
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/DD1805369A8311F0A54CE65CC4F9AE02.roa
File: DD1805369A8311F0A54CE65CC4F9AE02.roa (raw, json)
Hash identifier: JOcwd7IEKPKIGjsoQPA9h2XxSCml4L15OgvgYcufBfM=
Subject key identifier: AE:BC:7B:7B:67:90:13:9E:71:E3:BC:72:85:40:BF:DA:7A:49:CE:F4
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 35CB
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/DD1805369A8311F0A54CE65CC4F9AE02.roa
Signing time: Tue 31 Mar 2026 16:13:53 +0000
ROA not before: Tue 31 Mar 2026 16:13:53 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 59651
IP address blocks: 122.8.44.0/22 maxlen: 22
122.8.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13771 (0x35cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Mar 31 16:13:53 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cbf2c0-5d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:5d:ff:5a:b0:f5:d1:27:8a:d8:a6:41:e2:
d9:53:c3:a2:cd:a7:dd:a2:de:7b:a9:1e:6b:24:0d:
0a:3a:04:0e:85:c8:b7:cf:ea:c0:eb:5b:5f:e8:c3:
7d:e3:d6:eb:0b:f4:1e:fa:29:61:b6:f4:ea:91:5b:
7c:7c:1c:01:34:dc:1a:e6:8e:c8:67:ac:49:bc:00:
95:65:fa:93:76:57:2d:e1:40:8d:6c:90:ef:7a:64:
45:d6:86:db:d0:1f:ad:79:93:58:13:78:36:3c:f7:
7c:7c:a4:19:3b:17:5c:2e:39:4a:22:50:05:65:69:
92:22:34:c4:00:b9:29:85:82:14:d2:e7:86:3e:4e:
f6:fc:2f:57:96:95:1c:29:b5:b4:29:bb:3a:0e:74:
2a:dc:fa:b9:92:78:96:3b:c3:cf:11:d2:4d:59:09:
10:3e:88:a0:be:ec:d6:c7:68:f3:e0:82:04:8e:7a:
99:43:41:4d:5c:86:8c:64:44:8e:90:8f:3c:f6:41:
2d:1a:04:47:09:0f:1a:74:fc:4f:ac:df:f0:96:66:
b5:e2:0d:14:d3:e9:bb:75:83:48:ce:e7:e4:28:f9:
41:03:34:8e:64:93:b3:8f:d1:4d:0f:40:70:c8:1a:
80:8e:23:8e:b5:d8:10:d3:6f:0a:1b:53:42:b9:55:
0a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:7B:7B:67:90:13:9E:71:E3:BC:72:85:40:BF:DA:7A:49:CE:F4
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/DD1805369A8311F0A54CE65CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.8.44.0/22
122.8.92.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:a5:83:be:1d:10:d2:2e:5b:e0:88:43:af:86:1e:a5:03:6c:
e5:61:81:27:e6:5c:b8:57:b9:e1:73:2f:13:42:25:82:79:71:
12:5c:bb:1b:16:7d:ce:dd:3b:25:90:0b:7a:ef:7e:d9:f7:18:
09:5e:2c:8d:1a:cf:87:71:ed:a8:ff:61:ef:c6:1e:eb:43:8f:
df:f0:87:bc:0e:92:ec:ea:4b:b4:22:82:85:3f:4a:43:82:11:
db:26:1f:bc:ac:a6:c0:02:38:87:21:dc:cf:c2:db:cb:61:15:
63:50:5a:13:17:83:5b:30:a5:f9:45:f0:f7:bc:56:9b:3f:0c:
eb:4c:b2:ee:08:46:59:22:50:e5:8f:ae:86:2a:2e:2a:35:5a:
cf:1a:f1:8f:63:d5:f8:41:cc:2e:66:da:02:c3:6f:09:bf:bb:
9d:b4:c8:f0:5e:3a:e3:c3:fe:36:76:07:7f:e5:84:09:99:89:
96:4a:ec:8e:dd:59:0d:4c:18:5c:54:b8:4d:e5:f9:4b:95:e0:
eb:b6:3b:59:b1:3a:8e:9b:0d:d9:ee:b0:10:f3:08:e3:c6:02:
43:68:ee:db:93:ff:56:ad:09:24:8e:98:56:51:f4:4e:c3:2e:
9a:9e:b2:b1:cb:c2:8f:3b:72:30:30:42:24:67:5a:a7:67:2b:
04:36:cc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:43:55 2026 by rpki-client