
$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/99D18D463C0211EAA729693AC4F9AE02.roa
File: 99D18D463C0211EAA729693AC4F9AE02.roa (raw, json)
Hash identifier: /lTemBonHucyHdLH99iEZJS0pkpWT8EtwFhDtf78iXA=
Subject key identifier: 98:E4:6C:6E:53:57:8E:8A:93:72:65:D0:01:77:9D:71:23:CF:8B:4C
Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Certificate serial: 0C13
Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/99D18D463C0211EAA729693AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:26:52 +0000
ROA not before: Mon 02 Feb 2026 15:12:06 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 56038
IP address blocks: 137.83.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:36:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3091 (0xc13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Validity
Not Before: Feb 2 15:12:06 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a45abc-4300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:db:d9:80:9f:38:f4:47:85:58:0f:82:7c:
13:ac:1e:45:4d:d8:09:93:80:39:ff:c9:14:5f:65:
01:e2:18:5c:9b:46:24:9a:d3:8d:4c:7a:38:b5:7e:
d9:4c:4b:e3:be:eb:8e:be:0f:e2:15:46:68:a3:88:
73:1a:25:2f:43:0f:72:30:b7:ce:7e:68:94:81:fc:
5e:ea:ce:d8:93:b6:39:a5:3e:e9:2a:59:c3:e5:b8:
a8:be:9d:15:88:45:57:71:be:ac:cf:55:60:bc:6a:
30:b3:b5:e6:79:75:80:ec:18:32:b4:ae:b0:53:ce:
80:1f:dd:a1:c8:3d:f5:35:cf:41:f9:8d:ed:68:bc:
a3:57:b1:81:0c:a3:1e:e5:65:83:d4:d4:21:86:dc:
04:d9:76:83:58:4c:b3:bb:77:55:38:6c:21:ee:7a:
15:75:69:da:51:34:2c:34:0d:a9:f0:1f:f5:aa:3c:
cd:51:5f:ff:9d:13:c1:64:aa:4e:d3:11:bd:48:ea:
33:f5:1a:3a:b7:de:fb:2f:47:db:91:5e:89:e6:99:
2e:1d:40:fe:a4:be:1d:2d:35:15:89:fb:51:37:9e:
e3:48:f0:9f:4a:36:0f:e8:dc:dc:dd:b1:c4:af:e9:
b0:29:f4:1a:0c:d4:33:1e:8f:95:30:97:8e:17:97:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:6C:6E:53:57:8E:8A:93:72:65:D0:01:77:9D:71:23:CF:8B:4C
X509v3 Authority Key Identifier:
keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/99D18D463C0211EAA729693AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
137.83.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ed:2a:ea:85:56:95:19:d0:e4:79:69:4f:28:38:04:05:e2:
66:22:ad:00:fa:9d:06:74:38:ec:4b:4f:66:74:15:53:be:2d:
fc:a6:d0:ad:8e:09:3c:d3:49:1f:4d:e0:da:d3:34:94:a9:4e:
35:2b:7c:3a:83:61:0c:a9:a5:4a:dc:ba:ac:c8:40:b7:8a:c6:
ab:67:0b:cd:d5:e6:a2:47:74:de:c5:f0:12:ef:da:b4:83:2c:
f9:c0:87:15:d8:7f:c1:04:7f:09:d0:b2:64:a6:f8:2e:2c:85:
42:a2:4f:2c:6e:4a:50:a5:f4:71:c4:9a:1d:32:49:03:11:34:
56:7a:0c:8f:81:fd:cc:0a:75:9e:f3:ee:f7:bc:2c:c3:2c:6a:
6d:74:8c:8a:79:19:83:7d:20:5c:9f:e3:ee:29:4b:3e:e4:7b:
3d:60:fb:18:e0:26:9b:7f:e7:5b:08:9a:94:a3:04:64:a9:ea:
0a:ac:6c:32:93:cb:8b:55:10:9c:61:15:ea:5e:14:1c:fd:66:
a3:53:a8:4a:76:59:50:af:5b:49:28:5a:a7:ac:45:f5:38:f1:
a4:48:da:dd:f1:17:c8:38:aa:75:c2:1e:66:24:62:39:b0:88:
c8:87:43:62:53:9e:17:59:0d:79:f4:44:28:52:70:69:b0:55:
10:18:d3:6e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcxQ0IxMTAvBgNVBAUTKDdEMDQ1MTY1QjI5QTY4QUZDQjhCQTgxNTk5Q0UzMDY3
NDU0NEZEOEYwHhcNMjYwMjAyMTUxMjA2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWFiYy00MzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwnbb2YCfOPRHhVgPgnwTrB5FTdgJk4A5/8kUX2UB4hhcm0YkmtONTHo4tX7Z
TEvjvuuOvg/iFUZoo4hzGiUvQw9yMLfOfmiUgfxe6s7Yk7Y5pT7pKlnD5biovp0V
iEVXcb6sz1VgvGows7XmeXWA7BgytK6wU86AH92hyD31Nc9B+Y3taLyjV7GBDKMe
5WWD1NQhhtwE2XaDWEyzu3dVOGwh7noVdWnaUTQsNA2p8B/1qjzNUV//nRPBZKpO
0xG9SOoz9Ro6t977L0fbkV6J5pkuHUD+pL4dLTUViftRN57jSPCfSjYP6Nzc3bHE
r+mwKfQaDNQzHo+VMJeOF5esRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJjkbG5T
V46Kk3Jl0AF3nXEjz4tMMB8GA1UdIwQYMBaAFH0EUWWymmivy4uoFZnOMGdFRP2P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi83QTc1MEEwQTJE
RDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFLX0xpNmdWbWM0d1owVkVf
WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZRUlJaYkthYUtfTGk2Z1ZtYzR3WjBWRV9ZOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTcxQ0IvN0E3NTBBMEEyREQ4MTFFQTlDMzUyMDVEQzRGOUFFMDIvOTlEMThENDYz
QzAyMTFFQUE3Mjk2OTNBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAiVMMMA0GCSqGSIb3DQEBCwUAA4IBAQB67SrqhVaVGdDkeWlPKDgE
BeJmIq0A+p0GdDjsS09mdBVTvi38ptCtjgk800kfTeDa0zSUqU41K3w6g2EMqaVK
3LqsyEC3isarZwvN1eaiR3TexfAS79q0gyz5wIcV2H/BBH8J0LJkpvguLIVCok8s
bkpQpfRxxJodMkkDETRWegyPgf3MCnWe8+73vCzDLGptdIyKeRmDfSBcn+PuKUs+
5Hs9YPsY4Cabf+dbCJqUowRkqeoKrGwyk8uLVRCcYRXqXhQc/WajU6hKdllQr1tJ
KFqnrEX1OPGkSNrd8RfIOKp1wh5mJGI5sIjIh0NiU54XWQ159EQoUnBpsFUQGNNu
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:36 2026 by rpki-client