
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/BCB9064CF93C11F090318BAB3D6F56BC.roa
File: BCB9064CF93C11F090318BAB3D6F56BC.roa (raw, json)
Hash identifier: WKsRF3NIlxhyZb5Dv3mvGsaQ2EgbtfTHyBVv0+Z8Fmw=
Subject key identifier: BB:5C:49:22:5B:CD:08:2B:88:7E:7F:79:E7:56:65:55:43:A1:BF:B0
Certificate issuer: /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial: 0221
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/BCB9064CF93C11F090318BAB3D6F56BC.roa
Signing time: Sun 01 Mar 2026 13:01:44 +0000
ROA not before: Sat 24 Jan 2026 15:52:51 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 402044
IP address blocks: 103.99.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Validity
Not Before: Jan 24 15:52:51 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a438b8-d90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:72:13:0b:90:3e:a4:7d:bd:7c:da:df:ea:
61:f0:86:de:e7:6f:5a:79:65:a8:63:b5:1c:be:8b:
10:46:6f:4e:ca:e0:5e:44:eb:c3:50:ae:96:ef:fc:
8e:f7:39:b3:b8:42:a8:3a:ed:0a:d0:3b:63:2b:e4:
90:10:c6:16:ed:8b:14:b4:d5:e1:55:ca:a3:97:a3:
36:93:15:a7:fe:2c:a8:64:8e:df:cc:9c:90:19:ce:
61:b8:5c:48:35:ad:63:a4:94:db:42:36:bf:5e:a1:
55:0a:07:2f:a4:7d:34:21:97:30:1c:f9:b3:99:9a:
d5:66:2e:6f:12:fe:69:83:c7:a3:c0:f2:ea:6c:3c:
47:ef:48:b5:2a:12:87:07:eb:4a:4b:e3:21:1f:75:
69:7d:6a:fc:70:ce:26:e9:9b:88:3c:55:a0:1e:c5:
48:30:b6:53:78:d7:eb:30:f5:ea:f2:a4:41:9b:f2:
ec:1b:93:dd:a0:da:40:2b:fa:b6:b2:91:af:20:c7:
b7:8f:00:54:06:a2:1b:c0:10:dd:95:f1:94:7e:43:
f5:1c:bf:f2:8f:d0:05:23:e9:cf:68:cd:2f:59:16:
b0:d7:97:44:51:bd:91:88:a9:79:d0:ed:69:96:1c:
75:6a:4e:f5:94:69:0c:67:cf:6f:d2:a8:b1:54:a3:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5C:49:22:5B:CD:08:2B:88:7E:7F:79:E7:56:65:55:43:A1:BF:B0
X509v3 Authority Key Identifier:
keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/BCB9064CF93C11F090318BAB3D6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.53.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:cc:0c:e9:81:9a:7b:68:d6:d2:ae:90:e4:2e:4d:b6:13:51:
b0:ff:3d:c5:52:dd:6b:71:82:ec:cd:c6:17:2b:ec:9b:5d:e3:
71:ef:68:d0:3d:bc:e1:e8:85:ee:29:a2:fd:23:38:0c:da:56:
17:6b:6e:65:73:e1:7a:6b:94:8b:a0:76:25:7d:0e:0f:01:27:
79:bf:cc:f4:43:95:2f:a9:fd:79:bb:c5:11:8d:d8:e3:f7:36:
b4:c3:d4:11:f7:50:6b:e2:4f:4e:da:72:bc:97:2c:f5:04:09:
1d:4e:6a:c5:dd:4b:ff:e4:9f:6c:37:9a:b7:0c:fb:c1:44:a2:
3d:df:c5:56:3a:9c:b9:b6:80:62:26:45:5d:91:c7:9d:ac:a7:
74:08:b0:6a:0c:45:31:65:3d:d2:b8:c0:c9:47:66:44:7b:6f:
f8:ce:89:3e:55:6d:29:6b:63:d3:ad:77:e2:28:52:8d:48:7a:
84:96:60:0e:cb:86:a2:67:15:ec:d9:4a:25:a1:54:52:91:3c:
d2:ef:b9:87:16:61:f2:a0:e7:ef:9e:3c:df:2b:ee:6d:80:fa:
9c:7f:0f:42:29:7d:30:2e:fe:ca:46:1a:c9:86:71:49:6f:16:
cc:c6:77:d8:35:f3:50:30:58:1a:5e:d5:2c:ca:6b:6e:52:a6:
65:b6:03:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:28:39 2026 by rpki-client