
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/BB455B6A21B611F180955D50193D8C67.roa
File: BB455B6A21B611F180955D50193D8C67.roa (raw, json)
Hash identifier: T5dGYO6xIA3iT8OTT5zsMy1BjQKaQzVyRcAZAGPI9p0=
Subject key identifier: 05:2A:A1:0B:D5:6E:5A:DC:01:E1:F2:8B:7F:E7:90:04:12:6A:88:C5
Certificate issuer: /CN=A91E3125/serialNumber=A7A110C8A4029E25215463CEE21DA57FB64B8AE4
Certificate serial: 02
Authority key identifier: A7:A1:10:C8:A4:02:9E:25:21:54:63:CE:E2:1D:A5:7F:B6:4B:8A:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/BB455B6A21B611F180955D50193D8C67.roa
Signing time: Tue 17 Mar 2026 04:06:53 +0000
ROA not before: Tue 17 Mar 2026 04:06:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135391
IP address blocks: 163.128.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.crl
rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3125, serialNumber=A7A110C8A4029E25215463CEE21DA57FB64B8AE4
Validity
Not Before: Mar 17 04:06:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69b8d35d-aeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:ee:bc:03:54:85:63:9e:4d:cc:a5:b7:46:
8d:57:8e:14:6e:96:f7:cb:27:11:58:23:fa:0e:f9:
9d:5e:33:39:7a:cb:9b:d5:5e:0f:c1:75:ef:09:2f:
42:ab:a8:56:ff:97:59:03:f2:61:7f:ef:15:6a:14:
7c:d6:70:cb:ff:83:28:94:9a:39:89:3e:8e:72:69:
ba:52:8f:d1:7c:a8:1b:d0:73:6e:7c:da:b0:10:69:
49:0f:ea:24:94:5b:11:ff:4f:09:03:70:db:43:8b:
19:d2:90:2a:e4:24:c2:10:80:a4:a0:40:c4:19:05:
f0:29:88:78:a9:e3:9b:0b:5e:b6:ae:cf:af:15:e6:
46:6f:7d:fc:33:41:06:a4:12:21:7a:01:d4:24:1b:
4b:ee:7d:f0:7b:b4:bf:b6:0c:f7:64:99:c0:ad:25:
63:6b:ff:8a:2d:2c:a8:1d:39:5e:e5:86:32:01:77:
e1:aa:58:67:36:79:0e:42:56:e3:04:e0:3c:db:28:
4f:db:ed:8c:0c:39:fc:ec:ad:a5:3e:0b:1f:81:5f:
77:ae:d2:d7:ca:77:4e:f1:33:ee:ae:38:a6:06:9a:
f3:91:d9:8c:02:4d:85:18:87:c6:fd:9d:7f:f7:dc:
59:9f:8b:1d:99:92:72:be:f5:3b:b6:54:9e:91:0d:
5c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2A:A1:0B:D5:6E:5A:DC:01:E1:F2:8B:7F:E7:90:04:12:6A:88:C5
X509v3 Authority Key Identifier:
keyid:A7:A1:10:C8:A4:02:9E:25:21:54:63:CE:E2:1D:A5:7F:B6:4B:8A:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/BB455B6A21B611F180955D50193D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.6.0/23
Signature Algorithm: sha256WithRSAEncryption
21:40:2c:b8:82:9e:85:ed:c6:d8:c8:3a:2b:a8:b8:bc:13:9a:
81:1d:10:bd:4c:ba:03:13:25:e4:5b:2d:6e:65:48:34:84:60:
f0:8b:bb:87:56:0b:f1:9a:a8:b7:d8:a8:fb:dc:dd:04:cb:8e:
9d:fb:f7:64:3c:c4:f2:cd:1b:e6:bc:dd:9d:da:15:78:f6:78:
80:56:f5:a9:a1:a1:a8:45:07:9a:1d:e1:0a:5f:70:ad:0b:01:
c8:98:11:ae:1b:ee:97:d2:a7:01:f9:64:fe:4b:75:da:f3:63:
a9:28:3f:5e:d3:17:f9:8e:d0:5c:cd:3a:19:04:9e:a9:34:8f:
14:f3:02:03:47:d2:60:56:e2:87:0c:d1:1c:93:a2:ce:f2:ca:
fe:26:45:7a:02:bc:5c:c0:4c:ee:72:3a:f1:09:a1:96:56:eb:
99:a5:14:c3:3b:fb:36:e3:6c:24:a1:07:b6:c7:15:1a:b3:69:
08:99:56:d1:8f:f5:44:5e:05:91:83:ec:dc:23:fc:dc:bd:e1:
29:73:c7:e0:30:a0:8f:23:f8:7a:be:cc:57:87:22:ae:22:5d:
48:23:78:a8:19:81:c5:f3:a7:63:a5:13:92:3c:bd:bb:ba:1e:
35:a5:38:e1:f1:f6:c6:93:21:cb:a3:87:0e:b6:ab:d9:73:fa:
6b:04:06:c8
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MzEyNTExMC8GA1UEBRMoQTdBMTEwQzhBNDAyOUUyNTIxNTQ2M0NFRTIxREE1N0ZC
NjRCOEFFNDAeFw0yNjAzMTcwNDA2NTNaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YjhkMzVkLWFlZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDePu68A1SFY55NzKW3Ro1XjhRulvfLJxFYI/oO+Z1eMzl6y5vVXg/Bde8JL0Kr
qFb/l1kD8mF/7xVqFHzWcMv/gyiUmjmJPo5yabpSj9F8qBvQc2582rAQaUkP6iSU
WxH/TwkDcNtDixnSkCrkJMIQgKSgQMQZBfApiHip45sLXrauz68V5kZvffwzQQak
EiF6AdQkG0vuffB7tL+2DPdkmcCtJWNr/4otLKgdOV7lhjIBd+GqWGc2eQ5CVuME
4DzbKE/b7YwMOfzsraU+Cx+BX3eu0tfKd07xM+6uOKYGmvOR2YwCTYUYh8b9nX/3
3Fmfix2ZknK+9Tu2VJ6RDVybAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUBSqhC9Vu
WtwB4fKLf+eQBBJqiMUwHwYDVR0jBBgwFoAUp6EQyKQCniUhVGPO4h2lf7ZLiuQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzMTI1LzcxNzJFMDk4MjFC
NjExRjE4OTNGQkNGRDE4M0Q4QzY3L3A2RVF5S1FDbmlVaFZHUE80aDJsZjdaTGl1
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcDZFUXlLUUNuaVVoVkdQTzRoMmxmN1pMaXVRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzEyNS83MTcyRTA5ODIxQjYxMUYxODkzRkJDRkQxODNEOEM2Ny9CQjQ1NUI2QTIx
QjYxMUYxODA5NTVENTAxOTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGjgAYwDQYJKoZIhvcNAQELBQADggEBACFALLiCnoXtxtjIOiuouLwT
moEdEL1MugMTJeRbLW5lSDSEYPCLu4dWC/GaqLfYqPvc3QTLjp3792Q8xPLNG+a8
3Z3aFXj2eIBW9amhoahFB5od4QpfcK0LAciYEa4b7pfSpwH5ZP5LddrzY6koP17T
F/mO0FzNOhkEnqk0jxTzAgNH0mBW4ocM0RyTos7yyv4mRXoCvFzATO5yOvEJoZZW
65mlFMM7+zbjbCShB7bHFRqzaQiZVtGP9UReBZGD7Nwj/Ny94Slzx+AwoI8j+Hq+
zFeHIq4iXUgjeKgZgcXzp2OlE5I8vbu6HjWlOOHx9saTIcujhw62q9lz+msEBsg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:25:15 2026 by rpki-client