
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/BC5887A44B6E11EFA3355126C4F9AE02.roa
File: BC5887A44B6E11EFA3355126C4F9AE02.roa (raw, json)
Hash identifier: JJ5ZiLh38XYP4D8yimnjxevWv+FpQHjzlnERYLydtT4=
Subject key identifier: D9:6E:55:86:75:E0:E8:A1:87:93:D5:C7:DB:A3:6E:3F:CB:80:ED:0A
Certificate issuer: /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial: 060D
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/BC5887A44B6E11EFA3355126C4F9AE02.roa
Signing time: Sat 30 May 2026 23:28:10 +0000
ROA not before: Sat 30 May 2026 23:28:10 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 103.116.4.0/24 maxlen: 24
103.116.5.0/24 maxlen: 24
103.116.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1549 (0x60d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Validity
Not Before: May 30 23:28:10 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1b728a-4576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:23:81:2d:6d:6d:8d:46:cb:1d:ed:09:b2:c0:
e6:13:52:de:65:ec:17:47:0f:92:75:09:cd:f0:87:
5c:61:86:4e:d5:b5:b7:3b:1e:fc:b3:6f:96:1c:56:
8b:51:cd:87:8e:a3:d0:84:2a:5b:e3:13:fb:b9:27:
49:9f:5d:ea:d6:35:6c:62:1f:35:12:f5:bc:cc:f6:
b7:e1:0b:22:e3:22:0b:a0:4f:8f:99:20:4f:1b:23:
6e:63:ee:d3:ef:91:0a:c8:b8:b8:02:d0:f2:7f:0a:
6d:7b:04:ba:7d:aa:e9:52:2c:9c:5c:6a:7f:18:05:
e7:a3:5f:21:77:4a:b3:35:e8:c9:13:cf:76:73:a8:
41:54:2b:3c:ca:79:13:b9:9c:f3:aa:ca:de:60:5d:
85:10:43:60:e9:08:f4:61:a4:46:fb:f8:0f:ce:6b:
20:ef:94:c8:22:c8:f7:a6:6c:55:b9:98:27:8f:f2:
09:f6:c6:53:fe:4b:5c:a1:33:93:48:84:5c:4b:44:
6b:08:d2:0e:d9:d6:1e:6b:99:87:cf:97:65:e0:01:
c8:45:5e:34:b9:14:90:95:5a:23:03:d5:df:e9:95:
8d:30:cd:2d:7d:cc:e0:39:ac:d3:c1:99:a6:a6:42:
d3:c0:bc:a6:f7:dc:ab:12:0b:51:80:91:17:dc:93:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6E:55:86:75:E0:E8:A1:87:93:D5:C7:DB:A3:6E:3F:CB:80:ED:0A
X509v3 Authority Key Identifier:
keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/BC5887A44B6E11EFA3355126C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.116.4.0-103.116.6.255
Signature Algorithm: sha256WithRSAEncryption
22:cc:b9:98:a7:f8:78:e3:d1:73:c2:00:da:3f:18:09:a1:b6:
c2:52:d7:4d:58:b9:51:6d:0d:4b:58:df:6d:74:ec:8d:7e:28:
96:26:17:01:e5:29:68:d6:ea:0b:75:16:94:a4:56:d9:63:cc:
ed:7e:9e:af:da:0e:df:1d:ce:89:54:c4:33:4d:8b:eb:53:51:
e3:4d:26:61:b8:b8:63:72:83:d2:30:4e:1e:58:05:30:96:8b:
ed:ba:fd:af:13:ad:0c:31:6b:22:59:1e:f9:9e:81:f3:2d:9a:
0f:10:5b:2e:2f:fc:c9:00:bb:42:75:c8:06:37:23:d9:9c:a1:
57:65:d2:e3:ca:c9:a4:cf:f7:93:70:a1:33:d5:2f:a3:ee:24:
bc:b6:98:0d:f7:e8:18:05:14:14:af:f6:e3:96:e2:9f:64:44:
12:95:a6:39:ac:e6:f2:68:b6:89:9a:e4:7b:47:08:a8:3c:91:
f6:af:34:aa:20:61:6d:e8:27:cd:69:fe:e7:b0:65:9b:2e:e8:
99:c9:42:49:b8:df:30:14:4d:66:9b:67:98:80:24:5b:cc:f4:
1b:f6:0f:70:8a:90:56:f6:cc:cf:5e:d2:16:49:0a:7f:1d:8a:
d9:45:f6:e7:54:a7:02:01:ef:b5:2d:02:1e:98:b7:ca:d8:58:
48:4d:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:18 2026 by rpki-client