
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/BEBA0144251011F1AF69A29DBE833773.roa
File: BEBA0144251011F1AF69A29DBE833773.roa (raw, json)
Hash identifier: /JZvZ1urnfcPcC1nbFisB4WBkPyXg+Maa+h4MhEN9vI=
Subject key identifier: 78:99:ED:9E:75:54:50:0A:13:22:37:C9:15:B2:EB:9D:6D:75:88:ED
Certificate issuer: /CN=A91D1C2E/serialNumber=40C855900EBEB4DDEE119C808E459AAFDF75B584
Certificate serial: 44
Authority key identifier: 40:C8:55:90:0E:BE:B4:DD:EE:11:9C:80:8E:45:9A:AF:DF:75:B5:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/BEBA0144251011F1AF69A29DBE833773.roa
Signing time: Thu 11 Jun 2026 11:41:37 +0000
ROA not before: Thu 11 Jun 2026 11:41:37 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 133139
IP address blocks: 58.97.148.0/24 maxlen: 24
58.97.150.0/24 maxlen: 24
58.97.151.0/24 maxlen: 24
58.97.152.0/24 maxlen: 24
58.97.153.0/24 maxlen: 24
58.97.154.0/24 maxlen: 24
58.97.156.0/22 maxlen: 24
202.86.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.crl
rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1C2E, serialNumber=40C855900EBEB4DDEE119C808E459AAFDF75B584
Validity
Not Before: Jun 11 11:41:37 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2a9ef1-61aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:2b:d0:34:38:34:96:5f:48:a2:dc:a4:bb:
55:00:1b:57:ce:93:3b:d9:10:68:97:37:f9:ad:ba:
93:04:a8:5f:51:4a:41:fb:e0:d2:e9:62:7b:39:ba:
18:10:00:85:aa:c7:4d:da:26:83:32:58:9a:cf:cb:
4a:33:37:27:89:54:66:7b:79:b3:d8:8a:0a:92:4d:
11:57:66:11:bf:57:3b:f2:da:96:2f:32:2e:8c:fd:
8e:c2:6d:96:d9:16:18:d5:97:f9:8c:f4:5c:18:2e:
bd:81:46:6a:68:fd:13:1d:8c:d0:47:bc:c6:ab:b6:
05:76:b3:c7:db:94:1b:e9:06:3a:7b:d8:3a:e9:f1:
0e:6b:49:7d:1e:94:1f:fd:49:b8:70:cd:77:91:07:
27:2e:e9:ad:30:90:e4:31:71:d7:43:75:f1:3a:7b:
38:7a:7e:2d:7c:b4:07:94:87:23:51:fc:3c:ac:0f:
15:fd:b8:de:78:4d:32:95:65:79:1b:6c:18:fa:38:
f3:16:63:a5:cb:ae:4a:2b:9f:12:bc:7c:91:3f:f6:
3c:bd:9c:c1:b5:c1:10:dd:65:f7:67:7b:c1:d2:d8:
22:e7:75:ea:0f:ba:d8:72:cc:a1:3a:2c:dd:6a:0b:
e8:db:9a:3b:fd:f2:f5:5c:4b:a6:0a:c1:52:7a:cf:
5d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:99:ED:9E:75:54:50:0A:13:22:37:C9:15:B2:EB:9D:6D:75:88:ED
X509v3 Authority Key Identifier:
keyid:40:C8:55:90:0E:BE:B4:DD:EE:11:9C:80:8E:45:9A:AF:DF:75:B5:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/BEBA0144251011F1AF69A29DBE833773.roa
sbgp-ipAddrBlock: critical
IPv4:
58.97.148.0/24
58.97.150.0-58.97.154.255
58.97.156.0/22
202.86.24.0/21
Signature Algorithm: sha256WithRSAEncryption
45:19:19:df:89:a6:6b:ae:5f:19:70:4d:8f:b5:d0:e8:dc:56:
0e:16:ee:f8:cc:40:7b:83:12:91:13:e1:8a:27:87:92:dd:e4:
60:25:bf:cd:0a:66:5d:0c:43:5e:83:18:40:91:34:9e:2e:27:
24:70:27:9b:e6:e2:64:9d:1b:02:80:10:74:66:09:69:b9:9c:
fa:48:74:20:05:c3:de:32:39:ac:64:cd:8e:55:68:53:c3:a0:
2e:29:fa:9b:b1:01:1b:a3:59:6c:db:84:47:32:af:73:d9:95:
58:ad:70:39:4b:15:97:75:a8:58:68:be:a7:df:d9:ba:00:4c:
8f:1b:cd:5f:d4:c9:6e:7b:c0:14:25:d8:d6:f9:87:58:30:b4:
3f:5f:51:32:3d:d3:3a:f3:4c:04:34:cd:bf:7e:c6:1d:64:3b:
78:15:44:18:80:ed:81:60:15:d5:85:6b:7e:e8:eb:40:92:a3:
ea:3e:19:3e:19:b3:2d:cd:0b:0f:66:8b:d3:13:92:6e:ef:ba:
87:6d:7c:b6:5d:c8:33:b3:64:26:32:e4:f3:6a:1b:fc:96:59:
2e:67:e2:3b:88:23:be:73:be:ee:45:06:32:26:bb:68:db:80:
67:a1:f9:04:ef:2d:0c:d7:fd:41:f3:b8:b1:2f:ac:db:af:96:
78:7d:c3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:43 2026 by rpki-client