
$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/BA8DB662085911F082EDFD31C4F9AE02.roa
File: BA8DB662085911F082EDFD31C4F9AE02.roa (raw, json)
Hash identifier: BZnCGqNeDcGNPBU9IwFS+o8notOoTo0D+3eD7BldpEQ=
Subject key identifier: 34:DF:E1:FE:15:0C:6E:25:58:5D:47:94:46:F4:89:EE:1D:AB:D4:5A
Certificate issuer: /CN=A91627F9/serialNumber=F375476F3235DC3D525171E2BE9211638E490847
Certificate serial: 0102
Authority key identifier: F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/BA8DB662085911F082EDFD31C4F9AE02.roa
Signing time: Fri 29 May 2026 06:37:54 +0000
ROA not before: Fri 29 May 2026 06:37:54 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 153720
IP address blocks: 203.0.120.0/24 maxlen: 24
2001:df5:1bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl
rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91627F9, serialNumber=F375476F3235DC3D525171E2BE9211638E490847
Validity
Not Before: May 29 06:37:54 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a193441-461c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:d2:32:b6:8a:40:92:60:f6:96:49:af:15:
61:6a:b3:02:0e:b7:05:aa:b8:8e:ac:85:aa:01:9b:
b8:d6:0c:24:77:84:13:ee:07:01:c6:8b:84:29:e1:
81:b4:77:ce:ff:09:0a:46:98:8b:26:44:50:d6:10:
02:4b:de:0f:41:55:b4:c8:a9:97:f7:b5:b2:b3:86:
89:62:fb:7d:46:60:36:40:95:25:8f:7b:7e:1f:f3:
bd:79:8a:1d:ee:d1:df:bf:2a:19:09:9e:7a:6d:6e:
c8:e7:c3:2c:60:ca:c2:a5:c3:b3:18:fa:6c:6f:57:
26:62:d4:1b:84:e7:92:50:48:4d:d8:b3:a1:08:33:
24:06:e1:ae:6b:2e:ae:a5:41:28:f4:b9:d9:31:ab:
0c:69:bf:71:b3:13:c3:7e:b6:21:93:59:99:19:78:
4c:a4:1b:eb:dc:a1:cd:aa:fe:91:89:dc:3e:99:f8:
fb:ab:83:c8:da:8a:cb:21:36:4b:c3:46:82:1b:aa:
d4:c8:33:36:1e:f3:18:78:b8:3b:29:57:ce:bb:e0:
56:c5:81:ea:96:6e:92:b3:01:cc:f5:e8:a0:6f:4f:
c4:ca:d6:31:05:98:4a:3b:20:d0:5e:69:f6:5e:af:
ae:18:9a:85:1b:6a:a7:85:8a:10:38:61:7a:96:34:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DF:E1:FE:15:0C:6E:25:58:5D:47:94:46:F4:89:EE:1D:AB:D4:5A
X509v3 Authority Key Identifier:
keyid:F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/BA8DB662085911F082EDFD31C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.0.120.0/24
IPv6:
2001:df5:1bc0::/48
Signature Algorithm: sha256WithRSAEncryption
ca:9f:44:03:15:10:03:1b:93:84:66:bb:45:f2:ad:96:a1:b6:
ec:73:72:41:55:82:8b:62:80:58:f2:0d:27:4b:54:98:dd:2c:
63:9c:1a:0d:ca:88:18:dd:99:37:52:b6:a3:74:7c:3e:17:d4:
e7:20:4d:d8:d8:0d:92:8a:fa:1c:cf:7c:6d:d7:51:41:46:57:
20:67:7a:17:f9:ae:16:c3:92:c4:f5:be:9e:67:18:9b:3a:8c:
89:c3:ba:ca:ae:3b:1a:d4:6c:e4:f1:8f:36:33:df:e6:2f:ca:
9d:d5:01:0a:d8:b4:27:a8:d3:48:c2:b7:1c:1b:57:49:4a:7c:
80:c4:61:f4:91:ff:54:1e:dd:7b:a7:28:eb:12:c9:24:5b:06:
b1:18:44:af:32:dc:75:fa:1d:a0:bc:b9:df:ff:69:5c:4d:9f:
31:8e:ba:34:76:9a:50:b3:44:c6:78:38:c9:ce:9c:48:b6:61:
36:d3:40:e9:ab:91:f0:d0:94:b7:85:bd:69:50:4d:49:d1:ab:
5d:25:91:96:e7:03:90:a8:76:0f:8a:ef:69:44:e5:89:69:4a:
41:52:eb:5f:4e:52:7a:ef:da:cc:f8:a4:dd:31:03:f8:54:89:
d6:37:02:b5:16:d8:2c:f8:d2:3d:14:af:e4:a2:b3:b6:ae:08:
2d:fc:97:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:43:43 2026 by rpki-client