
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/D99266FE4F7911F095AB2D46C4F9AE02.roa
File: D99266FE4F7911F095AB2D46C4F9AE02.roa (raw, json)
Hash identifier: OxYHP4EtuII9EuHXVEHYWzjpd5uVJIC/mKws2WDo9sE=
Subject key identifier: 1A:8E:98:C4:5B:15:1B:7F:DE:82:8C:0D:1E:3D:B5:DB:FB:D5:9E:39
Certificate issuer: /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
Certificate serial: DE
Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/D99266FE4F7911F095AB2D46C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:57:34 +0000
ROA not before: Thu 24 Jul 2025 05:30:11 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153530
IP address blocks: 161.248.220.0/24 maxlen: 24
161.248.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl
rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
Validity
Not Before: Jul 24 05:30:11 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3e35e-7cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:ef:9e:e8:b9:e6:79:f4:45:46:0d:8b:8e:
ca:aa:ba:b9:a9:77:bd:a2:76:8b:fc:a2:16:d2:86:
3d:1d:f8:b5:61:4e:20:64:b7:7c:42:7f:d5:6a:7a:
e0:de:87:74:11:e8:46:8d:dd:a0:4c:78:5c:f5:b5:
45:0a:af:54:e6:97:48:ee:c0:46:f1:08:d0:de:00:
cb:24:f1:fd:40:f5:74:c3:80:af:ba:41:2f:f1:6d:
62:23:ed:da:ca:d6:8e:ad:86:4a:7d:88:cc:e9:9e:
ba:7b:36:1a:d2:eb:00:d3:ef:7e:cf:3e:1e:f3:35:
e6:03:36:f5:b0:27:1c:a5:d5:c1:e2:8f:c4:69:84:
5f:90:04:e1:bd:70:1d:a9:0e:f6:7c:2e:9d:63:92:
d5:99:43:ce:e8:36:a6:51:fa:7f:81:ec:f6:20:e1:
42:d4:3b:f9:84:0f:e4:13:b7:e9:30:29:b0:11:f5:
ff:9c:34:ac:65:c1:94:d4:db:78:fc:4a:1a:69:78:
1e:e2:86:7a:8b:36:89:a7:44:05:5b:ee:e4:24:69:
21:4b:25:cd:2f:45:1b:5c:03:9d:24:32:5d:df:61:
ac:13:e2:6b:aa:4e:73:ea:e7:79:e2:13:5b:81:cf:
7e:1b:3e:f0:37:da:6e:d0:2c:8f:6c:72:d0:0c:f0:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8E:98:C4:5B:15:1B:7F:DE:82:8C:0D:1E:3D:B5:DB:FB:D5:9E:39
X509v3 Authority Key Identifier:
keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/D99266FE4F7911F095AB2D46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.220.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:66:cc:eb:52:06:7e:07:ad:91:2e:9f:8e:dd:19:79:f4:de:
fa:2b:2b:08:63:83:df:86:f4:5f:79:14:c2:52:8b:8d:86:53:
ec:17:14:24:00:3a:a9:4c:19:b0:61:f4:5d:85:a3:8c:8d:7e:
8b:a7:89:20:52:40:d6:ae:0e:1b:10:c8:67:d5:56:5e:91:12:
d0:24:c2:15:1c:59:7d:dc:de:41:02:01:ef:19:82:a6:73:b4:
3f:82:bb:4c:5a:b5:50:57:06:c1:b1:61:a7:75:ce:1b:3a:2c:
22:5e:89:79:49:d9:71:0e:12:b4:7e:f4:f2:d9:7e:1c:b9:c9:
cb:8e:f6:44:88:64:67:a9:4f:57:bd:03:6e:3c:ff:d6:18:02:
04:77:e9:e8:b7:95:6d:e0:50:7f:6f:a6:83:8f:8a:7c:05:5a:
02:fc:79:53:84:68:18:8a:f2:f1:0b:20:71:11:a5:86:0d:0b:
7b:44:4d:a4:4e:99:0d:59:ef:ee:3c:6b:d6:69:32:3a:51:73:
08:61:f3:26:14:26:0d:20:69:de:27:f6:6e:1a:0c:1f:18:26:
32:5a:6b:4a:a9:bc:83:fc:20:29:7a:d7:1f:3b:7a:2a:77:80:
94:7d:23:4e:29:af:eb:ab:56:86:09:f2:72:f2:49:b4:dd:83:
45:b6:cd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:28 2026 by rpki-client