
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/D055AA08480111F098A44B5CC4F9AE02.roa
File: D055AA08480111F098A44B5CC4F9AE02.roa (raw, json)
Hash identifier: 271bGx5p6cweTatnCk/v53X55aXxOr6gavN3HpXZVTs=
Subject key identifier: 43:20:6D:A0:D4:B6:C8:F3:19:24:DF:BD:82:80:FA:B0:7B:AF:A4:F7
Certificate issuer: /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Certificate serial: 90
Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/D055AA08480111F098A44B5CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:07:30 +0000
ROA not before: Fri 13 Jun 2025 03:02:11 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 153908
IP address blocks: 165.99.114.0/23 maxlen: 23
165.99.114.0/24 maxlen: 24
165.99.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Validity
Not Before: Jun 13 03:02:11 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3e5b2-ec62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:df:5c:c2:49:c2:0b:d0:b6:93:14:3d:b3:
71:e3:7a:21:2f:d0:7f:78:1a:6a:87:3e:9d:32:c5:
9a:a6:db:9a:3b:ce:5e:bb:cc:8d:5d:8a:55:55:c7:
18:fe:48:86:39:b6:55:50:34:36:95:eb:e3:b3:d1:
a1:da:56:57:9d:70:5b:8a:95:db:15:ea:f4:41:26:
18:ee:58:72:34:47:ef:a5:ab:b9:56:60:72:92:66:
ff:9e:16:3e:54:78:cd:0d:91:b5:30:8b:d7:4d:f3:
94:f4:19:fc:87:ee:91:95:9e:1b:15:5a:a4:f3:95:
b0:4f:a7:01:91:8b:9f:e7:15:5c:11:40:32:6c:8c:
85:39:2c:0a:fd:be:bb:0a:42:23:cb:84:82:07:8d:
9e:a9:d2:b3:92:61:98:3f:86:52:1e:87:9e:b0:0b:
c0:30:b4:ae:50:2e:b1:3b:f2:2c:dc:69:bb:b3:88:
c3:e8:cc:ae:40:74:0e:3f:6f:3a:c3:bc:b5:d2:7c:
e6:f2:66:9a:f9:49:40:00:05:ad:de:5f:24:81:17:
a6:56:6d:84:95:05:8a:21:52:25:a5:af:23:11:ad:
4a:ec:e2:07:4f:6e:fa:ee:c0:7d:5e:3a:74:1b:29:
bf:4d:c2:40:e3:f0:5d:e5:80:a3:8d:9f:38:f0:51:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:20:6D:A0:D4:B6:C8:F3:19:24:DF:BD:82:80:FA:B0:7B:AF:A4:F7
X509v3 Authority Key Identifier:
keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/D055AA08480111F098A44B5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.114.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:2e:cd:d3:a8:da:ba:7f:33:d4:9c:ae:0b:4b:0c:46:5f:19:
81:d6:0e:a6:40:30:32:0e:fe:c3:a6:dc:04:34:6d:06:d2:f9:
c8:98:b0:64:a0:fe:8a:93:a8:45:b2:97:db:43:53:70:df:bf:
fb:4f:83:d2:2e:49:82:38:57:55:41:7a:0f:af:61:7b:a4:38:
ff:59:79:4e:c7:80:e7:79:6d:0d:57:58:b7:1e:2f:1f:21:6a:
0f:62:e7:ab:51:3e:a4:84:93:b3:97:5c:57:e6:b4:43:40:5d:
4c:22:8d:a3:4c:07:20:51:22:a3:b3:bb:86:df:d7:4b:ed:45:
fd:8c:99:58:84:a7:f9:d1:a7:86:60:8e:05:42:e9:e8:49:68:
7a:35:5e:c4:9f:b2:1d:23:4a:ac:e2:d3:3a:73:4b:24:3f:31:
47:ef:d4:ae:b8:90:3d:5e:36:d2:75:bd:7b:50:02:11:58:07:
19:98:d6:f6:b7:80:e9:03:f3:bb:0c:e0:a8:1d:9b:e5:a8:d7:
d1:48:c6:39:55:e8:68:48:ca:fb:01:ae:5c:ba:87:58:03:3d:
1f:de:5a:b1:df:e7:d9:7d:e5:61:e5:40:60:90:b0:84:e0:62:
aa:24:39:40:15:4d:60:7f:c3:cb:04:e0:63:dc:63:5e:8d:ea:
bd:81:64:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:05 2026 by rpki-client