
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/537A2262F2D211F0BAE73FD33C6F56BC.roa
File: 537A2262F2D211F0BAE73FD33C6F56BC.roa (raw, json)
Hash identifier: dMndGGXMF1UUV3V1XnDiN6BWOBr7tp/sHPGvsw6xkRE=
Subject key identifier: 29:0D:20:E9:8C:FC:F5:16:D7:2B:D2:B4:15:3F:C9:4D:2E:02:9B:CC
Certificate issuer: /CN=A91CAA8A/serialNumber=94C643E16D04A7738BC72B5B107E05B161614013
Certificate serial: 1B
Authority key identifier: 94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/537A2262F2D211F0BAE73FD33C6F56BC.roa
Signing time: Sun 01 Mar 2026 05:43:07 +0000
ROA not before: Fri 16 Jan 2026 11:56:00 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 153932
IP address blocks: 165.99.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl
rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA8A, serialNumber=94C643E16D04A7738BC72B5B107E05B161614013
Validity
Not Before: Jan 16 11:56:00 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3d1eb-0b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:a6:e6:df:2d:1a:51:73:28:58:78:f7:51:
75:22:72:cc:5b:69:b8:f4:29:93:6e:19:a3:c8:22:
ef:91:af:09:92:13:f9:b3:e9:42:f0:c2:c9:82:62:
14:d3:f7:1a:57:0e:84:23:d2:4a:ec:b3:60:a3:68:
a9:7f:1c:bc:ce:4a:40:bb:09:11:69:53:c2:6e:13:
04:d9:24:60:90:cf:9a:a5:65:39:a5:68:c4:17:16:
5e:ca:c2:e3:5a:68:78:3b:07:75:8d:fd:80:f0:28:
11:14:fc:26:3c:b6:f4:f9:a4:16:c3:1b:37:e3:f6:
cd:a8:a7:61:ae:c5:38:30:5d:11:8d:b6:74:f4:ad:
56:d1:11:4d:00:97:38:99:f1:46:4a:98:ab:d1:e7:
b6:cf:9d:8f:25:3f:a4:00:40:0c:15:fa:a5:9a:90:
c4:9d:4d:a0:9d:3e:35:a1:8d:4d:d3:99:c9:ce:57:
fc:bf:b6:3e:0b:f5:85:83:9a:95:71:ee:e7:20:fa:
6e:28:e8:a0:1c:be:e3:54:c7:3c:80:e2:ea:2d:98:
23:3d:e6:94:e8:e1:87:d5:85:68:8d:5e:0a:2e:e8:
01:be:09:9e:c0:79:f2:d4:87:46:65:1f:94:61:e0:
e7:bb:e6:35:5e:44:44:4c:b3:b9:54:e6:48:c8:87:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0D:20:E9:8C:FC:F5:16:D7:2B:D2:B4:15:3F:C9:4D:2E:02:9B:CC
X509v3 Authority Key Identifier:
keyid:94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/537A2262F2D211F0BAE73FD33C6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:53:dc:6a:d2:7e:61:7b:b7:18:65:28:27:d6:1e:bb:9b:72:
5f:78:c1:94:b0:f1:55:86:da:2c:eb:b0:48:19:0f:39:e2:b6:
a9:a7:ad:7b:86:36:d4:2f:2b:c9:30:49:54:11:a7:cf:a0:0b:
4e:e7:0e:12:59:f6:b8:5b:15:01:c1:da:be:90:0b:13:bf:f3:
55:ed:a9:c4:7c:68:0e:c1:3b:da:c6:bd:06:5f:5f:fa:04:14:
cd:c7:01:a4:6e:4e:55:1e:da:fd:98:69:7a:bb:25:f2:fe:a6:
08:6c:6b:8d:7a:b3:cb:80:78:16:df:91:c9:4d:36:d1:f3:19:
67:e1:0c:06:c7:b4:9a:06:6c:9c:2d:83:95:fd:5a:34:13:13:
00:0b:26:4d:5a:0d:24:66:f1:78:c1:48:f2:99:d7:db:70:75:
bb:fc:bd:a4:70:89:77:3f:d5:00:68:c7:a2:49:88:18:20:dc:
81:6d:74:e8:a3:78:c0:68:1e:09:40:5b:d0:bb:17:04:6a:85:
d5:79:5d:a0:33:6a:98:c9:4f:78:9f:40:0e:78:fd:6e:22:d4:
41:ad:44:33:f5:f4:13:78:23:f8:77:2c:56:6e:0c:a3:98:54:
79:b5:4f:7c:32:2a:4e:f9:e5:45:c9:b2:24:af:e8:8d:b2:1c:
58:49:6f:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:26 2026 by rpki-client