
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/0BBBE2B2E2B211EEACBA3341C4F9AE02.roa
File: 0BBBE2B2E2B211EEACBA3341C4F9AE02.roa (raw, json)
Hash identifier: dwiUCjJJt0eG2N+1FVdoqJWTzPaXWWEUJdKiT+scZJI=
Subject key identifier: 8D:5B:74:20:1D:FE:C4:5C:ED:C2:E3:53:EF:0C:F7:88:75:8D:D6:10
Certificate issuer: /CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Certificate serial: A9
Authority key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/0BBBE2B2E2B211EEACBA3341C4F9AE02.roa
Signing time: Wed 05 Feb 2025 05:07:30 +0000
ROA not before: Wed 05 Feb 2025 05:07:30 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152337
IP address blocks: 157.15.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C779D, serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Validity
Not Before: Feb 5 05:07:30 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a2f211-0f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:77:31:f5:11:39:a9:af:ff:7a:8a:f3:39:
ad:24:a9:9f:54:3e:35:5e:d8:7a:00:5d:2a:e7:e1:
3e:da:c5:b1:9a:7e:b2:7e:b4:e1:01:cd:20:dc:4d:
3f:93:20:ba:cd:89:a9:1a:7b:97:01:3f:90:5b:08:
ee:89:0d:00:cb:a5:e5:77:e1:29:4b:a9:24:5a:cb:
16:20:77:5d:5f:b1:91:98:6d:c2:4e:63:39:e3:3a:
c4:f7:a1:50:e9:e7:d5:0a:fb:ab:86:1f:70:76:d5:
d9:4b:0f:3e:5e:3f:2e:4f:02:da:14:e7:04:c2:00:
f8:87:0b:97:ab:a2:74:59:c5:9d:67:35:b5:50:a2:
07:8b:4f:e1:86:38:83:13:77:11:6f:c1:73:c4:55:
5b:f9:f9:4a:0c:86:78:8b:2d:1f:c6:0a:b2:34:de:
ad:6e:06:ed:f5:5d:bf:ef:59:d4:b3:2e:06:27:68:
75:63:bd:aa:fa:47:42:12:f9:01:12:43:24:8d:8f:
5f:ff:a6:63:e4:07:0b:9c:85:3c:e0:33:35:6d:62:
f1:ee:5a:4e:20:cb:02:e1:f2:12:e8:0d:fc:dc:60:
5c:48:83:86:20:9a:b8:47:92:29:35:02:e3:89:cc:
53:7b:85:85:7d:a8:d6:d3:af:1f:f1:59:ef:d6:d8:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5B:74:20:1D:FE:C4:5C:ED:C2:E3:53:EF:0C:F7:88:75:8D:D6:10
X509v3 Authority Key Identifier:
keyid:34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/0BBBE2B2E2B211EEACBA3341C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.6.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:4c:b8:1e:f5:92:77:1f:cb:0a:d3:0e:67:b5:a2:7f:9f:fe:
94:25:76:f9:6a:ae:f2:fd:36:c4:18:2a:48:9c:9a:71:c1:52:
85:00:55:d0:73:ef:ee:2b:3f:25:a8:e1:cb:ae:50:5f:7b:ff:
33:62:ac:5f:34:7d:14:dc:92:57:eb:c0:76:cf:a9:6c:8a:9a:
98:f2:52:1c:2d:01:a1:8d:f4:cd:c1:95:14:ce:00:65:86:8a:
59:87:18:20:70:f7:ed:e1:72:d6:0d:ca:f4:6d:13:76:14:aa:
84:65:97:12:9a:8a:b8:1e:a9:d8:7f:1e:71:6e:0e:2e:5e:0e:
5c:e1:dd:8c:da:ee:3f:b6:ff:28:31:7b:ba:51:88:b3:b4:f9:
f9:50:18:5f:3d:69:80:74:df:1c:e4:c1:4a:03:db:34:8d:ab:
30:ff:af:52:39:71:e2:19:53:e2:f9:55:b6:4e:2c:0d:0d:fd:
17:ef:d4:b7:fb:5e:65:2b:f2:4d:05:c4:e9:c0:d5:2f:0e:c3:
fc:70:4f:22:0d:b4:25:e8:e9:9a:63:ab:01:be:59:61:ea:22:
7e:a1:b8:af:99:9c:68:d9:07:88:be:cb:a4:1f:64:09:d6:a4:
6d:67:b2:68:35:bc:d8:12:11:61:3b:1a:51:3f:98:76:d4:8a:
7c:fa:e3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:19:15 2025 by rpki-client