:61:61:
d6:fc:b3:09:a2:1e:4b:b1:82:d4:7b:26:ac:01:d3:
dd:a8:16:b1:49:0f:fd:03:1e:b3:d7:c5:c1:a7:3b:
bf:ab:c2:7f:4b:87:8b:b6:0f:09:35:7b:ab:6f:ee:
3f:07:4e:4a:ad:73:e2:ab:5b:17:95:5f:26:a3:a0:
85:56:2f:06:58:af:c4:0a:97:45:4c:f8:dd:8c:55:
38:8a:5b:c5:d0:a2:09:3c:ff:45:9d:e7:70:bf:c0:
22:7c:58:93:c8:ed:4d:44:56:d3:62:31:b3:6e:db:
1f:43:51:65:e4:e6:ef:c3:a1:40:f2:de:51:44:82:
38:b8:66:9d:bb:dc:27:42:56:0d:07:5e:37:f0:14:
6d:9e:1c:4a:c1:51:70:ce:d8:34:5d:e8:51:4b:a5:
30:3d:4c:0a:51:fd:c5:ad:36:c9:ba:57:89:05:7a:
be:d8:48:54:ac:91:20:69:48:04:b0:cf:8f:7b:41:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D8:31:50:76:A8:5D:1C:9D:75:C8:73:73:B5:A6:75:0C:58:F5:8B
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF6664C04C1211F0949D8B25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.254.123.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0c:4f:7b:1c:8e:f0:84:5e:bb:34:0f:8d:16:f2:20:f3:3b:
94:9c:74:54:33:ab:1d:e2:81:f3:3c:e2:e4:5d:2d:6f:6c:77:
f9:4f:54:f6:b8:f8:dd:71:db:07:ef:2d:5a:2e:32:a2:8f:23:
52:30:04:41:8a:18:0a:c9:98:05:76:6d:2c:03:4e:c7:84:15:
75:0a:de:00:3d:2e:ca:17:2b:b5:1a:a9:8e:4c:8f:73:7a:e5:
1c:6b:22:4d:89:dd:f8:73:1d:98:d2:54:38:bb:0e:b6:a5:18:
46:69:5d:b6:8e:a2:a3:c2:6d:b0:dd:9e:5f:9a:e1:26:de:62:
72:c9:f1:c0:33:a2:16:10:de:57:b0:9b:01:fd:c8:1d:0b:70:
65:cf:44:9e:65:b6:b9:d0:be:0d:87:c0:a2:b7:8c:52:b4:29:
81:bf:99:a3:4a:9c:a1:af:9f:40:f6:85:ea:99:39:1f:f4:9f:
24:49:93:be:59:8d:52:ed:a7:03:28:5b:a6:2a:8c:83:c1:1a:
cb:b1:cf:8b:01:82:da:e0:8c:c0:d2:8f:c7:85:47:cb:bc:d1:
04:b3:98:d6:69:2e:75:25:c1:b5:7d:82:3c:77:a9:f5:40:77:
bb:d8:d4:69:ba:aa:a7:60:fe:f9:50:f7:7f:8f:98:2c:20:08:
99:3c:ad:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:50:09 2026 by rpki-client