
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B91BEB86943711F08A09E30CC4F9AE02.roa
File: B91BEB86943711F08A09E30CC4F9AE02.roa (raw, json)
Hash identifier: +KTfUQ6tg37LXnkbrgc+pkgRz7Bqgea5nS2R+G/3+0o=
Subject key identifier: 26:6D:EE:DA:4F:81:30:DF:EC:39:69:8D:79:6B:9F:F9:F7:81:C0:DB
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 35C7
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B91BEB86943711F08A09E30CC4F9AE02.roa
Signing time: Tue 31 Mar 2026 16:13:45 +0000
ROA not before: Tue 31 Mar 2026 16:13:45 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 5511
IP address blocks: 122.8.64.0/22 maxlen: 22
122.8.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13767 (0x35c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Mar 31 16:13:45 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cbf2b9-27af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:c0:16:14:6f:fa:96:7e:2c:bc:1f:a8:df:
0c:d3:d0:04:02:09:6a:2a:2a:15:fe:68:3c:bf:7c:
72:67:f6:7c:c4:17:5c:34:c4:aa:9e:e4:d0:2f:40:
86:28:1d:22:e4:b6:8c:97:ad:2d:c6:38:30:17:f2:
78:0e:d5:5a:44:54:90:7d:2d:14:6c:05:9d:ee:ee:
4b:bc:a6:13:fd:2d:0b:78:3f:02:99:db:53:d2:0f:
da:45:eb:34:f5:f8:b9:0f:16:0e:67:ab:34:94:1f:
4c:a3:89:8b:38:89:71:46:74:76:be:e5:c0:f2:b6:
82:e2:73:6b:b6:15:fe:1e:c9:34:16:16:79:af:47:
12:c0:17:86:38:5b:e4:c5:8c:24:78:67:e5:5b:c5:
9b:54:d7:57:1e:89:43:be:60:3b:79:20:77:a4:e2:
9a:b3:1d:a2:a5:d6:3c:af:be:85:67:e6:26:64:4a:
32:7e:e4:90:90:ef:ac:a2:b7:eb:55:0a:56:52:80:
aa:82:7c:f6:61:3c:77:10:cf:e0:04:15:9d:0b:3f:
f2:6d:d7:ce:24:7c:f4:fd:80:20:71:c9:f6:5a:c8:
43:bb:46:73:41:1c:4a:b7:3d:02:54:17:5e:20:29:
24:5e:69:35:ee:80:ac:1e:e1:16:65:ec:7d:77:51:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6D:EE:DA:4F:81:30:DF:EC:39:69:8D:79:6B:9F:F9:F7:81:C0:DB
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B91BEB86943711F08A09E30CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.8.64.0/22
122.8.72.0/22
Signature Algorithm: sha256WithRSAEncryption
71:21:00:07:6a:4b:4f:a9:a4:a5:95:28:3b:1f:63:20:21:f4:
aa:38:40:1e:21:cc:88:e2:ce:f3:f9:39:87:61:3b:26:a1:22:
61:57:69:a8:5a:76:4e:b3:96:98:2e:b7:87:7b:d2:db:8f:7d:
e3:c9:ff:11:64:6d:3a:c8:41:75:3e:72:b9:60:2d:b4:aa:0c:
6c:fd:aa:37:3f:e1:f6:67:d7:1f:59:4a:8c:bf:7e:98:54:da:
7d:1a:bc:34:38:af:05:a4:f5:56:e7:0c:6c:61:2a:fe:e5:64:
a4:6c:21:bc:fd:e3:62:48:12:c4:50:02:70:be:ea:be:00:eb:
12:20:73:5a:14:ca:1b:5f:22:98:4c:63:96:1c:72:82:43:c8:
fd:39:4b:60:14:b5:84:e5:d7:6b:5d:93:53:ef:53:55:bd:83:
22:85:8d:58:87:9d:03:c2:32:06:c5:a9:cd:bf:33:b9:0f:22:
e6:13:f0:e9:d8:58:cb:7d:a9:74:b6:8a:e1:70:a0:71:ad:5d:
17:45:de:c2:7d:3d:8c:c2:4a:76:a2:1d:21:1f:04:76:e1:ac:
a0:9f:52:a1:e6:99:20:15:f8:10:13:1b:44:6d:e4:29:69:97:
9b:e4:b8:7d:40:7f:df:b8:f6:27:93:c8:2a:46:9f:d7:fc:55:
91:df:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:53 2026 by rpki-client