
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/BCEB94DAA81A11F18448F1EC6E11F970.roa
File: BCEB94DAA81A11F18448F1EC6E11F970.roa (raw, json)
Hash identifier: 7Ouv3JUrLICKOKUbAA1JzJHGvf72CwEZSx8VXOX0LQ0=
Subject key identifier: FB:2B:D1:58:96:F8:9E:85:35:0F:04:A0:14:4E:48:CA:4D:67:62:6B
Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial: 239F
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/BCEB94DAA81A11F18448F1EC6E11F970.roa
Signing time: Fri 04 Sep 2026 04:40:22 +0000
ROA not before: Fri 04 Sep 2026 04:40:22 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 147281
IP address blocks: 220.158.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9119 (0x239f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Validity
Not Before: Sep 4 04:40:22 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a9a4bb6-f207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:33:fb:f7:e2:4a:10:1b:73:48:12:1e:e7:
71:20:a2:e5:44:7a:3a:19:fb:b1:72:4a:da:4f:81:
25:bc:fa:40:4c:a3:4a:c8:0a:7d:c4:36:6f:43:07:
1d:f2:c8:7e:d5:8b:5f:49:43:2d:83:cc:75:92:26:
01:9e:31:1e:35:9f:f8:27:88:34:a1:e9:44:ac:bd:
f9:d4:dd:2b:3b:60:39:a8:ac:10:ba:7f:ee:49:95:
2b:ad:ac:b1:b1:07:8d:ef:65:ea:e5:26:c1:77:9d:
15:82:48:55:65:0b:bd:56:3f:d3:0e:b7:76:80:9d:
e6:94:3c:ea:c7:1e:17:0e:75:22:82:f7:6b:8f:89:
f3:b0:0d:68:af:00:66:2b:a3:9b:f7:0c:d4:32:1e:
2d:c0:c0:c0:50:12:ef:5c:a1:17:ff:8d:1c:3e:94:
57:21:51:f8:0c:d7:db:15:4e:49:f4:87:40:35:23:
90:20:cb:89:e3:7e:8a:b0:63:bc:68:a6:7f:74:6a:
56:cd:d1:d6:a9:96:4e:24:67:e0:6b:45:b8:9b:22:
9e:be:5d:36:f4:ef:9d:f1:33:de:7a:30:53:e4:c1:
33:66:8a:c9:a8:e0:d4:dd:4b:a5:c5:00:6b:ea:93:
80:de:88:57:ae:8c:99:39:a9:56:5b:76:3f:cc:25:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2B:D1:58:96:F8:9E:85:35:0F:04:A0:14:4E:48:CA:4D:67:62:6B
X509v3 Authority Key Identifier:
keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/BCEB94DAA81A11F18448F1EC6E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
220.158.204.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:15:ca:88:66:9b:b2:34:1e:04:9d:50:d2:9e:1d:14:89:9b:
b2:d1:fb:a2:c5:6b:0b:2b:6e:26:4f:7f:10:03:ee:3b:eb:55:
0c:ab:7a:9e:6a:9e:d0:42:21:ce:ac:33:11:12:af:65:94:84:
aa:6e:ba:7e:03:ac:0c:6b:16:9d:41:fd:5b:fb:0d:a1:e8:7b:
7c:3f:3e:d0:45:99:b7:7f:4c:fb:79:53:df:6d:f5:ed:04:30:
f7:1c:c3:9c:f6:85:53:3e:8e:ee:92:d2:db:ba:4a:fb:99:d5:
82:05:43:68:31:21:10:65:ef:ee:9d:34:c2:45:72:5e:20:49:
26:8c:6c:4e:6c:03:20:3f:da:7c:eb:8a:36:8f:69:89:bf:c0:
e9:72:25:01:12:26:43:57:46:34:43:eb:17:40:2f:bd:8b:f4:
a2:57:57:e7:46:cd:6d:81:4a:a2:e4:c9:29:8c:0e:40:5b:80:
2a:1d:e0:ad:0b:4b:c2:e0:c5:b8:da:20:b5:c9:95:43:13:e3:
d0:9e:0c:e1:cf:50:7a:3e:3e:d4:52:9f:28:07:dc:a4:3d:59:
d5:86:86:ea:6a:18:ea:b4:4e:ca:72:9e:62:0e:ca:40:80:e8:
b9:71:c4:bd:f4:99:34:86:83:14:b3:83:e5:43:5c:24:b4:53:
0a:e8:81:ae
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICI58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2
RUY2N0I2RDYwHhcNMjYwOTA0MDQ0MDIyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTlhNGJiNi1mMjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzTcz+/fiShAbc0gSHudxIKLlRHo6GfuxckraT4ElvPpATKNKyAp9xDZvQwcd
8sh+1YtfSUMtg8x1kiYBnjEeNZ/4J4g0oelErL351N0rO2A5qKwQun/uSZUrrayx
sQeN72Xq5SbBd50VgkhVZQu9Vj/TDrd2gJ3mlDzqxx4XDnUigvdrj4nzsA1orwBm
K6Ob9wzUMh4twMDAUBLvXKEX/40cPpRXIVH4DNfbFU5J9IdANSOQIMuJ436KsGO8
aKZ/dGpWzdHWqZZOJGfga0W4myKevl029O+d8TPeejBT5MEzZorJqODU3UulxQBr
6pOA3ohXroyZOalWW3Y/zCUz8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPsr0ViW
+J6FNQ8EoBROSMpNZ2JrMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy
RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50
dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvQkNFQjk0REFB
ODFBMTFGMTg0NDhGMUVDNkUxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA3J7MMA0GCSqGSIb3DQEBCwUAA4IBAQBMFcqIZpuyNB4EnVDSnh0U
iZuy0fuixWsLK24mT38QA+4761UMq3qeap7QQiHOrDMREq9llISqbrp+A6wMaxad
Qf1b+w2h6Ht8Pz7QRZm3f0z7eVPfbfXtBDD3HMOc9oVTPo7uktLbukr7mdWCBUNo
MSEQZe/unTTCRXJeIEkmjGxObAMgP9p864o2j2mJv8DpciUBEiZDV0Y0Q+sXQC+9
i/SiV1fnRs1tgUqi5MkpjA5AW4AqHeCtC0vC4MW42iC1yZVDE+PQngzhz1B6Pj7U
Up8oB9ykPVnVhobqahjqtE7Kcp5iDspAgOi5ccS99Jk0hoMUs4PlQ1wktFMK6IGu
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:36 2026 by rpki-client