
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CB4E186A30E111F09B76D311C4F9AE02.roa
File: CB4E186A30E111F09B76D311C4F9AE02.roa (raw, json)
Hash identifier: iU6Wj2L6dhe3grsmDUQsEWobs2LTk0gYMSSAmstcjt8=
Subject key identifier: AD:B5:6D:8F:20:E0:76:3E:0E:BC:6B:EE:AD:03:48:BD:94:77:9A:22
Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409
Certificate serial: EF
Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CB4E186A30E111F09B76D311C4F9AE02.roa
Signing time: Fri 05 Jun 2026 07:39:21 +0000
ROA not before: Fri 05 Jun 2026 07:39:21 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 35876
IP address blocks: 165.99.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl
rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409
Validity
Not Before: Jun 5 07:39:21 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a227d29-6bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:23:2c:98:ce:85:26:f8:74:e5:b6:ff:72:
de:c0:11:32:38:b9:f7:8e:2a:3a:63:f8:9a:7d:f4:
13:6c:df:5c:33:0a:48:a1:1e:44:ba:73:37:f9:87:
65:11:19:28:11:15:b2:27:2c:66:60:72:57:fb:4c:
6c:1a:85:f6:8b:bb:32:bc:3a:37:d3:29:23:10:68:
e3:37:58:29:6c:13:63:04:f4:f3:da:6a:7f:45:17:
82:11:1c:54:47:41:b7:fa:41:a3:b8:59:fe:1e:5e:
17:4c:ab:73:4c:83:75:b3:0c:77:a2:2c:11:10:c4:
24:8f:c6:9e:7b:c9:9c:ee:33:8b:cc:2c:f9:3f:07:
f6:43:ad:bc:eb:97:46:28:21:36:b7:2a:ac:29:63:
42:70:29:a8:c4:d7:98:c9:23:6b:45:50:68:81:c3:
75:ba:2f:49:98:57:04:76:fa:47:1d:4f:e0:85:93:
4c:fc:a5:b5:8b:d6:79:a8:5b:c9:2f:b6:98:1c:5c:
31:6b:4a:65:16:23:e8:1e:20:3f:29:6c:03:45:d3:
4e:cd:7e:12:a6:df:90:a5:ad:80:1c:69:5c:79:82:
31:f3:e2:c8:72:18:d4:c1:a6:e1:00:59:3e:e4:ea:
af:20:d6:30:49:92:aa:0b:2a:e3:c2:c4:a0:c2:23:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B5:6D:8F:20:E0:76:3E:0E:BC:6B:EE:AD:03:48:BD:94:77:9A:22
X509v3 Authority Key Identifier:
keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CB4E186A30E111F09B76D311C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.42.0/23
Signature Algorithm: sha256WithRSAEncryption
96:1e:e9:da:29:6b:03:48:9e:89:e4:af:7b:fb:83:e3:49:e9:
a3:ca:14:53:b3:ac:93:fb:1f:78:74:81:d6:5b:95:5e:61:8c:
1c:2e:14:27:60:c1:f9:0a:a3:22:07:95:4a:40:05:ce:c8:af:
28:5e:2b:25:45:df:d5:41:3a:2f:12:6a:5a:af:f1:7c:a5:bd:
ca:f4:93:f9:b0:dc:2a:a7:c1:e6:21:ea:df:7b:ee:f8:84:a5:
30:c9:7e:3d:53:c9:63:06:0d:e5:f8:83:ab:5d:d9:94:5e:6b:
cf:45:17:0d:f7:2d:73:03:c8:3e:69:5e:07:f0:54:03:c2:e8:
44:a7:f4:13:9e:54:62:0e:30:55:f0:f7:64:8a:3e:41:41:65:
b0:a1:8f:60:5e:e0:9a:0e:ca:87:26:a8:4f:97:46:45:26:93:
25:6d:ab:fd:f8:32:18:df:1a:83:37:2e:c2:65:0b:93:56:24:
c7:3d:37:b0:37:ce:2b:47:b0:ec:4a:f0:69:6c:6b:af:e3:02:
cd:07:57:d2:91:07:d7:26:f1:54:e0:26:62:78:3c:0b:f7:b3:
bc:62:38:2c:62:58:04:73:5f:1c:dc:00:56:41:1a:57:56:47:
c6:a2:ad:4e:32:1b:95:9a:b6:7b:8d:7d:5f:d2:21:e4:21:99:
22:04:66:74
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURGQzkxMTAvBgNVBAUTKDc2NjVFMjgzNUQxNjAwODVFMzFFQzI0NTIyMkQ0QjJG
N0U0ODQ0MDkwHhcNMjYwNjA1MDczOTIxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIyN2QyOS02YmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZcjLJjOhSb4dOW2/3LewBEyOLn3jio6Y/iaffQTbN9cMwpIoR5EunM3+Ydl
ERkoERWyJyxmYHJX+0xsGoX2i7syvDo30ykjEGjjN1gpbBNjBPTz2mp/RReCERxU
R0G3+kGjuFn+Hl4XTKtzTIN1swx3oiwREMQkj8aee8mc7jOLzCz5Pwf2Q62865dG
KCE2tyqsKWNCcCmoxNeYySNrRVBogcN1ui9JmFcEdvpHHU/ghZNM/KW1i9Z5qFvJ
L7aYHFwxa0plFiPoHiA/KWwDRdNOzX4Spt+Qpa2AHGlceYIx8+LIchjUwabhAFk+
5OqvINYwSZKqCyrjwsSgwiOd5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK21bY8g
4HY+Drxr7q0DSL2Ud5oiMB8GA1UdIwQYMBaAFHZl4oNdFgCF4x7CRSItSy9+SEQJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREZDOS84RDM1RTgyRTMw
MkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJWGpIc0pGSWkxTEwzNUlS
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MURGQzkvOEQzNUU4MkUzMDJDMTFGMDg3NzY0QTJCQzRGOUFFMDIvQ0I0RTE4NkEz
MEUxMTFGMDlCNzZEMzExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWMqMA0GCSqGSIb3DQEBCwUAA4IBAQCWHunaKWsDSJ6J5K97+4Pj
SemjyhRTs6yT+x94dIHWW5VeYYwcLhQnYMH5CqMiB5VKQAXOyK8oXislRd/VQTov
Empar/F8pb3K9JP5sNwqp8HmIerfe+74hKUwyX49U8ljBg3l+IOrXdmUXmvPRRcN
9y1zA8g+aV4H8FQDwuhEp/QTnlRiDjBV8Pdkij5BQWWwoY9gXuCaDsqHJqhPl0ZF
JpMlbav9+DIY3xqDNy7CZQuTViTHPTewN84rR7DsSvBpbGuv4wLNB1fSkQfXJvFU
4CZieDwL97O8YjgsYlgEc18c3ABWQRpXVkfGoq1OMhuVmrZ7jX1f0iHkIZkiBGZ0
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:44:36 2026 by rpki-client