
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/BCBD866404D311E9A6452047C4F9AE02.roa
File: BCBD866404D311E9A6452047C4F9AE02.roa (raw, json)
Hash identifier: XQLEQf/Zo6tlKhlmp09rLfPZt6dAdO3an3pd+eG2hIA=
Subject key identifier: 93:40:50:F9:8F:01:E4:C9:85:34:01:EC:28:60:FF:9E:87:BD:8B:65
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 211F
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/BCBD866404D311E9A6452047C4F9AE02.roa
Signing time: Wed 30 Sep 2026 16:32:09 +0000
ROA not before: Wed 30 Sep 2026 16:32:09 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 58571
IP address blocks: 202.98.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8479 (0x211f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Sep 30 16:32:09 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd3988-aea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f0:70:59:e7:d3:dd:5b:d8:ff:70:dc:da:54:
0e:10:a5:52:70:89:8e:c2:08:ab:00:9b:5c:39:c1:
35:dc:66:cd:77:90:11:64:9d:d9:7a:cd:2f:1b:74:
3c:24:1d:20:e4:2f:ac:66:dd:51:55:1b:6d:a7:da:
d9:30:00:6c:d9:a5:34:94:c4:d9:a6:6e:8d:49:1a:
a4:9f:8f:6d:08:2d:d0:30:47:cd:6a:c0:90:1d:f0:
0a:74:c3:45:da:4c:23:2c:7b:96:1c:10:7f:61:bd:
56:8b:19:39:3a:ef:b0:ac:8b:f7:07:58:21:32:6f:
1e:20:36:c5:16:c5:34:78:3a:b2:b1:2e:07:91:81:
a7:97:96:35:4e:fe:c2:cb:7a:95:a2:49:d7:5c:dd:
0d:7d:26:79:b9:19:68:1b:05:96:a6:54:3b:81:3a:
05:5e:f2:88:fe:b6:08:09:9a:63:ac:2b:60:5a:df:
26:57:6a:c9:1e:f0:54:f2:c8:d8:51:c8:c8:94:05:
ca:9e:79:5e:a9:8d:1a:60:0c:5a:e3:15:ca:a2:5c:
ee:51:d5:69:48:f0:34:fe:5f:95:bf:e2:d6:a8:c6:
aa:f1:7d:c3:c6:fa:8b:05:58:0e:14:9e:d9:3b:1a:
82:79:80:ad:15:19:06:4a:4c:4f:ae:45:e8:f5:42:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:40:50:F9:8F:01:E4:C9:85:34:01:EC:28:60:FF:9E:87:BD:8B:65
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/BCBD866404D311E9A6452047C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.98.192.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d9:2f:0c:04:69:48:ba:15:0d:b9:cf:db:aa:44:00:55:e2:
89:6e:bf:56:3e:0b:5e:80:b1:ff:16:f6:41:5e:0b:d7:5e:f6:
ba:52:4c:23:ec:5a:b7:8b:ff:b7:45:6c:a8:de:bd:7e:01:50:
c7:4b:48:7c:42:3a:e7:82:b1:b5:79:e9:a5:3e:8a:fc:9c:b7:
5a:d2:4e:72:a7:c7:9f:23:2e:79:8f:6e:42:4f:02:a7:d8:36:
e1:74:9c:15:b8:d1:7d:ab:19:60:f3:6e:11:0e:49:f5:a4:45:
b2:14:b9:82:f0:a3:db:1e:08:88:ff:4d:c7:36:dc:e8:00:dc:
8c:df:59:f2:b4:42:ec:1a:66:bf:03:8b:94:7b:82:05:18:ab:
50:09:34:c4:c1:05:07:a6:51:34:61:97:b3:77:ac:5b:6b:7c:
bb:7c:cb:b0:74:1e:55:73:7d:fd:32:b2:39:85:db:c6:21:8d:
cb:c3:98:b6:ad:2b:51:f1:f9:ae:ef:69:d0:10:cf:66:f1:a0:
59:5c:42:c0:8d:13:29:e7:1f:67:c8:b6:3c:4b:92:e1:41:5d:
34:e0:04:b3:ee:91:d9:21:58:05:73:e0:06:dd:01:08:a6:34:
0c:0c:06:a7:6d:9e:86:69:a8:6f:ad:74:78:3f:c6:d0:11:64:
1b:31:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:28:12 2026 by rpki-client