
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/E74C08AE4B1911F08F30867AC4F9AE02.roa
File: E74C08AE4B1911F08F30867AC4F9AE02.roa (raw, json)
Hash identifier: hBBegN02Z62Y863ej/zbkPgcNxABVq6jWnQuNefd9is=
Subject key identifier: AD:9F:D0:61:65:A1:FC:68:49:BE:FC:38:58:90:0C:2F:DA:87:21:EB
Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297
Certificate serial: 86
Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/E74C08AE4B1911F08F30867AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:10:31 +0000
ROA not before: Tue 17 Jun 2025 01:25:08 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132372
IP address blocks: 165.99.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl
rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297
Validity
Not Before: Jun 17 01:25:08 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3f477-4587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a8:0e:6b:75:5d:d0:84:86:27:28:f5:43:5a:
e3:8f:83:27:4f:44:28:6a:65:8e:2c:88:28:65:ba:
71:2a:ce:9d:6c:2e:f6:75:b0:af:06:14:10:f9:53:
14:cd:94:a9:52:da:b4:60:ea:a1:55:f3:2d:3b:da:
89:8a:97:55:6c:ca:4f:fd:02:36:f7:ff:0e:3e:a6:
31:26:2e:c7:9c:cf:c0:5c:19:6e:87:4d:e6:ef:82:
54:1b:94:15:46:35:a8:30:41:f9:1a:ea:cf:b3:88:
48:48:d6:b4:49:f6:a7:7d:5a:67:c7:81:cd:92:b9:
7c:6c:6e:26:72:0b:f7:98:8f:bc:54:7e:9a:3c:3e:
3e:06:44:07:29:95:9c:e7:18:8c:2c:a5:5a:d2:c1:
aa:ec:ab:96:f4:52:e8:0f:fe:09:61:69:b5:b1:e8:
a4:83:7c:57:95:93:c2:63:a2:44:49:25:e7:8d:b8:
4e:ef:70:33:1d:ae:b7:1b:ce:a0:4b:e1:d4:8c:c5:
19:5e:4f:27:36:55:4c:e3:08:74:cc:a6:60:75:6c:
60:05:58:8a:6a:48:98:98:30:43:fd:79:b4:48:e8:
89:3c:02:db:50:84:94:82:f4:c4:cd:bc:52:6a:09:
c1:da:a8:fd:fa:45:1a:6a:6d:d4:69:e2:48:0e:39:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9F:D0:61:65:A1:FC:68:49:BE:FC:38:58:90:0C:2F:DA:87:21:EB
X509v3 Authority Key Identifier:
keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/E74C08AE4B1911F08F30867AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.199.0/24
Signature Algorithm: sha256WithRSAEncryption
29:03:a4:f5:8a:db:e9:a9:2b:41:4b:2a:68:98:15:00:7a:72:
eb:11:35:64:7c:98:7f:44:13:f4:92:98:b1:4d:16:c0:1e:f1:
6f:29:98:3a:e5:7b:86:df:e7:9c:be:ea:91:0c:ad:af:37:db:
90:95:99:28:f4:c3:14:be:a3:84:22:25:0e:ce:39:07:71:dc:
82:14:1c:21:28:69:27:e7:e3:94:d3:7d:6d:04:e0:24:ea:4b:
a3:50:f7:05:63:4c:92:91:55:90:6c:d7:25:81:07:69:8b:dc:
a7:01:71:5d:db:b1:78:00:f8:ea:c1:ff:5c:64:f1:42:c9:e5:
dd:55:6b:e6:63:0f:0f:22:00:63:43:8f:8d:88:4e:1b:30:23:
bb:62:21:63:16:e1:25:e5:d4:4e:9f:e8:6c:57:a6:16:92:60:
44:11:b4:5a:2f:44:05:d0:25:f6:69:27:31:33:9d:f3:0c:09:
bc:0a:3f:f2:d1:c0:67:09:04:31:4b:70:0c:6d:e9:7d:63:80:
09:7e:a3:17:5d:3c:a6:be:cb:be:c8:a0:eb:2c:b1:b2:5f:b0:
1b:49:a7:b0:4c:7c:f7:db:f3:71:1f:2c:5f:fd:66:4b:68:6d:
2a:49:41:1d:e5:f7:58:b2:96:d4:1b:a8:b1:f2:58:70:a6:28:
39:57:82:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:43 2026 by rpki-client