
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa
File: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (raw, json)
Hash identifier: JeKAJdqbPEiYDYAJ1XzRDXMOefEFjZmJoWdofrNUX9I=
Subject key identifier: 2F:E8:B6:E9:CA:70:8D:8B:6C:0B:7C:10:AC:A3:06:CB:6F:28:63:1D
Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Certificate serial: 0EC3
Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:17:33 +0000
ROA not before: Mon 18 Aug 2025 18:27:16 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 55944
IP address blocks: 216.183.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3779 (0xec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Validity
Not Before: Aug 18 18:27:16 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a42e5d-c7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:84:18:2a:48:d0:d9:d7:a6:33:71:09:d6:
5b:f0:17:3c:e5:e1:6a:d0:1f:f9:59:0d:d7:4e:c5:
de:e9:d6:f0:5b:69:6d:c9:d0:1b:3c:d0:3c:93:1c:
9f:33:c0:e0:91:94:70:02:84:dc:1f:99:3f:82:62:
7a:49:6b:31:90:66:20:f6:be:c5:7e:3b:c4:ae:f3:
e7:e3:6c:62:e1:4d:ee:8f:d5:5f:00:8f:3b:f2:3d:
de:a6:5c:c7:1e:75:ec:dd:b7:1f:56:1d:86:e5:ba:
1a:c8:57:39:d8:e8:1c:93:aa:31:aa:d0:ed:47:9a:
e8:c7:44:bb:2b:29:e9:22:75:db:67:fd:4d:2f:18:
c7:bf:2e:32:68:c6:92:e4:08:ba:81:96:85:f4:12:
64:e7:13:cb:c4:db:a6:b9:62:44:e8:4a:bf:b6:09:
b9:ef:6b:f6:4f:02:3f:75:9c:24:73:ce:4d:d3:bb:
92:10:59:e3:5a:aa:5f:f8:3e:10:fd:6e:e4:0e:5d:
f4:65:bc:bc:7f:e9:23:53:e1:ea:7f:ce:03:73:84:
3a:54:e9:b1:4e:71:77:d3:b4:91:38:88:b7:b3:d2:
f2:43:09:43:ec:62:3c:fd:68:73:29:5b:86:c7:e6:
91:9f:89:80:fc:54:e5:e0:27:4a:9c:b0:f7:e9:0b:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E8:B6:E9:CA:70:8D:8B:6C:0B:7C:10:AC:A3:06:CB:6F:28:63:1D
X509v3 Authority Key Identifier:
keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
216.183.208.0/20
Signature Algorithm: sha256WithRSAEncryption
d7:34:cc:58:b3:1f:28:0f:c5:ca:4d:40:d6:a6:4d:fb:61:19:
8c:8a:02:70:ac:ca:73:d5:f5:4b:16:47:a0:4d:05:22:ed:73:
f2:23:4a:f7:bf:a6:03:af:f2:5c:78:f5:83:d6:cf:82:87:84:
f3:d2:20:64:48:ad:d1:e7:08:e1:16:aa:5a:b9:c5:76:d9:96:
62:69:71:34:d6:4e:3b:c3:e5:4a:02:b7:23:64:aa:91:50:d7:
a1:f6:82:96:98:e3:1d:d4:f1:f4:24:2f:33:19:22:15:a8:1d:
54:a0:47:58:f5:1b:2f:3f:bd:7c:d2:c3:3e:ac:2f:23:86:08:
73:12:a4:d3:50:0b:0e:d5:83:38:3f:3e:e7:b6:a1:8e:69:e5:
8e:61:6a:3f:10:9b:e0:39:d2:aa:29:5f:0f:3d:b9:b4:8a:7c:
2e:a5:68:b6:12:a6:22:5d:0e:fa:76:9b:e6:83:a0:c0:d3:93:
ee:7f:62:30:24:a0:c7:14:a0:44:3b:57:a0:bc:bd:64:cd:a3:
92:47:ca:a7:7f:3c:60:f4:d1:d4:91:81:f2:df:28:c0:a4:b4:
f6:3c:bc:be:5c:3d:7f:53:33:9a:77:5a:23:af:93:98:2c:b4:
42:11:b3:31:2e:b7:6f:b3:e2:94:f8:57:d7:ce:cf:40:1f:6f:
28:73:72:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:21 2026 by rpki-client