
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/991FC9309CFA11F08F0A1549C4F9AE02.roa
File: 991FC9309CFA11F08F0A1549C4F9AE02.roa (raw, json)
Hash identifier: vBEx8MN3paA8oMvLUSfioDhDYGeEtTZ7/oH2tL94g1c=
Subject key identifier: E9:70:8A:1B:31:03:4F:C1:64:DF:2A:39:C9:8F:A2:CB:78:12:33:8B
Certificate issuer: /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Certificate serial: 53
Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/991FC9309CFA11F08F0A1549C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:17:25 +0000
ROA not before: Tue 24 Feb 2026 08:56:57 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 154022
IP address blocks: 165.101.130.0/24 maxlen: 24
165.101.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl
rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Validity
Not Before: Feb 24 08:56:57 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3d9f5-7b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:a2:bb:c4:5f:d4:8c:47:18:66:62:eb:fe:
27:67:9d:2a:4d:de:dd:75:cf:4d:42:83:d9:59:4a:
79:9e:44:57:a0:b8:ee:8c:12:f2:07:a7:55:68:c0:
b2:e7:36:95:ac:5a:26:80:d7:c0:f8:0b:aa:72:b8:
68:e4:4b:cf:83:a6:32:f3:33:77:5e:70:b8:0d:68:
88:b1:3c:ac:7a:45:3a:1a:65:de:91:68:22:53:11:
6a:bb:ab:1b:80:43:fd:26:55:c0:3d:0a:03:c6:2b:
f3:70:09:ef:b9:45:ca:ea:82:80:0b:a9:45:b5:59:
ec:8f:44:a3:69:14:30:12:8d:aa:b9:3a:ef:15:e7:
2d:69:f2:32:a1:3f:7f:cf:67:9b:df:ce:45:f3:6f:
8c:68:b8:f2:a3:c5:b7:1e:ba:7d:e4:79:e5:63:30:
c0:c4:20:a6:07:0a:1e:d0:4f:f7:ef:04:ac:4c:3a:
1b:e4:29:fa:01:e5:ee:15:02:a4:0f:4f:91:d9:99:
bd:90:44:f4:0b:da:0f:ab:6f:13:16:82:6b:c7:5e:
ce:ee:92:a8:e2:2b:ec:73:97:8d:34:3c:b1:b2:56:
4b:ba:ad:74:db:cb:2e:7b:e4:5c:95:36:72:2f:e6:
1f:36:45:eb:02:4f:e9:94:52:7d:df:68:4b:bf:02:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:70:8A:1B:31:03:4F:C1:64:DF:2A:39:C9:8F:A2:CB:78:12:33:8B
X509v3 Authority Key Identifier:
keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/991FC9309CFA11F08F0A1549C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.130.0/23
Signature Algorithm: sha256WithRSAEncryption
16:93:e1:f3:14:6a:5e:83:9b:17:96:d3:0f:f5:fd:11:96:95:
e8:3a:fb:62:45:15:26:7b:01:b8:8f:38:6d:71:10:08:97:86:
96:3e:96:30:69:76:53:c0:cc:a6:cb:3d:81:d3:a4:66:7d:1d:
76:78:1a:b7:63:75:84:e1:56:56:22:86:f3:52:2b:13:7d:50:
c5:90:d6:0e:c2:4f:a4:14:bf:25:10:aa:39:55:68:f7:05:2a:
2e:5b:2c:ba:d8:85:1a:c4:64:ef:b5:04:b0:c9:97:02:88:42:
4c:ad:79:cc:f7:ae:4d:c1:74:62:ea:2c:34:10:d2:29:47:b9:
c3:75:0d:29:7a:d1:b0:3c:a9:ea:e1:63:6f:39:49:65:f7:d7:
5b:3b:9f:89:4e:c3:a8:6e:78:eb:ac:af:84:8d:e0:1e:a4:a3:
dc:af:10:2c:c2:d5:04:4b:c4:58:0b:b3:92:78:1a:63:ed:f0:
43:b0:68:5a:f1:63:fa:6d:c7:72:0c:a2:f8:62:da:51:6f:71:
7e:d3:a5:93:ea:2f:6b:56:64:22:a2:50:d3:b1:0b:92:32:18:
1f:0c:62:c8:64:5f:ac:29:91:aa:0c:a5:0c:a2:c1:98:77:77:
b6:84:8b:ee:b9:72:1d:a5:0e:b6:41:11:9b:97:60:fb:96:30:
01:f8:28:a4
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NTI1OTExMC8GA1UEBRMoNzQ1MDM2MDk3NDI5Q0MxQUM3NkM0Qzk5ODk4RDA2Rjgz
RTA3NUMxMzAeFw0yNjAyMjQwODU2NTdaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkOWY1LTdiMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEtaK7xF/UjEcYZmLr/idnnSpN3t11z01Cg9lZSnmeRFeguO6MEvIHp1VowLLn
NpWsWiaA18D4C6pyuGjkS8+DpjLzM3decLgNaIixPKx6RToaZd6RaCJTEWq7qxuA
Q/0mVcA9CgPGK/NwCe+5RcrqgoALqUW1WeyPRKNpFDASjaq5Ou8V5y1p8jKhP3/P
Z5vfzkXzb4xouPKjxbceun3keeVjMMDEIKYHCh7QT/fvBKxMOhvkKfoB5e4VAqQP
T5HZmb2QRPQL2g+rbxMWgmvHXs7ukqjiK+xzl400PLGyVku6rXTbyy575FyVNnIv
5h82ResCT+mUUn3faEu/ApFLAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU6XCKGzED
T8Fk3yo5yY+iy3gSM4swHwYDVR0jBBgwFoAUdFA2CXQpzBrHbEyZiY0G+D4HXBMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MjU5L0ZGOTA5MjhDOUNG
ODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJySGJFeVppWTBHLUQ0SFhC
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZEZBMkNYUXB6QnJIYkV5WmlZMEctRDRIWEJNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTI1OS9GRjkwOTI4QzlDRjgxMUYwODgxMkRFMUVDNEY5QUUwMi85OTFGQzkzMDlD
RkExMUYwOEYwQTE1NDlDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGlZYIwDQYJKoZIhvcNAQELBQADggEBABaT4fMUal6DmxeW0w/1/RGW
leg6+2JFFSZ7AbiPOG1xEAiXhpY+ljBpdlPAzKbLPYHTpGZ9HXZ4GrdjdYThVlYi
hvNSKxN9UMWQ1g7CT6QUvyUQqjlVaPcFKi5bLLrYhRrEZO+1BLDJlwKIQkytecz3
rk3BdGLqLDQQ0ilHucN1DSl60bA8qerhY285SWX311s7n4lOw6hueOusr4SN4B6k
o9yvECzC1QRLxFgLs5J4GmPt8EOwaFrxY/ptx3IMovhi2lFvcX7TpZPqL2tWZCKi
UNOxC5IyGB8MYshkX6wpkaoMpQyiwZh3d7aEi+65ch2lDrZBEZuXYPuWMAH4KKQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:39 2026 by rpki-client