
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/99B68AAA366311EEB376DC3AC4F9AE02.roa
File: 99B68AAA366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier: hYMNVGKl5jzxF3jAoOCFYow8FG2fD9GWWcC61vry2ek=
Subject key identifier: CD:21:EB:56:1B:7D:FC:5D:55:D1:50:6A:25:36:38:F8:90:A1:45:7E
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 01B1
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/99B68AAA366311EEB376DC3AC4F9AE02.roa
Signing time: Mon 23 Jun 2025 03:22:02 +0000
ROA not before: Mon 23 Jun 2025 03:22:02 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 150686
IP address blocks: 83.118.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Jun 23 03:22:02 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6858c85a-29e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:81:c8:3b:a2:7c:51:b9:fe:d0:06:26:5c:
5c:cb:1f:99:14:3f:2b:50:ab:f8:b3:8a:d3:4e:2a:
d7:17:6a:df:3a:3f:61:c6:c5:40:69:8f:b8:6c:d6:
d4:03:47:72:79:62:28:26:9c:5b:53:12:79:0c:e7:
0d:42:b4:65:26:be:eb:bd:f0:59:a4:41:e2:47:43:
6d:22:1a:36:2f:09:ae:16:c0:b9:7f:dd:ba:1e:ed:
81:02:32:27:a9:1e:0d:49:ae:96:04:44:ee:a9:36:
cf:f6:77:fc:65:b5:ab:eb:7b:5e:e7:20:d8:bf:42:
4d:a8:29:3f:38:65:ea:0e:35:8a:4f:47:ef:73:44:
7c:1a:ee:a3:9a:b9:f8:d4:d9:a9:eb:aa:8f:6d:b0:
7a:e6:ba:33:88:ba:69:0c:cd:7a:fc:49:93:35:99:
82:8e:e3:a7:61:ae:5b:25:fc:57:92:eb:f6:a5:88:
3e:33:3f:d6:1d:40:cc:90:0e:90:a5:9b:cc:b9:73:
38:ec:86:3c:51:b2:27:68:7f:05:31:12:aa:b1:64:
d0:d2:30:2c:5d:36:b2:0f:55:a8:3b:7f:65:30:05:
71:4a:df:06:f6:8d:78:c2:ef:5a:89:14:42:24:db:
82:b4:a1:d3:56:44:56:5f:0d:15:5a:3a:92:83:d4:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:21:EB:56:1B:7D:FC:5D:55:D1:50:6A:25:36:38:F8:90:A1:45:7E
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/99B68AAA366311EEB376DC3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
83.118.91.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:26:c9:f4:0d:28:b6:ba:39:53:4c:8a:6b:ad:5e:1e:ff:51:
7f:ed:72:13:07:2b:ae:f1:96:a7:a1:68:5b:59:7e:a3:51:a1:
45:10:2d:aa:2e:03:01:a4:4a:dd:d6:0b:99:34:86:49:a0:cf:
08:76:02:57:94:11:fc:bb:7c:e5:f5:c2:9c:ba:0a:4a:e2:8b:
c5:2d:50:b4:19:78:83:b0:8d:ec:82:e4:3d:02:a6:38:da:7f:
b2:e4:0a:30:27:dd:46:4b:57:68:15:3e:0b:ea:a3:5a:7d:97:
b7:73:7c:e1:01:1c:e4:33:8b:21:2e:63:40:ed:0d:3d:25:35:
96:c7:89:29:4b:57:c4:74:53:63:fa:d8:ce:5d:d7:68:82:36:
92:9f:a7:24:5c:fe:b7:18:ee:6d:3a:00:d7:0b:ea:aa:2a:ea:
86:d1:6f:90:32:87:dd:23:76:dd:4e:a6:d6:f3:34:79:86:54:
7a:98:98:5b:23:a2:e6:d7:75:cf:6e:b4:e4:c6:92:55:63:49:
85:42:12:df:f5:b8:ed:4b:04:7e:be:d4:79:f7:30:e3:b8:91:
71:83:4b:8b:55:79:dc:b1:6e:ed:3a:97:0f:8a:74:09:a6:53:
fa:5e:a7:94:1d:f7:9b:a0:7b:17:c0:20:1a:f9:1a:17:c9:1e:
e6:4b:dc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:19:36 2025 by rpki-client