
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BE1ACA36DD7911F088A95D31386F56BC.roa
File: BE1ACA36DD7911F088A95D31386F56BC.roa (raw, json)
Hash identifier: wFVA3jy/rKVpvXwLeuTYWtSknure16Z8S/vPIwlvU8g=
Subject key identifier: E5:0C:0E:06:7F:3F:E9:59:BC:85:11:31:70:21:DA:5B:3B:3D:57:9A
Certificate issuer: /CN=A91CCABB/serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Certificate serial: 29
Authority key identifier: 06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BE1ACA36DD7911F088A95D31386F56BC.roa
Signing time: Sun 01 Mar 2026 05:51:28 +0000
ROA not before: Sat 20 Dec 2025 07:59:00 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 154453
IP address blocks: 144.79.156.0/23 maxlen: 23
144.79.156.0/24 maxlen: 24
144.79.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCABB, serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Validity
Not Before: Dec 20 07:59:00 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a3d3df-7d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:68:fc:94:7c:eb:91:1a:45:90:6e:c3:c1:aa:
88:04:70:d0:56:ca:c5:35:25:93:86:9e:f8:f0:96:
96:6e:d1:c4:a4:88:18:d1:31:2f:99:12:96:e1:39:
e2:f1:c9:f0:be:60:f8:64:d2:bb:aa:66:f2:65:00:
5d:a7:4f:09:db:a7:54:cf:71:47:cb:18:7e:7b:eb:
a4:ef:98:0b:e1:b7:ff:d7:02:35:2a:b2:14:1e:bb:
86:23:2a:ba:0d:05:d9:da:56:af:46:46:f3:f3:2a:
62:02:16:f9:ea:5f:05:5c:c7:e8:32:6f:ac:83:6b:
5c:09:f8:87:bb:c6:34:54:da:f1:3d:be:2c:fb:07:
69:ed:10:0e:13:a9:70:9b:da:b6:31:82:95:c4:eb:
dd:40:0f:8e:28:96:1d:20:33:13:f7:2c:f3:09:5a:
9d:df:a6:51:69:96:b7:68:f1:23:54:e2:2d:c4:c8:
0c:d8:f2:68:99:34:6c:1e:29:e5:41:6e:07:f9:b6:
3f:7f:14:ed:99:58:91:3b:5f:92:ca:76:1f:9b:63:
96:92:40:d9:7e:fe:26:14:d8:c4:e2:fc:4a:0f:74:
62:e1:e6:c0:da:72:45:66:15:06:1f:a2:82:f7:55:
ab:f7:18:3e:43:ae:f0:4d:f1:b7:a4:9b:19:48:cd:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0C:0E:06:7F:3F:E9:59:BC:85:11:31:70:21:DA:5B:3B:3D:57:9A
X509v3 Authority Key Identifier:
keyid:06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BE1ACA36DD7911F088A95D31386F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.156.0/23
Signature Algorithm: sha256WithRSAEncryption
64:77:d2:d3:32:5d:db:75:5a:19:84:7c:64:4f:d7:5c:7f:b5:
7b:1f:2a:b5:63:6d:a6:0b:cb:a4:a7:a7:d3:87:8a:f5:3c:42:
a1:71:39:b1:0c:4f:35:ea:d4:22:99:21:ad:2b:7f:13:46:92:
71:b0:8c:4d:52:35:97:ce:47:9b:50:e3:62:52:87:b6:98:8c:
0f:3f:b6:2e:94:38:2b:c8:8b:42:ee:bd:09:64:4d:46:d7:c4:
21:5f:56:4d:87:a4:8f:8b:a5:28:f0:6d:77:7b:cc:0f:2d:38:
1f:f5:ae:f0:e1:f3:66:59:d0:73:1f:3f:42:9b:57:07:de:ac:
91:ee:4e:23:a1:8e:17:98:63:7f:cd:5b:0a:75:47:a7:df:9d:
b6:06:87:72:30:19:66:82:05:11:d3:94:57:ad:08:d2:9b:90:
2f:7d:bb:41:95:3b:b4:cd:dc:f8:33:56:73:15:59:5b:32:14:
56:a0:c5:5a:d9:d6:ff:d7:82:ec:77:3f:fb:45:88:66:fa:31:
7f:f4:90:1c:ef:70:71:b2:83:84:fa:d4:19:19:ec:4b:00:c6:
c6:0d:1b:f1:5d:9c:c1:83:df:30:b7:c4:ae:41:49:c7:94:49:
95:29:4a:28:27:a3:5b:92:0a:06:53:d9:dd:03:74:5c:7c:9c:
73:73:e0:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:56:03 2026 by rpki-client