
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/BAEA3A3C497B11F096DCA14EC4F9AE02.roa
File: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (raw, json)
Hash identifier: +lH463qDPAwERrsUQl45+mVf4irW7NMTQzUVhbxqY6A=
Subject key identifier: 5D:F5:4E:46:4D:0F:7F:B6:5D:90:31:AC:6E:8B:3B:7D:59:38:BC:FA
Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89
Certificate serial: C4
Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/BAEA3A3C497B11F096DCA14EC4F9AE02.roa
Signing time: Fri 05 Jun 2026 07:39:53 +0000
ROA not before: Fri 05 Jun 2026 07:39:53 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 45773
IP address blocks: 165.99.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl
rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89
Validity
Not Before: Jun 5 07:39:53 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a227d48-f0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:1d:9c:ff:c0:49:ef:d9:af:e6:b5:3f:67:
53:88:49:54:cc:fd:6f:97:79:f5:52:b7:47:56:d6:
22:9c:40:79:9a:80:6a:dd:8d:d0:33:33:9e:dc:cd:
0b:01:05:a6:44:04:23:20:fc:67:ab:ff:21:72:a4:
66:36:53:d7:73:91:f5:b7:f4:d9:02:d4:36:c7:23:
d7:64:8c:59:6d:e5:81:76:e9:e1:fb:90:aa:20:88:
69:e0:70:f8:ab:77:36:ef:24:3b:dd:0f:c5:81:26:
36:34:53:53:a5:31:37:52:20:f8:1d:99:b0:b5:e8:
2c:0b:74:63:ad:d0:25:00:d9:77:a6:c6:52:ca:6d:
7c:5b:ac:2d:27:ac:05:c6:94:37:28:8a:b2:43:b4:
f2:1a:1f:80:a0:c7:61:1c:3e:32:f9:5d:55:d8:f4:
40:06:89:ff:05:9d:1a:9e:b4:60:4b:0e:e8:81:3f:
82:21:f3:44:a7:7c:05:fd:6e:41:60:13:f3:39:ca:
21:7f:8d:d6:53:c4:e2:bb:13:ed:27:61:74:1c:ed:
80:a3:a7:30:e6:9b:e9:31:8b:21:c5:53:9e:e5:6b:
16:ae:06:58:6c:1b:97:39:00:47:27:46:4b:c8:6b:
e0:09:6b:d6:55:31:92:97:9f:be:56:a1:48:6d:42:
50:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F5:4E:46:4D:0F:7F:B6:5D:90:31:AC:6E:8B:3B:7D:59:38:BC:FA
X509v3 Authority Key Identifier:
keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/BAEA3A3C497B11F096DCA14EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.206.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:da:92:ce:bd:72:01:06:d1:7a:02:af:75:22:6b:78:e3:65:
30:c5:0c:13:6c:f8:02:84:0e:71:f8:c5:80:96:47:f0:9d:43:
b2:cb:6f:f8:1d:5c:6d:c8:30:3b:57:aa:89:99:6d:6f:8c:2f:
ca:4c:79:b7:6c:70:d4:ec:a8:c5:aa:46:14:d7:c8:92:35:3e:
10:d8:7c:9e:f5:d2:13:14:4c:81:74:87:fa:c1:7f:40:a3:78:
81:b7:c5:66:22:62:f9:36:c8:9d:43:b6:3a:4e:c8:ad:71:0d:
70:38:d9:f5:0a:8f:77:1a:70:97:84:31:00:9e:04:67:f4:b0:
9d:c7:ba:95:5e:eb:5c:2a:f2:75:3b:45:ef:83:65:1f:93:10:
0d:d4:bd:b2:ba:9f:97:87:f7:9f:5f:a6:ed:92:ce:ab:4d:f9:
b9:25:50:64:0d:09:d8:6e:91:37:d4:5c:2c:74:3e:74:cf:d2:
4f:49:e9:bf:50:e7:fd:62:f2:27:6b:d8:65:43:47:8a:95:cb:
64:c6:a2:32:38:19:f9:f0:63:be:3d:34:5c:4c:6a:0b:48:76:
fd:43:6f:ff:7d:a5:bc:85:93:f5:1e:a4:5c:d6:b5:47:46:e9:
dd:6c:4d:98:80:de:80:b7:63:33:36:0e:6f:e4:2b:76:9d:49:
cb:50:f4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:46:27 2026 by rpki-client