
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B77CC7CE526911F0BB1C0885C4F9AE02.roa
File: B77CC7CE526911F0BB1C0885C4F9AE02.roa (raw, json)
Hash identifier: 68pTXufK7LddAJ/ovsiWugm+eSONw87yAnnl1L5uu0s=
Subject key identifier: 81:F3:61:9D:B5:6E:D3:9E:2E:1B:C4:63:14:E1:F3:80:04:3B:33:13
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0800
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B77CC7CE526911F0BB1C0885C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:14:39 +0000
ROA not before: Thu 28 Aug 2025 14:51:01 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150828
IP address blocks: 165.99.234.0/24 maxlen: 24
165.99.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:01 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4ac3f-cf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:d7:f6:14:95:9b:b4:8e:e5:6f:56:e7:f6:
3c:91:7b:5d:65:b9:cb:8a:14:42:3d:ab:e6:f6:4c:
33:33:cf:bc:1b:4f:26:82:57:ce:ca:df:2a:16:b6:
db:f7:1f:5e:03:60:3b:9c:8d:a2:69:30:09:20:a3:
ff:85:6b:37:d1:cc:de:37:e1:0b:b8:9a:f0:98:eb:
59:48:ba:d4:55:b8:12:49:a9:33:dc:7f:05:48:25:
fc:4e:2a:e6:e5:59:9b:e3:e6:a3:93:d5:47:33:19:
a8:cd:cd:4a:c9:0a:b9:38:d1:5a:c5:80:dd:9e:1a:
25:07:f5:be:e0:a0:1f:77:d2:20:40:91:1b:ec:1c:
d1:83:29:44:d1:35:da:b9:12:a6:06:f1:79:e2:cf:
18:6d:6f:72:b1:a7:bc:2f:a9:f8:f5:72:92:95:06:
78:d9:4a:f6:05:a0:5d:fc:c8:66:41:3e:14:44:91:
89:6c:7d:84:3a:e8:25:3f:71:55:36:14:fc:31:c6:
13:8f:86:05:4b:fb:d7:b5:fb:6b:c6:45:25:1e:49:
89:3b:67:96:f4:93:49:13:78:95:46:15:aa:97:9c:
4f:12:e9:88:a6:fb:a8:05:6b:b6:ef:80:87:4e:7e:
fb:92:95:5c:33:96:2f:4f:ea:73:34:22:44:a9:ec:
bd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F3:61:9D:B5:6E:D3:9E:2E:1B:C4:63:14:E1:F3:80:04:3B:33:13
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B77CC7CE526911F0BB1C0885C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.234.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:5b:3c:34:b0:bc:6d:5a:14:32:45:c9:eb:0f:8d:5b:61:b9:
63:c3:0a:c1:0d:7a:3c:2e:1c:33:a1:6c:94:bf:17:92:e9:90:
19:85:59:d3:9a:b7:17:81:4f:3e:55:d3:8a:c9:43:23:79:22:
78:54:3c:5f:0d:a7:87:67:0a:70:c5:3b:b5:74:6e:79:8f:48:
ce:21:29:5f:78:a0:12:5f:66:b1:87:07:e0:3a:1d:d4:cc:70:
ae:cc:97:cd:11:ad:59:7e:9a:af:cd:8b:3e:41:aa:fd:64:88:
2b:9a:ce:91:01:2d:03:3d:f5:c3:76:59:13:ef:64:ef:23:ae:
53:b6:3f:c5:6d:17:6f:5e:d8:12:bc:98:78:56:6e:d6:3f:8c:
67:93:44:79:6e:a7:6f:21:10:70:bf:bd:4a:59:85:73:a5:0d:
80:98:e0:05:d7:78:43:cc:13:9d:52:57:d1:25:76:03:df:5a:
0e:34:bb:36:62:da:31:4a:dd:8b:29:4e:59:4c:b4:da:7a:6e:
0b:70:b6:90:cf:64:a7:fb:be:a9:b8:f8:f1:a9:5d:41:6c:b9:
07:b8:5c:fc:8c:a7:06:40:01:cc:e3:a8:ef:85:ef:30:90:00:
59:d5:2c:2e:cf:e8:82:06:78:a8:d8:42:19:0f:d8:e0:49:ee:
0e:20:41:87
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODI4MTQ1MTAxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWMzZi1jZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAss/X9hSVm7SO5W9W5/Y8kXtdZbnLihRCPavm9kwzM8+8G08mglfOyt8qFrbb
9x9eA2A7nI2iaTAJIKP/hWs30czeN+ELuJrwmOtZSLrUVbgSSakz3H8FSCX8Tirm
5Vmb4+ajk9VHMxmozc1KyQq5ONFaxYDdnholB/W+4KAfd9IgQJEb7BzRgylE0TXa
uRKmBvF54s8YbW9ysae8L6n49XKSlQZ42Ur2BaBd/MhmQT4URJGJbH2EOuglP3FV
NhT8McYTj4YFS/vXtftrxkUlHkmJO2eW9JNJE3iVRhWql5xPEumIpvuoBWu274CH
Tn77kpVcM5YvT+pzNCJEqey99wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIHzYZ21
btOeLhvEYxTh84AEOzMTMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQjc3Q0M3Q0U1
MjY5MTFGMEJCMUMwODg1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWPqMA0GCSqGSIb3DQEBCwUAA4IBAQCKWzw0sLxtWhQyRcnrD41b
YbljwwrBDXo8LhwzoWyUvxeS6ZAZhVnTmrcXgU8+VdOKyUMjeSJ4VDxfDaeHZwpw
xTu1dG55j0jOISlfeKASX2axhwfgOh3UzHCuzJfNEa1ZfpqvzYs+Qar9ZIgrms6R
AS0DPfXDdlkT72TvI65Ttj/FbRdvXtgSvJh4Vm7WP4xnk0R5bqdvIRBwv71KWYVz
pQ2AmOAF13hDzBOdUlfRJXYD31oONLs2YtoxSt2LKU5ZTLTaem4LcLaQz2Sn+76p
uPjxqV1BbLkHuFz8jKcGQAHM46jvhe8wkABZ1Swuz+iCBnio2EIZD9jgSe4OIEGH
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:07 2026 by rpki-client