
$ rpki-client -vvf rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/BB62FBD82AEC11EA972CB627C4F9AE02.roa
File: BB62FBD82AEC11EA972CB627C4F9AE02.roa (raw, json)
Hash identifier: +zCdPTASsee5aGIIMi1W1D9P9AT40nhCRgcd1OQAqvQ=
Subject key identifier: E1:13:E8:30:57:73:70:4D:05:61:47:77:45:97:AE:FD:A5:94:61:B5
Certificate issuer: /CN=A91238D6/serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0
Certificate serial: 22F6
Authority key identifier: 71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/BB62FBD82AEC11EA972CB627C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:13:43 +0000
ROA not before: Tue 08 Apr 2025 15:54:21 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9497
IP address blocks: 115.146.136.0/21 maxlen: 21
115.146.144.0/20 maxlen: 24
2405:b800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl
rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8950 (0x22f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91238D6, serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0
Validity
Not Before: Apr 8 15:54:21 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40347-4458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:9f:9c:7a:f5:67:25:e9:76:5f:83:04:e0:
62:c3:38:52:26:91:37:7e:2e:25:da:6a:6e:08:ec:
45:f6:a8:ec:75:79:be:20:41:d8:3a:eb:5b:af:f4:
57:3b:3c:cf:ee:e6:4a:aa:2e:9e:f8:84:28:44:37:
0c:3a:bc:b2:b6:35:89:f1:8c:f1:d8:a4:33:b8:8a:
33:7d:57:29:1c:7d:f5:c4:56:d5:85:0d:05:bb:58:
55:e2:a0:a3:73:62:31:c3:b3:72:12:71:4d:a7:8f:
fb:4b:69:9f:ec:0c:01:6d:bd:6e:fd:22:9a:60:0e:
ed:c4:74:3f:8e:30:1e:bc:01:9c:02:f0:2e:d4:13:
41:b6:74:2d:d0:f5:1d:e4:ff:71:53:df:09:be:b6:
39:2b:f1:4e:a2:44:de:65:6b:33:0d:b5:87:f4:e9:
b8:2e:2c:fe:40:7c:1a:90:be:1e:0a:4d:c3:a7:e0:
fc:bd:b2:a8:32:c7:3f:17:20:27:cb:17:8e:10:43:
52:6c:b2:e3:dd:72:d7:a1:24:4d:62:05:fd:33:12:
e3:6d:20:86:6f:26:68:7c:fa:82:5a:a7:c9:1c:16:
c9:56:5d:80:e6:79:62:da:e5:a0:6d:9c:17:0b:47:
25:ee:7c:93:9f:ef:a6:91:65:2d:84:3c:4c:5c:c2:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:13:E8:30:57:73:70:4D:05:61:47:77:45:97:AE:FD:A5:94:61:B5
X509v3 Authority Key Identifier:
keyid:71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/BB62FBD82AEC11EA972CB627C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
115.146.136.0-115.146.159.255
IPv6:
2405:b800::/32
Signature Algorithm: sha256WithRSAEncryption
b5:2a:68:f4:75:fb:de:fa:ef:ab:00:01:db:0c:51:9a:7d:72:
a9:be:f2:f5:ee:8e:42:33:24:7d:80:af:1a:0a:9b:11:5f:dd:
8a:9d:2b:84:63:26:88:5f:f9:b2:6d:34:0b:cf:3f:58:a5:3b:
38:2a:5c:04:f2:d1:d6:97:9a:af:d9:fc:e5:11:a4:d7:7a:e5:
e0:90:ad:f7:a0:ff:5f:fa:16:6b:b4:0f:ab:dc:91:c5:71:b4:
d1:8f:3e:6b:df:15:9d:1c:30:04:09:9a:24:44:6f:01:21:39:
3a:cf:ea:b5:3c:50:d1:12:d0:6c:f8:51:fc:8d:bd:b1:10:a4:
a5:a4:1d:f0:e8:22:32:18:32:4a:ea:3c:b8:a6:13:c3:25:be:
74:79:35:f3:ef:12:9a:48:fa:1c:1d:a4:e8:89:ff:cc:19:ea:
5d:4d:e4:0d:ed:e9:a1:04:50:97:7f:06:88:64:13:7d:1e:f9:
a2:1d:b6:e3:28:4a:c8:eb:c5:a9:fc:f5:09:75:6f:c5:15:02:
be:2d:a3:59:e8:16:b6:3f:90:8d:22:2c:34:66:c5:84:74:b2:
d6:d8:2d:27:05:28:3a:94:65:3e:b4:4f:0b:f6:6d:2d:bc:fc:
34:cf:15:a9:96:88:cc:1b:5b:e7:a9:5c:81:f9:78:2b:cc:7a:
d8:1a:98:a4
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICIvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM4RDYxMTAvBgNVBAUTKDcxNEJBMjhERDgzNUE3RDQxOTcwMUZBRDM3MkEzNEI3
QzY2Q0ZBQTAwHhcNMjUwNDA4MTU1NDIxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDM0Ny00NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqBefnHr1ZyXpdl+DBOBiwzhSJpE3fi4l2mpuCOxF9qjsdXm+IEHYOutbr/RX
OzzP7uZKqi6e+IQoRDcMOryytjWJ8Yzx2KQzuIozfVcpHH31xFbVhQ0Fu1hV4qCj
c2Ixw7NyEnFNp4/7S2mf7AwBbb1u/SKaYA7txHQ/jjAevAGcAvAu1BNBtnQt0PUd
5P9xU98JvrY5K/FOokTeZWszDbWH9Om4Liz+QHwakL4eCk3Dp+D8vbKoMsc/FyAn
yxeOEENSbLLj3XLXoSRNYgX9MxLjbSCGbyZofPqCWqfJHBbJVl2A5nli2uWgbZwX
C0cl7nyTn++mkWUthDxMXMJplQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFOET6DBX
c3BNBWFHd0WXrv2llGG1MB8GA1UdIwQYMBaAFHFLoo3YNafUGXAfrTcqNLfGbPqg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzhENi8yODk5MDUzMEJF
NTQxMUU1OERDQzQzNTdDNEY5QUUwMi9jVXVpamRnMXA5UVpjQi10TnlvMHQ4WnMt
cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NVdWlqZGcxcDlRWmNCLXROeW8wdDhacy1xQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjM4RDYvMjg5OTA1MzBCRTU0MTFFNThEQ0M0MzU3QzRGOUFFMDIvQkI2MkZCRDgy
QUVDMTFFQTk3MkNCNjI3QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU
BAIAATAOMAwDBANzkogDBAVzkoAwDQQCAAIwBwMFACQFuAAwDQYJKoZIhvcNAQEL
BQADggEBALUqaPR1+97676sAAdsMUZp9cqm+8vXujkIzJH2ArxoKmxFf3YqdK4Rj
Johf+bJtNAvPP1ilOzgqXATy0daXmq/Z/OURpNd65eCQrfeg/1/6Fmu0D6vckcVx
tNGPPmvfFZ0cMAQJmiREbwEhOTrP6rU8UNES0Gz4UfyNvbEQpKWkHfDoIjIYMkrq
PLimE8MlvnR5NfPvEppI+hwdpOiJ/8wZ6l1N5A3t6aEEUJd/BohkE30e+aIdtuMo
Ssjrxan89Ql1b8UVAr4to1noFrY/kI0iLDRmxYR0stbYLScFKDqUZT60Twv2bS28
/DTPFamWiMwbW+epXIH5eCvMetgamKQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:20 2026 by rpki-client