
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/C425CEE64B8211F0A94CFD82C4F9AE02.roa
File: C425CEE64B8211F0A94CFD82C4F9AE02.roa (raw, json)
Hash identifier: XTg2evwkR4VvSVQWu251hii2ssGz9ZlroApKBF0azrE=
Subject key identifier: FD:60:7F:70:7B:3A:25:DF:6B:6A:03:F2:CA:B9:21:E5:20:33:FF:89
Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Certificate serial: CC
Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/C425CEE64B8211F0A94CFD82C4F9AE02.roa
Signing time: Thu 21 May 2026 07:39:39 +0000
ROA not before: Thu 21 May 2026 07:39:39 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 58895
IP address blocks: 165.99.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Validity
Not Before: May 21 07:39:39 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a0eb6bb-6370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:e2:7e:7c:55:91:08:dd:83:f1:5c:ac:21:
3f:fe:82:74:58:72:c7:a2:77:85:31:12:89:17:03:
de:69:2b:11:c7:7b:d2:35:87:03:a3:d4:8c:62:d9:
54:24:29:69:ed:76:ff:bc:cf:75:6d:ec:72:c6:44:
5b:3a:b8:a1:1f:b6:89:1c:fd:28:d2:e0:91:1e:5f:
9f:ed:48:f7:70:c9:c5:86:de:3b:16:e8:df:de:44:
e2:98:30:61:9b:04:2f:73:98:16:fa:f8:3f:90:6f:
ea:31:f0:6c:24:3e:3c:5a:24:fc:64:db:7f:03:4f:
c2:9f:f2:96:be:db:fb:01:76:dc:29:df:a8:cf:47:
cc:00:bd:7b:46:e6:60:a2:41:2d:f3:99:b3:cf:64:
f2:cb:5c:c3:fc:d2:81:51:b7:fb:33:51:9a:1a:03:
f6:b9:a7:69:ed:86:fd:aa:97:88:4f:f8:5c:7c:ab:
c1:ba:fb:e5:31:db:ef:8c:d1:b2:ef:53:0e:91:16:
47:e3:30:14:1a:09:31:eb:1b:f3:6e:15:bb:72:5a:
1b:ff:2d:20:eb:2f:53:b9:e2:6a:20:43:48:e8:3c:
3c:8f:ad:1f:75:7c:4f:96:14:f7:b2:3c:a0:22:c4:
2f:82:a8:99:6f:55:28:8e:d3:10:6e:25:e9:fa:00:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:60:7F:70:7B:3A:25:DF:6B:6A:03:F2:CA:B9:21:E5:20:33:FF:89
X509v3 Authority Key Identifier:
keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/C425CEE64B8211F0A94CFD82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.191.0/24
Signature Algorithm: sha256WithRSAEncryption
52:07:0e:7c:ae:25:70:f8:65:a1:37:ff:66:3f:1e:a9:b9:55:
ca:34:fa:88:1c:89:63:6e:e8:47:90:c2:e5:0d:9b:bd:5f:a4:
8a:43:43:27:8e:d8:2c:dd:95:60:ef:17:ef:e4:6f:76:24:c1:
b3:4d:15:a8:f9:45:dd:ab:6e:8c:28:fd:3e:2e:1a:60:c0:ba:
b3:1f:ee:f6:90:f0:b9:59:2e:9d:41:1d:1e:83:d9:2c:f3:57:
ee:8c:13:ac:3a:84:85:c8:4a:83:bb:17:f0:39:1e:5d:37:44:
dc:9a:b2:d3:07:f3:c0:e9:39:72:53:1c:12:84:a6:d9:a7:dc:
26:4a:7d:c0:ae:d9:bd:d7:ee:5d:5c:d1:1f:5a:be:1c:fa:92:
e3:45:4d:63:a8:08:37:2f:14:54:bf:cf:27:a9:cf:f2:4b:8b:
e1:46:8f:5e:b2:94:40:64:b3:c2:cd:69:22:54:e5:94:f3:bb:
55:dd:5b:3f:62:c2:90:e5:a4:d5:ab:d8:b7:0e:25:19:cd:88:
6b:5b:83:d3:5b:d8:c3:ae:d2:bf:14:e3:88:9e:c0:82:d9:a6:
6f:25:82:3e:30:fc:b4:b6:fc:c5:26:e8:8e:c2:29:1c:51:08:
95:be:d7:99:1e:91:57:6c:9f:36:e2:ee:fa:aa:68:05:2c:52:
ca:36:62:63
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVBOEIxMTAvBgNVBAUTKDQxQzc1NzE0Mjk5QTU3OEREMTkwRkQxRjczMDk1NUIx
RkQ5QUMxRjQwHhcNMjYwNTIxMDczOTM5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTBlYjZiYi02MzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyh3ifnxVkQjdg/FcrCE//oJ0WHLHoneFMRKJFwPeaSsRx3vSNYcDo9SMYtlU
JClp7Xb/vM91bexyxkRbOrihH7aJHP0o0uCRHl+f7Uj3cMnFht47Fujf3kTimDBh
mwQvc5gW+vg/kG/qMfBsJD48WiT8ZNt/A0/Cn/KWvtv7AXbcKd+oz0fMAL17RuZg
okEt85mzz2Tyy1zD/NKBUbf7M1GaGgP2uadp7Yb9qpeIT/hcfKvBuvvlMdvvjNGy
71MOkRZH4zAUGgkx6xvzbhW7clob/y0g6y9TueJqIENI6Dw8j60fdXxPlhT3sjyg
IsQvgqiZb1UojtMQbiXp+gDHhQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP1gf3B7
OiXfa2oD8sq5IeUgM/+JMB8GA1UdIwQYMBaAFEHHVxQpmleN0ZD9H3MJVbH9msH0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUE4Qi9CQTA4QUE0MjRC
ODExMUYwOEY2NTUwN0VDNEY5QUUwMi9RY2RYRkNtYVY0M1JrUDBmY3dsVnNmMmF3
ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FjZFhGQ21hVjQzUmtQMGZjd2xWc2YyYXdmUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkVBOEIvQkEwOEFBNDI0QjgxMTFGMDhGNjU1MDdFQzRGOUFFMDIvQzQyNUNFRTY0
QjgyMTFGMEE5NENGRDgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWO/MA0GCSqGSIb3DQEBCwUAA4IBAQBSBw58riVw+GWhN/9mPx6p
uVXKNPqIHIljbuhHkMLlDZu9X6SKQ0Mnjtgs3ZVg7xfv5G92JMGzTRWo+UXdq26M
KP0+LhpgwLqzH+72kPC5WS6dQR0eg9ks81fujBOsOoSFyEqDuxfwOR5dN0TcmrLT
B/PA6TlyUxwShKbZp9wmSn3Artm91+5dXNEfWr4c+pLjRU1jqAg3LxRUv88nqc/y
S4vhRo9espRAZLPCzWkiVOWU87tV3Vs/YsKQ5aTVq9i3DiUZzYhrW4PTW9jDrtK/
FOOInsCC2aZvJYI+MPy0tvzFJuiOwikcUQiVvteZHpFXbJ824u76qmgFLFLKNmJj
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:02 2026 by rpki-client