
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/BBCDD19C90D411F1867D676D4211F970.roa
File: BBCDD19C90D411F1867D676D4211F970.roa (raw, json)
Hash identifier: lDAfYAyrz14mqZWGqatOmeRWP2NtYAeHAWJKTwXbB8I=
Subject key identifier: 91:A7:71:96:8D:D5:D2:36:5C:22:13:8F:30:95:2E:0F:3A:43:C1:D2
Certificate issuer: /CN=A9155C10/serialNumber=08290E9EEF0333D2E4BF5CEE7BC0E239981E354F
Certificate serial: 02
Authority key identifier: 08:29:0E:9E:EF:03:33:D2:E4:BF:5C:EE:7B:C0:E2:39:98:1E:35:4F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CCkOnu8DM9Lkv1zue8DiOZgeNU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/BBCDD19C90D411F1867D676D4211F970.roa
Signing time: Wed 05 Aug 2026 13:51:18 +0000
ROA not before: Wed 05 Aug 2026 13:51:18 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154799
IP address blocks: 160.236.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.crl
rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CCkOnu8DM9Lkv1zue8DiOZgeNU8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155C10, serialNumber=08290E9EEF0333D2E4BF5CEE7BC0E239981E354F
Validity
Not Before: Aug 5 13:51:18 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a733fd6-367c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:46:3b:21:01:89:4c:48:60:58:a7:10:10:
2d:73:a6:5f:92:13:ea:06:b5:81:68:96:66:13:e1:
87:58:21:7b:69:e1:c0:e9:4b:5c:8a:75:fd:ab:96:
b1:2a:82:86:2d:38:27:c0:d3:1a:c4:1c:de:04:e1:
34:8e:10:9d:7c:e0:5e:f5:52:8e:78:92:14:93:2b:
63:9e:42:e6:d1:47:31:c7:30:9c:a6:f5:a4:6d:a3:
53:3e:d5:0d:ae:c3:01:b9:4d:da:96:53:7c:0d:8a:
42:c1:06:c0:3b:05:87:17:0e:5c:63:38:fc:14:a6:
b3:c7:d7:33:e1:fc:7a:8b:bb:9d:61:6c:ea:54:e4:
66:f3:6f:5f:4c:d9:0e:1e:fc:ca:c3:64:39:21:06:
80:a4:5a:00:07:b6:46:11:36:f3:60:02:f0:ab:0f:
68:71:a0:dd:13:12:d0:6d:e5:79:10:d1:d0:63:2d:
21:fa:bc:c2:e5:93:f6:62:e5:9b:2f:a8:25:aa:e4:
9d:b0:db:67:46:ba:89:dc:46:65:d1:1d:87:b4:01:
24:cb:22:25:40:f6:1b:e3:47:d8:c1:bb:6f:b3:09:
9d:02:62:92:2f:47:7e:48:88:fb:07:4d:eb:fe:97:
f3:72:e5:de:65:9f:bd:5d:09:3f:12:ee:2a:64:07:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A7:71:96:8D:D5:D2:36:5C:22:13:8F:30:95:2E:0F:3A:43:C1:D2
X509v3 Authority Key Identifier:
keyid:08:29:0E:9E:EF:03:33:D2:E4:BF:5C:EE:7B:C0:E2:39:98:1E:35:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CCkOnu8DM9Lkv1zue8DiOZgeNU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/BBCDD19C90D411F1867D676D4211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.233.0/24
Signature Algorithm: sha256WithRSAEncryption
49:51:26:60:68:23:32:35:77:61:94:f6:3b:da:18:e1:b4:1a:
4b:ce:69:98:3e:7a:7d:05:39:b2:18:39:7a:dc:ff:e5:c8:60:
e0:bb:db:7f:69:3c:91:07:d7:3d:d3:8e:a5:b3:d6:cc:62:ae:
6f:ea:3f:4a:84:4a:80:e1:7f:f3:79:97:85:58:5f:77:12:96:
2d:03:e8:fa:9f:e4:6e:f3:c1:70:3d:f2:4d:ac:c4:38:26:a7:
0c:dc:a3:ba:f0:27:ca:7d:8d:44:88:8d:20:81:25:5c:fb:3d:
d9:8d:cd:c0:c7:06:d9:81:84:c8:d8:31:f3:94:df:69:07:4c:
0b:a3:43:ac:a2:22:14:24:2c:a5:9a:fb:ca:0f:65:78:1d:eb:
fc:fb:a9:81:a7:79:ce:79:fe:8a:64:68:fb:6a:25:24:98:ee:
16:6f:e1:d5:9d:fa:71:a7:35:a0:8c:fe:a0:f2:9f:8c:c5:79:
04:99:6b:19:80:45:5a:e6:47:05:b9:64:5d:6d:66:15:a1:08:
ee:fe:b9:d6:fe:79:37:c3:b3:c7:3e:16:3f:9a:fe:d9:12:89:
57:57:70:df:ae:1d:32:31:a0:46:4c:86:28:2f:44:7d:b5:9d:
9e:e7:c1:13:3b:79:ce:d3:2f:d1:3e:94:ae:29:b8:f7:5d:a8:
23:5f:9c:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:11:03 2026 by rpki-client