
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DBBD442E3A2C11F09C99C60FC4F9AE02.roa
File: DBBD442E3A2C11F09C99C60FC4F9AE02.roa (raw, json)
Hash identifier: NgZL1NlteqTh7r70TDDZEGImeUoyjn3bVRTfVzmm/WE=
Subject key identifier: 79:F3:27:86:C2:2D:28:A9:AF:FA:EB:B1:B3:72:3A:5E:77:AB:FE:29
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 36B3
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DBBD442E3A2C11F09C99C60FC4F9AE02.roa
Signing time: Wed 08 Oct 2025 14:40:38 +0000
ROA not before: Wed 08 Oct 2025 14:40:38 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136897
IP address blocks: 175.29.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14003 (0x36b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 8 14:40:38 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68e677e5-ed65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:45:5b:ea:d7:31:4b:88:b0:91:7f:85:e0:
99:48:d2:8f:7a:3e:e9:63:fe:40:2f:61:42:13:3d:
67:36:54:6d:0f:cf:d7:a1:98:90:ce:c5:d9:d7:bd:
8b:56:39:4d:24:5c:52:00:7f:80:69:7b:f2:2b:9a:
66:4c:bf:95:11:d2:03:42:52:97:17:fb:f2:13:22:
d9:04:be:0d:fd:55:29:ae:bf:cc:29:9b:68:02:7b:
7d:f1:6d:c9:d4:f3:b6:4a:79:17:44:66:a8:2a:bf:
55:79:81:23:14:3f:9c:e6:bd:63:b6:12:09:fa:5d:
e3:83:a2:33:64:fa:a9:0c:55:65:e5:23:89:ea:f1:
10:2d:c1:83:5d:b4:65:e8:78:db:9f:09:6b:26:4c:
56:8c:f8:20:db:87:d3:2c:83:43:c8:7f:2a:cb:a0:
b5:7e:6c:c5:c4:a9:22:b6:bc:d1:b0:b6:03:5c:0f:
82:df:bb:b7:d3:af:e9:82:ef:e4:9f:8e:a6:67:39:
63:fd:31:99:25:6a:f7:9c:fe:c7:f9:d8:ba:fd:cb:
cf:f8:c9:54:24:83:53:b1:df:e9:42:a7:93:d3:38:
4e:3e:85:bb:76:8a:7a:01:f5:8b:94:76:4a:42:e2:
41:fa:25:13:f4:3f:0b:bb:30:d4:51:87:f9:28:9c:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F3:27:86:C2:2D:28:A9:AF:FA:EB:B1:B3:72:3A:5E:77:AB:FE:29
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DBBD442E3A2C11F09C99C60FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:27:c1:fc:ab:1c:e0:b3:b4:5a:ba:82:3e:86:5f:19:58:a6:
f2:68:35:84:24:ab:3d:96:82:46:a2:9b:0c:4d:a2:92:0f:e0:
63:0d:eb:6f:86:81:fa:1e:39:24:dc:95:39:11:b0:b3:9e:b1:
81:b0:17:80:e6:4f:13:24:ca:18:42:bf:d5:74:b4:9e:70:7b:
52:3e:0e:b6:19:7e:c5:42:36:b5:f3:f3:0e:19:6c:0e:1c:d1:
d1:c6:75:39:14:78:c1:3e:53:0b:64:0b:65:4f:94:b9:86:ea:
08:81:43:98:89:64:2a:e7:78:ca:89:30:d4:b3:c7:8c:1a:24:
48:e2:24:92:83:43:9a:20:d4:15:8a:db:0f:4d:04:1f:8e:cf:
6e:9a:a2:85:40:11:ea:ab:bc:19:a6:70:58:cc:fb:ab:a6:a8:
34:f2:c6:0f:78:a8:6b:a7:54:6f:0c:e4:03:9a:65:43:e0:77:
b9:b4:b0:c7:51:e3:fa:d8:cb:c2:50:44:80:8f:bd:6a:a1:d0:
c3:00:94:51:67:92:72:53:14:5b:f5:2c:07:62:c4:35:0c:9a:
ee:7e:e2:5a:0c:c6:56:fc:aa:e3:e2:5b:63:c1:e7:22:43:ea:
db:f3:7a:73:92:5b:2a:d1:ae:dd:32:b0:db:f1:11:c5:13:b5:
d0:a9:c9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:01:29 2025 by rpki-client