
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0BB5ECE8697611F18B2B119D7D47A888.roa
File: 0BB5ECE8697611F18B2B119D7D47A888.roa (raw, json)
Hash identifier: jFKWCgw2IaP+V8gXvqed4I97VaiNX5egdl68CteD0u4=
Subject key identifier: 94:70:C7:D2:82:FA:D0:42:C1:C6:3F:5C:7C:87:F8:7E:57:EA:C0:34
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 08CD
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0BB5ECE8697611F18B2B119D7D47A888.roa
Signing time: Tue 28 Jul 2026 22:43:52 +0000
ROA not before: Tue 28 Jul 2026 22:43:52 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 29752
IP address blocks: 129.227.123.0/24 maxlen: 24
162.128.104.0/24 maxlen: 24
162.128.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2253 (0x8cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Validity
Not Before: Jul 28 22:43:52 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6930a7-df02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:e4:f6:02:ad:15:24:ac:63:1f:0c:df:75:
cb:ef:2c:e3:d4:b3:7a:38:fc:51:a7:e6:cf:3d:9c:
8a:7d:7b:f4:46:46:60:43:c5:75:e9:dc:30:76:cb:
a3:fe:04:5a:20:59:b5:73:dc:e7:59:77:17:5d:d2:
2c:15:ac:23:71:47:e8:31:e8:f3:df:7a:84:d2:bf:
95:c3:5a:54:12:91:64:0b:4b:b5:36:d5:1d:f5:6f:
79:a8:91:0e:9b:82:26:da:46:e9:23:e8:2f:30:67:
d7:b3:03:0b:25:67:7d:21:04:5b:d9:e0:51:c2:37:
bf:f1:9d:d4:da:cb:ae:f3:7b:3f:52:c4:53:f5:e6:
42:74:17:61:cf:6b:3e:56:d1:d0:a6:fd:ac:0c:86:
15:22:1d:62:ca:30:55:b0:1d:2d:73:a9:a2:a8:de:
26:ef:41:be:27:9d:61:22:c6:0e:f2:1f:a7:2a:2b:
05:1c:d1:0b:0b:48:e7:ec:b0:17:3f:0e:80:3b:9c:
30:97:37:ee:fa:dd:31:b3:43:94:83:de:df:b6:c3:
31:a7:45:df:41:8f:d0:b5:9a:71:fd:9c:eb:ce:54:
c0:32:a8:78:d8:5a:56:5b:c3:c2:a6:ee:a2:25:cf:
a9:35:32:af:b3:aa:75:46:ea:d0:6b:d7:9c:11:e9:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:70:C7:D2:82:FA:D0:42:C1:C6:3F:5C:7C:87:F8:7E:57:EA:C0:34
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0BB5ECE8697611F18B2B119D7D47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
129.227.123.0/24
162.128.104.0/24
162.128.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5e:29:f0:da:dc:11:5f:29:54:3b:28:8c:57:15:01:85:08:
f3:63:8f:ef:c6:65:8f:90:a2:20:27:15:13:69:c4:0b:a8:63:
25:f9:ed:1a:1d:b1:25:f2:b4:c4:38:24:8a:d5:6e:14:e5:aa:
99:51:3f:da:bc:1a:21:4b:a8:87:ec:a0:4e:6b:c0:4e:8a:7f:
bd:b2:35:a8:0c:64:1d:a9:ed:28:24:f1:62:54:7a:96:b6:d6:
9f:eb:af:50:a7:fa:ca:c0:0e:e3:5d:24:60:58:79:92:52:21:
0b:b6:91:2b:fa:35:f9:0d:2a:0d:38:bd:c5:b6:fe:5f:81:9f:
85:71:ac:6f:16:7f:8d:ac:78:7a:19:87:af:18:fc:fa:20:a2:
4e:00:7a:00:54:43:54:e2:31:c5:96:b3:fc:e8:95:27:ce:95:
30:54:c9:b7:61:a7:b2:e5:10:77:e9:8f:7f:92:43:15:00:62:
22:ba:3f:75:6e:3a:d3:e1:f9:aa:5a:85:94:03:ee:a2:b7:17:
ef:34:64:47:c3:5b:01:89:0d:9b:0c:c6:62:cb:1f:79:37:b1:
96:36:99:71:65:c1:f6:c6:c5:ea:08:7b:96:73:f9:19:93:05:
d9:9d:90:7c:14:f6:ba:19:5e:09:51:91:2a:f9:ab:fb:aa:84:
e0:40:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:54:11 2026 by rpki-client