
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/BC8ECC20F38811EF8AB19939C4F9AE02.roa
File: BC8ECC20F38811EF8AB19939C4F9AE02.roa (raw, json)
Hash identifier: xM+k8JQJmpD4Ax0g8sE6JNmMBLQtiYg67IPffewNqIg=
Subject key identifier: 35:FF:3E:53:1A:4A:9A:C3:19:A2:2D:55:81:AF:E8:BB:98:13:54:B0
Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial: 012D
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/BC8ECC20F38811EF8AB19939C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:18:28 +0000
ROA not before: Thu 19 Feb 2026 05:31:16 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 152176
IP address blocks: 160.187.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Validity
Not Before: Feb 19 05:31:16 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a466d4-1a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d2:08:d6:05:fd:4a:61:31:8a:de:f6:2a:21:
1f:e8:58:43:da:18:c5:5e:f4:aa:35:1d:58:35:a5:
50:a2:5b:5d:92:8c:22:79:6f:28:82:e5:2a:21:90:
88:dc:8d:33:17:ff:74:b3:65:56:93:41:18:9f:53:
cd:fc:e2:de:01:52:d2:8d:0c:41:fd:6e:3c:3c:1f:
a1:3a:86:91:ba:c5:9e:78:b9:c9:14:5f:bd:42:d1:
88:1b:08:54:2c:c9:54:34:ea:4a:9b:94:4f:80:27:
de:c4:ca:a8:de:86:2c:4a:dd:5c:4a:95:fb:49:77:
14:1c:33:d8:66:6a:e5:c4:da:11:36:5e:94:c2:05:
4d:78:12:02:98:5b:9b:1c:1f:4f:21:ba:24:6c:60:
79:cd:12:4d:b0:fb:fc:e4:80:c4:8e:64:bd:29:52:
6f:b1:b9:3c:36:0d:7c:3e:dd:2d:e9:21:df:08:f1:
7c:9b:b0:6c:fa:57:e4:52:20:59:b9:1a:97:d0:0e:
8d:46:f6:bb:28:bd:73:e1:ad:d9:7f:a5:ed:22:e3:
5c:f5:bd:fe:51:dc:0b:99:56:fe:2b:16:db:d8:f7:
37:39:d7:a5:96:8c:09:8e:76:14:05:28:38:63:af:
4f:4c:f6:79:fb:ad:1f:94:c6:06:c9:8f:39:c7:81:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:3E:53:1A:4A:9A:C3:19:A2:2D:55:81:AF:E8:BB:98:13:54:B0
X509v3 Authority Key Identifier:
keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/BC8ECC20F38811EF8AB19939C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.238.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:9a:72:5f:2d:e1:1d:1c:4e:33:98:91:7d:9f:fd:f1:90:99:
be:be:ce:bf:94:9d:75:d3:c2:28:f8:56:3e:15:8d:b2:66:a9:
41:48:ba:67:bf:96:63:d7:1a:11:f9:ca:3a:36:fc:72:e8:90:
0a:b4:04:f1:09:5a:d2:46:1b:2a:7e:4c:59:32:f1:05:27:7b:
0f:fb:9a:b8:75:99:2d:2f:39:b4:b5:8f:92:45:c9:08:60:fd:
aa:d3:1b:c9:28:8c:d7:fe:0a:38:80:f2:3c:3a:70:56:01:ee:
88:59:72:8f:44:24:d3:52:08:54:96:70:20:1c:9c:d8:0e:5a:
3a:9f:63:06:9c:1e:35:1f:53:c2:30:e3:57:af:15:65:ad:12:
34:42:9b:98:93:84:21:4a:bc:cc:df:25:3d:c7:7b:d7:1a:a8:
ad:e0:cd:df:fa:88:17:16:7b:5f:5e:72:46:02:96:af:fa:bd:
74:d5:92:4a:5d:08:e2:82:aa:fd:96:e3:f3:e8:43:72:68:b3:
e1:f8:20:d3:84:e6:82:09:4e:cb:00:13:58:8d:1b:c1:4f:2d:
bb:ed:c9:07:85:d0:b3:af:e2:fc:10:4e:a2:29:81:52:4d:f5:
43:51:31:c3:97:77:fb:b7:10:00:d8:df:19:09:06:61:72:05:
23:50:33:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:26 2026 by rpki-client