
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa
File: 8BEC7D66E54911F091014A6A756F56BC.roa (raw, json)
Hash identifier: 878wvvs2ffGw42AHHlt9+tDoLI76/5o2MpRxbhf7Lcw=
Subject key identifier: 33:43:AD:B4:82:1A:6E:C5:F8:5A:53:16:CE:AE:3E:D9:FA:89:0E:7D
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0D1C
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa
Signing time: Sun 01 Mar 2026 19:06:58 +0000
ROA not before: Tue 30 Dec 2025 06:34:09 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 2497
IP address blocks: 103.26.166.0/24 maxlen: 24
103.26.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:54:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3356 (0xd1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Dec 30 06:34:09 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a48e52-3ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:96:f2:9f:af:ff:45:68:bb:aa:6b:d1:59:
82:26:7d:3e:51:02:4d:2d:6a:4b:52:20:f3:dc:30:
e3:59:43:38:98:77:ad:10:5d:98:ba:08:b5:c5:86:
26:62:df:1a:aa:af:b5:14:4f:04:88:f4:6e:1f:66:
de:27:a7:7a:02:d8:03:e9:6d:11:fb:08:9a:6e:86:
89:2f:60:c6:f8:f1:f6:90:c3:a6:40:a8:c9:e1:82:
0b:68:fb:64:32:07:6f:4f:1b:73:bf:cb:6e:2a:d2:
62:2a:4d:49:6d:bc:85:a6:df:e9:35:53:2d:4b:e1:
bf:26:22:9a:39:66:65:c9:42:d9:19:6e:a7:22:5e:
de:7e:2e:81:d2:b2:be:a6:89:5f:99:a9:12:7b:84:
b1:7a:9c:18:10:f3:b4:34:e0:8d:45:10:b6:5d:50:
78:aa:47:77:66:4e:4d:f9:4c:6f:79:7d:09:a5:df:
de:65:20:48:da:f9:88:91:e8:01:c9:b3:61:e4:4d:
a9:49:33:d4:79:f5:55:bd:d1:9b:d7:8d:44:db:ed:
31:6d:1b:37:ec:e5:ea:a4:f2:e5:0a:49:3d:2c:50:
ab:66:0a:89:cd:ba:24:db:51:15:16:59:c9:06:2e:
1a:b7:5a:52:68:f0:d6:77:ea:66:eb:4f:73:19:2c:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:43:AD:B4:82:1A:6E:C5:F8:5A:53:16:CE:AE:3E:D9:FA:89:0E:7D
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.26.166.0/23
Signature Algorithm: sha256WithRSAEncryption
35:df:af:07:09:aa:fa:f2:a9:de:17:ec:48:f3:18:ab:7b:39:
d5:e9:90:a8:e7:eb:7f:b7:72:00:c8:95:82:27:90:74:a5:a1:
05:a6:c2:96:5f:36:85:bf:bd:37:cc:a5:45:74:a7:f8:a4:52:
1e:ef:5a:cf:17:80:6d:8b:9a:87:36:24:70:10:c9:98:49:2f:
31:f7:10:e6:17:5a:f8:4d:fa:0b:31:e4:6e:d7:35:de:07:2f:
b4:ad:27:bd:90:8b:96:4d:d2:2b:ab:9d:67:53:a4:ab:ab:18:
c7:8d:24:33:40:2b:33:7a:ce:8a:5c:99:1b:29:e1:18:9f:b5:
45:86:98:fc:1e:fc:c5:63:3d:c2:68:7d:ea:86:0f:13:8c:0a:
b9:ec:72:95:05:70:64:6c:11:c6:11:c7:b3:d5:6c:80:e5:33:
b2:88:39:b4:fe:f2:51:62:09:6f:71:24:50:fe:87:c6:93:c1:
29:c4:f2:81:d1:c6:ad:27:74:8a:03:bb:72:b6:98:76:11:06:
eb:21:70:45:b2:9c:be:10:44:b3:f1:34:ff:98:b7:68:20:0e:
8f:ed:a7:75:38:cf:73:47:15:7a:25:c9:0f:a2:20:ef:23:9a:
b0:ba:9e:2d:bb:d2:95:2f:10:03:cb:a9:af:de:1d:05:56:9d:
2b:65:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:21:53 2026 by rpki-client