
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/72CB80A6B56F11F1B8468D906211F970.roa
File: 72CB80A6B56F11F1B8468D906211F970.roa (raw, json)
Hash identifier: Pc6QXuT7CKKlNzYYO7vzrLK902HOqrCdlzGI/a0qOt0=
Subject key identifier: 0D:71:A0:D7:71:E2:40:94:0B:EE:02:2F:C9:87:EC:C7:4B:85:7C:04
Certificate issuer: /CN=A91AEB42/serialNumber=9138977AABA7F4DE34C68AE34830693BC66D0FCC
Certificate serial: 0B
Authority key identifier: 91:38:97:7A:AB:A7:F4:DE:34:C6:8A:E3:48:30:69:3B:C6:6D:0F:CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTiXequn9N40xorjSDBpO8ZtD8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/72CB80A6B56F11F1B8468D906211F970.roa
Signing time: Mon 21 Sep 2026 03:49:30 +0000
ROA not before: Mon 21 Sep 2026 03:49:30 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 132839
IP address blocks: 166.75.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/kTiXequn9N40xorjSDBpO8ZtD8w.crl
rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/kTiXequn9N40xorjSDBpO8ZtD8w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTiXequn9N40xorjSDBpO8ZtD8w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEB42, serialNumber=9138977AABA7F4DE34C68AE34830693BC66D0FCC
Validity
Not Before: Sep 21 03:49:30 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6ab0a94a-f91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:11:66:19:e3:60:57:f4:fe:f4:13:a1:ef:
4e:6b:4d:d4:fd:d7:2c:fe:e9:89:e6:c5:5e:06:b0:
dd:57:77:c5:e8:ec:56:c3:f6:42:5d:da:b2:6e:d2:
65:24:a4:a9:11:24:51:03:df:b5:b4:2b:00:16:1b:
dd:c5:4c:a8:71:a2:7b:8a:e1:e2:11:90:4f:e6:da:
ff:ce:4a:86:73:b1:80:57:87:55:fd:36:9c:65:2e:
28:a1:8a:9c:4b:ca:70:45:82:a0:71:27:d4:aa:ed:
4a:9d:01:51:25:2e:e6:a2:59:36:d6:36:1c:69:0e:
a9:97:35:48:64:98:bb:60:1b:70:2c:f7:6c:4b:97:
82:b2:0b:25:3a:13:87:b0:c9:5d:32:3f:26:b3:35:
30:62:6b:ac:78:90:cd:16:9b:6e:80:db:a1:1b:7b:
fc:c9:4a:16:99:c4:40:81:db:b5:bb:27:73:12:78:
ba:ee:75:3f:61:9c:96:a5:c6:e2:9d:a0:d3:66:eb:
23:d4:6c:0d:88:ef:cd:94:7e:59:91:49:ab:42:89:
78:8b:42:db:31:6c:29:0f:fb:60:db:63:c2:b9:4e:
87:0e:77:8f:76:b7:61:66:9b:22:5a:28:d8:21:61:
c6:a0:ce:3f:57:19:11:d5:ef:58:7a:f7:a6:87:b3:
d6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:71:A0:D7:71:E2:40:94:0B:EE:02:2F:C9:87:EC:C7:4B:85:7C:04
X509v3 Authority Key Identifier:
keyid:91:38:97:7A:AB:A7:F4:DE:34:C6:8A:E3:48:30:69:3B:C6:6D:0F:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/kTiXequn9N40xorjSDBpO8ZtD8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTiXequn9N40xorjSDBpO8ZtD8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/72CB80A6B56F11F1B8468D906211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
166.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:2e:2c:46:4f:85:9a:c2:c4:8b:bc:50:37:ae:f3:c3:04:60:
cc:d0:8e:64:41:db:df:8d:d6:48:6b:af:b5:62:41:18:4b:f9:
30:6f:66:3b:91:22:4b:1a:58:3c:0e:83:bd:c2:b0:c1:f6:c8:
c6:7c:85:d8:c3:65:4d:f3:79:c9:90:7b:25:0f:e2:5d:74:f9:
c1:be:c6:f2:a4:3b:1c:fc:18:df:11:34:0a:5d:92:7d:63:b9:
1e:f6:f3:fa:12:0e:23:28:ff:d3:e3:4f:17:56:0b:8f:7d:5f:
6c:ca:12:fb:89:a1:75:02:b5:11:a7:21:2e:e8:09:c3:fd:70:
b1:d8:fc:db:1f:56:07:45:d8:ea:ba:5b:d3:b5:83:89:2c:9b:
c9:ea:4a:33:c2:b1:95:79:fb:4e:14:fc:c7:ab:c1:ba:77:e1:
a3:fe:6e:f8:c5:83:4e:cb:47:d5:86:2c:de:8c:3f:66:7f:4c:
c4:a0:a6:b4:61:94:22:0b:0d:43:b2:ef:55:3e:ba:ac:47:79:
b2:84:40:e5:de:a8:e5:2e:96:83:ac:cc:16:e9:bd:6b:dd:d5:
40:63:0b:ad:15:99:50:aa:2f:21:0b:f0:69:68:2b:15:31:52:
3d:a2:99:77:d6:97:80:00:ba:ac:aa:78:55:5b:15:af:13:d3:
9d:c4:e5:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:48:43 2026 by rpki-client