
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/BFA0334C01EA11F192D3B8D33A6F56BC.roa
File: BFA0334C01EA11F192D3B8D33A6F56BC.roa (raw, json)
Hash identifier: wKRrolzcfQ1xuhtCwjS6gZK6Z0RpDrCcw4eEeMzF3/g=
Subject key identifier: 01:E6:7F:00:58:1C:F4:4F:F6:20:91:4D:E1:CA:C9:C0:C7:15:EA:24
Certificate issuer: /CN=A91FAB3C/serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Certificate serial: CD
Authority key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/BFA0334C01EA11F192D3B8D33A6F56BC.roa
Signing time: Wed 22 Jul 2026 19:41:38 +0000
ROA not before: Wed 22 Jul 2026 19:41:38 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 154086
IP address blocks: 192.188.86.0/24 maxlen: 24
192.188.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl
rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Validity
Not Before: Jul 22 19:41:38 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a611cf1-44ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:b4:de:cf:25:b5:4b:52:b3:56:23:ee:73:
22:bc:25:51:86:4c:1f:d8:a0:f2:a8:96:f9:60:c4:
5b:2f:3a:57:eb:f7:14:63:6e:da:f6:b3:a4:3c:e8:
cd:0f:3b:42:a4:da:eb:fa:c3:b7:f3:2e:13:7c:00:
cb:4e:48:9e:3c:5f:e7:e9:24:d0:5b:dd:81:03:c0:
28:f2:46:a4:d4:fb:f5:b3:19:44:99:c5:2a:b1:08:
f3:ab:cc:d3:f4:3a:79:88:e9:a1:83:83:f7:0a:21:
c0:c9:01:e7:de:a0:4c:52:d0:44:04:8b:78:33:47:
d6:7f:45:6e:e3:d6:91:df:34:0b:06:3a:ac:b4:3c:
f8:26:ae:e7:e5:cd:7d:d6:6e:da:72:38:24:53:8b:
09:22:6b:d5:f8:46:9e:75:8d:82:b6:f5:f8:6f:38:
81:4d:04:8b:33:94:10:43:e6:73:7e:f9:89:11:59:
76:bd:95:67:11:f6:26:c0:43:97:87:94:aa:c9:9c:
58:86:70:40:fc:7b:ef:18:9b:8e:08:49:b3:02:da:
2f:e1:91:46:75:78:ba:89:be:66:71:19:dd:44:12:
db:c0:b1:65:02:96:d4:86:f3:80:73:d0:91:2f:ff:
88:bd:e2:f9:c7:c5:79:84:94:29:97:ef:71:15:a7:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:7F:00:58:1C:F4:4F:F6:20:91:4D:E1:CA:C9:C0:C7:15:EA:24
X509v3 Authority Key Identifier:
keyid:82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/BFA0334C01EA11F192D3B8D33A6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
192.188.86.0/23
Signature Algorithm: sha256WithRSAEncryption
78:cf:33:33:11:1c:c8:3f:ce:d1:2b:4e:54:cc:96:fb:4d:6b:
eb:db:e5:7d:56:2f:b8:09:cd:46:d8:40:4e:c2:c8:1a:c7:f9:
53:4f:ee:bb:1b:c5:1d:36:bf:02:57:24:ad:98:10:8c:f4:94:
66:02:9b:40:f4:7b:5b:58:c8:82:01:03:83:49:11:86:94:f8:
69:96:73:d5:8f:33:ad:c3:9c:c4:7e:fe:18:18:b7:e7:e9:07:
64:ce:e0:67:81:7e:ad:f4:28:2a:5f:a3:77:d0:c3:6a:ad:d2:
56:f6:c6:66:b0:50:cc:40:04:f0:e3:20:39:8c:9d:be:b7:5d:
a2:92:0a:3d:82:fc:57:e8:ce:ab:cc:bc:34:f9:a9:88:7b:a8:
14:6d:44:29:49:d8:73:ad:45:39:6a:ab:c2:db:c3:8f:ed:d9:
f7:08:0e:17:e6:aa:ff:7e:1b:6e:81:31:c2:72:b0:bc:28:91:
74:7c:dd:ec:bf:36:ee:4a:68:1c:2a:cd:2b:eb:37:b1:e2:45:
87:1f:1f:2b:d9:d8:23:68:ad:e9:68:bb:59:d0:fb:ea:33:64:
9f:2c:19:5d:db:35:b1:ab:dd:0e:60:0b:4b:98:1f:4c:39:d9:
3b:20:3d:31:14:e9:ed:e9:e0:d8:9b:a5:46:9d:0f:82:8a:75:
ae:89:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:26 2026 by rpki-client