
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BCEC3814657A11F18EA973C86547A888.roa
File: BCEC3814657A11F18EA973C86547A888.roa (raw, json)
Hash identifier: pQ9fwKrHsxyzvOIuaaZwnKRpOg0UO8tlvmpc7gR1ueQ=
Subject key identifier: F1:51:15:5A:87:8F:D9:F3:95:52:DF:EC:28:BB:27:63:10:5F:BF:3A
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6CAB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BCEC3814657A11F18EA973C86547A888.roa
Signing time: Thu 11 Jun 2026 09:48:46 +0000
ROA not before: Thu 11 Jun 2026 09:48:45 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154460
IP address blocks: 2001:df6:77c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27819 (0x6cab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jun 11 09:48:45 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a2a847d-48a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:25:4e:a3:72:63:8b:ef:20:79:6d:3e:91:
83:5e:07:69:23:c7:e7:b0:d6:c6:df:c6:39:dc:bc:
60:08:74:0e:23:36:02:e9:33:f9:2d:f4:78:87:47:
6a:bd:da:4d:c2:1c:b2:35:af:3a:cc:aa:49:07:bc:
b8:6c:8f:0f:c2:33:24:35:08:b8:78:5a:89:86:0e:
04:6d:71:a7:d1:be:5e:56:02:77:b9:e9:1b:e1:a7:
26:c1:e9:1f:4b:19:5e:bc:ea:d2:64:bc:6b:0c:8b:
89:13:3e:ed:22:f2:1b:89:61:2e:d0:25:c1:86:7f:
02:d9:a2:2b:b6:c4:c2:14:a5:69:10:89:08:b5:73:
fd:20:b2:e9:9e:2d:f4:41:c1:14:90:e1:1c:94:14:
bf:cb:a6:38:b8:1c:8b:9f:18:f3:a4:8a:28:75:0f:
88:92:a5:10:1a:71:08:c2:0e:fd:a9:69:2f:04:c2:
10:db:bb:6e:7b:21:49:a1:00:81:8d:d4:b2:a8:8f:
d7:b3:8f:be:45:0e:fe:35:af:2c:37:71:df:2c:27:
b7:ae:b1:22:94:08:40:cd:d0:ed:81:f7:0c:db:81:
be:16:02:7c:5e:31:ff:2a:23:8d:cf:2f:24:e4:89:
31:c8:ee:a1:e6:bf:b6:ad:2f:b9:b1:f8:b2:76:c5:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:51:15:5A:87:8F:D9:F3:95:52:DF:EC:28:BB:27:63:10:5F:BF:3A
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BCEC3814657A11F18EA973C86547A888.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:77c0::/48
Signature Algorithm: sha256WithRSAEncryption
a6:8f:de:20:ee:88:b6:01:89:50:58:a1:4f:99:28:eb:73:06:
f8:ab:aa:2a:08:b5:6b:39:ab:63:ed:16:3c:0c:fb:97:83:9b:
2c:3b:ae:37:d5:31:fd:9f:38:36:56:2a:cd:25:81:75:84:61:
50:17:97:06:69:f8:3b:ef:bc:28:65:f0:ed:03:e9:58:c8:3b:
4f:bc:9b:52:a4:17:47:9f:c1:62:10:7d:28:76:c6:7b:b8:11:
d0:66:19:53:82:9a:8a:88:77:ae:2e:17:0e:b5:88:c3:78:f3:
e8:78:29:8b:ae:6f:ae:b5:03:8c:f6:b4:23:02:02:a0:85:cd:
ae:9e:c0:cb:55:0c:8e:c3:db:45:61:f9:a9:36:77:38:32:93:
67:e7:40:c3:0a:0a:9f:b2:d3:c8:d9:66:a7:db:03:30:e1:02:
4c:26:95:3f:2a:e6:36:63:a5:f7:87:ba:ab:b4:ac:d9:91:38:
57:be:c4:22:1b:94:56:90:f6:1b:45:f9:ba:05:7a:5e:a0:d3:
5c:f8:c9:01:ac:f6:ad:fe:94:95:46:c9:6b:13:c1:64:9c:ec:
a1:2f:f1:fe:56:28:9a:d4:d5:8e:c1:17:88:b1:70:cd:d0:8d:
a7:1b:16:b5:84:62:5d:ca:3f:19:2a:90:11:93:54:c5:12:42:
9c:f9:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:25:43 2026 by rpki-client