
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/0BABC0DCB15D11EB8937582CC4F9AE02.roa
File: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (raw, json)
Hash identifier: /IhoZrHLS7mKMxuodlFyZTmLLtfy6GDD39NpDwvO+Xw=
Subject key identifier: C5:23:0E:69:80:38:82:1D:F6:1D:AB:3F:44:5E:B2:7F:F5:BA:45:C4
Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Certificate serial: 0701
Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/0BABC0DCB15D11EB8937582CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:47:42 +0000
ROA not before: Wed 26 Nov 2025 21:13:21 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 65488
IP address blocks: 168.134.3.0/25 maxlen: 25
168.134.3.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1793 (0x701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Validity
Not Before: Nov 26 21:13:21 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46dae-9ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:d6:2b:63:7b:1e:59:35:2f:d2:91:6b:c2:
f4:0d:d5:37:60:e5:b9:ab:79:4c:75:05:12:78:4e:
d7:cd:8d:88:14:65:d3:6f:3a:4f:22:a9:54:05:d7:
78:07:8a:3f:9a:c2:06:cb:dd:50:b5:86:3c:ea:a2:
65:9b:a7:e6:96:49:21:0f:ad:3b:b4:6c:10:45:0c:
8e:11:09:a6:7f:24:0e:81:cf:1b:6b:ee:8c:7b:0e:
a2:67:fd:43:08:ee:77:96:f1:46:32:f5:32:ea:0b:
84:ea:95:e3:04:2c:ff:af:ed:ca:b2:e4:75:ef:6e:
44:59:9f:fe:12:17:ef:79:89:56:f4:b9:2f:41:c8:
92:64:ef:06:85:50:2c:9b:36:e5:dc:36:45:c4:99:
55:35:8d:8a:36:55:99:c0:82:87:8d:7a:41:86:ab:
03:15:1f:0a:ef:b3:61:c4:f7:6c:a2:d0:80:48:ba:
00:15:12:42:46:82:76:c5:ac:52:82:4e:97:ce:c7:
cc:9e:a8:20:e7:12:4c:b9:18:8c:7c:d2:94:63:a0:
82:c6:15:b1:9d:66:bb:f5:6d:bd:58:dc:2b:53:fe:
53:88:95:1d:27:95:ff:7c:92:f3:2e:da:88:0a:32:
cb:95:9b:89:8d:b7:96:07:38:22:59:8b:14:cc:d7:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:23:0E:69:80:38:82:1D:F6:1D:AB:3F:44:5E:B2:7F:F5:BA:45:C4
X509v3 Authority Key Identifier:
keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/0BABC0DCB15D11EB8937582CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
168.134.3.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e5:cf:f3:06:d4:99:c8:a6:11:23:c8:cf:82:1f:0f:a7:f6:
f6:91:5c:39:a1:cc:42:c1:3c:96:bd:8d:b6:12:7b:b1:39:50:
9a:d4:83:84:3f:f9:6a:47:ac:e1:de:06:a2:80:02:24:c0:27:
e3:04:71:52:23:e8:4a:e2:22:f0:92:42:31:c4:47:b6:91:30:
b4:19:6a:07:56:30:6c:45:71:f5:cd:5e:06:3a:95:63:c2:4e:
b0:2d:a3:75:fc:8d:e5:10:5a:47:4b:89:55:34:83:d6:c6:af:
2b:1e:d9:2e:2a:21:20:46:2f:eb:67:1b:34:0f:41:d7:87:77:
09:b0:49:2c:73:84:c0:8d:4f:4b:85:3e:4b:59:15:83:13:78:
bf:e1:38:bb:bb:5a:8d:31:b6:47:10:e5:e7:e8:45:8c:e0:53:
4f:83:7a:ce:9f:ef:c1:db:9c:ed:b1:7a:0b:67:3a:2d:3d:ca:
5f:7b:1c:e9:8f:b4:11:9d:5f:2f:3a:41:7d:4d:8c:bd:1e:7b:
fa:f7:24:c3:1d:2b:71:26:1a:1f:44:10:7d:e3:61:51:c0:55:
e2:6a:e5:00:33:06:a8:bf:21:a3:9a:52:59:d0:7e:12:a2:fb:
cf:d8:71:27:47:25:d9:7b:ae:62:b3:cd:7f:c7:74:60:72:ff:
ca:c2:fc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:01 2026 by rpki-client