
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/BB9AC51E2F0D11F1B2108CA79A833773.roa
File: BB9AC51E2F0D11F1B2108CA79A833773.roa (raw, json)
Hash identifier: V/FIY6IBA9sOHywqWzg37fABITREQi7xjxyw7WXMzYE=
Subject key identifier: ED:89:FB:09:17:44:2B:A0:85:18:FB:E3:7C:8F:0B:D3:3D:78:1B:69
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 0851
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/BB9AC51E2F0D11F1B2108CA79A833773.roa
Signing time: Fri 03 Apr 2026 03:32:25 +0000
ROA not before: Fri 03 Apr 2026 03:32:25 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 32787
IP address blocks: 162.128.3.0/24 maxlen: 24
162.128.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2129 (0x851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Validity
Not Before: Apr 3 03:32:25 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69cf34c9-5fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0d:09:c7:b4:0f:6e:59:b9:b4:4d:ca:f1:8a:
07:9f:9b:b8:87:e7:77:2e:c7:a9:04:bc:01:a3:43:
ad:fe:a5:b6:44:59:ac:f6:15:ea:c9:59:63:9d:06:
6c:60:03:10:83:c5:ec:e7:34:86:89:78:19:41:9f:
5d:32:b2:f2:b0:30:a7:aa:dc:df:15:64:03:72:bc:
ad:88:aa:27:16:50:4f:10:58:cf:36:62:4e:bd:4b:
87:8d:20:3e:1f:55:d3:1c:08:9b:0a:ad:4c:f8:e9:
0b:25:56:74:41:94:a3:27:68:a6:20:2e:cb:32:f8:
83:d3:c3:03:a6:e7:ab:13:f6:ac:ab:42:63:3c:7b:
75:ac:9a:e8:dc:8d:64:46:8a:6a:07:a5:8a:b0:12:
30:c8:6f:dd:7c:61:25:ae:d7:0e:2a:1a:0c:4c:95:
a9:5e:e3:d3:56:25:7a:8b:80:c2:f5:7f:cf:39:0e:
c4:67:59:01:2e:03:fd:ad:06:0f:7f:98:1c:f0:1f:
e0:81:2d:32:b9:87:d8:a5:90:27:56:3e:a7:e1:e1:
2f:99:44:78:0d:35:14:9e:2d:54:3f:93:e5:19:0d:
ca:fe:aa:81:e7:60:d5:9b:5a:fa:2b:12:3e:f8:ff:
7c:c9:b3:54:67:c2:8b:0b:81:da:94:e1:9f:1c:24:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:89:FB:09:17:44:2B:A0:85:18:FB:E3:7C:8F:0B:D3:3D:78:1B:69
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/BB9AC51E2F0D11F1B2108CA79A833773.roa
sbgp-ipAddrBlock: critical
IPv4:
162.128.3.0/24
162.128.42.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0d:63:15:4a:a6:56:96:5c:e9:bf:67:99:41:6f:7a:38:7b:
2e:9f:8d:8a:a8:ee:54:18:81:73:27:ea:d6:06:29:94:7c:47:
38:03:b7:96:ce:99:21:f6:99:ca:19:1e:5d:70:bd:48:d8:de:
bb:45:b2:d9:d7:92:cb:00:16:e5:27:59:e3:c6:da:58:e0:dd:
46:3b:b7:15:5a:90:ab:5f:d0:b2:3a:a3:5f:ab:e7:30:95:38:
4f:0f:cf:fd:d1:3c:0c:ef:30:92:33:cb:40:ea:cf:53:e2:9f:
da:1d:a7:a2:c0:bd:dd:f7:40:2c:c6:33:44:bb:5d:ee:0d:c9:
57:60:30:d1:05:3a:f1:94:b8:ca:41:01:95:9d:7d:f0:a3:8a:
47:a3:cc:c1:26:06:b5:8d:bf:c9:d5:a4:d2:35:35:b1:f1:68:
cd:4d:94:28:b7:13:c3:59:7f:0f:15:8e:a8:15:57:32:17:67:
24:69:82:88:35:e2:6d:81:fc:6c:56:87:90:90:c3:3a:8d:b8:
0d:65:bc:40:7d:b8:42:12:03:5b:4e:99:0e:18:50:66:13:2b:
d1:87:b9:e8:33:b2:eb:43:f5:eb:2e:a9:5a:af:43:bd:99:38:
69:d7:3d:b6:89:1a:63:56:02:20:50:48:21:00:69:f3:da:d0:
e4:82:70:8a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE
RTA3MkI3RjMwHhcNMjYwNDAzMDMzMjI1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNmMzRjOS01ZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjA0Jx7QPblm5tE3K8YoHn5u4h+d3LsepBLwBo0Ot/qW2RFms9hXqyVljnQZs
YAMQg8Xs5zSGiXgZQZ9dMrLysDCnqtzfFWQDcrytiKonFlBPEFjPNmJOvUuHjSA+
H1XTHAibCq1M+OkLJVZ0QZSjJ2imIC7LMviD08MDpuerE/asq0JjPHt1rJro3I1k
RopqB6WKsBIwyG/dfGElrtcOKhoMTJWpXuPTViV6i4DC9X/POQ7EZ1kBLgP9rQYP
f5gc8B/ggS0yuYfYpZAnVj6n4eEvmUR4DTUUni1UP5PlGQ3K/qqB52DVm1r6KxI+
+P98ybNUZ8KLC4HalOGfHCT4QwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFO2J+wkX
RCughRj743yPC9M9eBtpMB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4
QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RURCMzcvNERFNjM1RTA3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvQkI5QUM1MUUy
RjBEMTFGMUIyMTA4Q0E3OUE4MzM3NzMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAooADAwQAooAqMA0GCSqGSIb3DQEBCwUAA4IBAQAwDWMVSqZWllzp
v2eZQW96OHsun42KqO5UGIFzJ+rWBimUfEc4A7eWzpkh9pnKGR5dcL1I2N67RbLZ
15LLABblJ1njxtpY4N1GO7cVWpCrX9CyOqNfq+cwlThPD8/90TwM7zCSM8tA6s9T
4p/aHaeiwL3d90AsxjNEu13uDclXYDDRBTrxlLjKQQGVnX3wo4pHo8zBJga1jb/J
1aTSNTWx8WjNTZQotxPDWX8PFY6oFVcyF2ckaYKINeJtgfxsVoeQkMM6jbgNZbxA
fbhCEgNbTpkOGFBmEyvRh7noM7LrQ/XrLqlar0O9mThp1z22iRpjVgIgUEghAGnz
2tDkgnCK
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:27 2026 by rpki-client