
$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa
File: 0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (raw, json)
Hash identifier: eGLRs5+xRo2yh8UxiEyYoaUHZFSoi/sB9xgpO/Oq4V8=
Subject key identifier: 06:D7:3E:39:2C:81:60:6B:C6:D2:04:E9:5D:54:80:54:04:F9:4E:57
Certificate issuer: /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F
Certificate serial: 7B
Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:10:02 +0000
ROA not before: Wed 09 Jul 2025 08:09:37 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 393677
IP address blocks: 165.99.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl
rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F
Validity
Not Before: Jul 9 08:09:37 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a59a3a-b152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:0b:d1:4f:49:5f:ce:21:36:cf:01:ae:2c:
5e:e0:d5:c3:01:33:9c:a4:4b:8d:be:3e:c6:0d:4d:
07:51:49:61:37:a4:7b:28:a8:52:95:20:04:5e:68:
12:ae:e0:ca:e7:39:7d:6c:1b:e3:aa:4f:f5:ce:da:
0c:85:e4:89:17:ad:c1:08:64:c3:ff:dd:e1:a3:29:
23:5d:e0:4b:ac:d3:2f:f5:10:b7:90:21:43:69:94:
aa:18:56:b1:c0:b8:9b:a3:c6:9b:df:56:54:66:94:
da:8f:71:4a:ac:c2:b3:12:c2:18:8b:04:02:ef:35:
61:bc:91:26:53:14:6a:86:86:db:93:3b:a2:ea:92:
6d:6b:1c:61:6e:fe:9d:5b:ce:1b:54:a5:50:1b:1e:
a0:8d:71:e6:3a:6c:09:7d:09:ff:2b:51:2f:3a:45:
bc:fb:00:71:62:52:90:ba:12:64:1c:e4:8f:72:4d:
1d:a8:7a:3f:e2:7f:bd:b3:45:fb:3f:28:09:c7:21:
6e:80:03:af:91:91:7d:3b:12:ea:40:ea:aa:71:30:
89:7b:e8:1e:30:a2:c6:df:be:b1:7f:a7:65:66:14:
52:39:0b:c8:4c:47:1d:28:d0:85:62:99:1a:b2:23:
89:e4:5d:ab:1c:06:94:fc:02:60:99:df:75:78:98:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D7:3E:39:2C:81:60:6B:C6:D2:04:E9:5D:54:80:54:04:F9:4E:57
X509v3 Authority Key Identifier:
keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.116.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d1:e5:40:77:06:50:84:0f:2d:e1:af:b3:56:11:de:6c:e5:
25:3b:57:4c:2a:f3:7c:50:30:9d:a5:8f:6a:71:b9:5e:e4:27:
3d:8f:46:2b:26:e7:f2:a3:95:b0:41:11:8d:a0:40:6a:92:26:
07:fd:d2:7b:c3:a4:82:83:6d:a6:d4:67:cf:28:53:3f:e5:0d:
95:b4:70:18:e7:eb:2a:bc:14:7e:ae:82:92:ab:27:14:5d:ae:
ee:88:a8:47:3d:3b:41:aa:ee:f4:87:24:e5:0f:69:1a:3b:55:
06:1d:ee:99:f6:4c:3c:0d:49:bc:de:69:41:c2:8e:82:88:1b:
c3:e2:b6:2c:ae:c0:a2:6e:16:f8:5f:04:3b:8c:1e:21:c0:8b:
31:a6:45:68:3f:d5:56:92:1c:3e:56:d9:06:ef:c3:45:c4:27:
7d:d4:07:b3:a0:ee:52:81:f1:e4:31:23:25:e1:d9:f0:94:25:
91:8e:f7:d9:9a:e5:cd:e7:a0:11:d6:6a:a1:0b:66:82:62:57:
9c:33:36:10:5f:f5:41:93:ed:38:d4:27:73:f5:04:ba:9e:7d:
67:7c:74:eb:c4:2e:ad:86:09:72:50:93:e8:d9:36:72:50:1e:
29:c4:54:bc:3b:82:36:cc:1a:f7:ab:e3:04:1a:fa:6d:6d:5f:
18:ea:04:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:56 2026 by rpki-client