
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/BB9C14F6AA5511EB86F34077C4F9AE02.roa
File: BB9C14F6AA5511EB86F34077C4F9AE02.roa (raw, json)
Hash identifier: n0M+4sPO2I1QxTqzwDfkxMGQeXxQFFjm9haxwLReuy4=
Subject key identifier: F4:A4:61:3B:FF:A1:CA:F4:40:DB:F2:C8:12:48:2E:87:4F:C3:BD:8E
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 0803
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/BB9C14F6AA5511EB86F34077C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:26:23 +0000
ROA not before: Wed 28 Jan 2026 22:18:36 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 24112
IP address blocks: 166.81.6.0/24 maxlen: 24
166.81.62.0/24 maxlen: 24
166.81.63.0/24 maxlen: 24
166.81.83.0/24 maxlen: 24
166.81.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2051 (0x803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Jan 28 22:18:36 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a484cf-eb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:98:02:bf:4b:0e:e9:e7:a2:a2:88:6e:70:
d0:88:53:df:54:85:1d:24:51:52:87:b7:60:bc:0a:
6b:bc:a0:df:08:04:54:2a:4b:cc:aa:b7:19:98:70:
ca:17:68:34:8d:5c:e5:ad:db:8f:72:5b:0b:0a:d4:
bd:b9:6e:c0:d6:33:2c:7c:b8:dd:5c:dd:42:6e:bf:
3b:c7:c7:b7:c1:ef:a6:e4:f5:e4:c3:63:68:ae:31:
55:33:1c:cb:99:9e:0a:f6:43:99:1e:0b:c9:1a:69:
36:eb:44:bd:cb:d8:f2:9b:35:e0:9b:58:d0:9e:cd:
be:92:ae:8e:ec:f0:c1:04:93:09:7e:24:66:7f:b4:
44:ba:ba:6a:f2:12:30:4d:22:7f:81:09:a5:be:39:
28:d0:f8:4c:e6:28:9f:85:76:02:3f:ef:0a:ff:95:
ab:e1:a4:cb:e0:46:3a:19:25:a0:c1:0a:3b:24:70:
5e:5d:8b:8f:71:ae:c8:0b:30:32:2c:d9:97:7f:b3:
fc:71:73:fb:c5:38:36:85:f6:f5:76:d7:6c:5f:90:
cf:1d:14:3d:a2:6a:aa:78:d6:f7:1c:3d:81:8a:d4:
78:d4:19:e1:f5:26:1c:fc:bd:40:b1:4d:2e:7c:8b:
56:76:ed:bb:3d:7a:42:3a:14:79:b2:66:0a:a9:8b:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A4:61:3B:FF:A1:CA:F4:40:DB:F2:C8:12:48:2E:87:4F:C3:BD:8E
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/BB9C14F6AA5511EB86F34077C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
166.81.6.0/24
166.81.62.0/23
166.81.83.0-166.81.84.255
Signature Algorithm: sha256WithRSAEncryption
40:1e:44:7d:23:9d:8c:5e:4e:17:1f:fc:8a:1d:d6:58:19:03:
a8:2a:8c:8e:7f:dd:6f:77:93:b2:65:16:3d:49:b4:1b:00:7b:
08:a0:26:9c:91:e3:0c:3b:95:df:f9:cf:26:f9:c3:cc:4f:95:
95:58:03:41:0a:57:f0:1f:9f:43:23:d6:c7:55:4a:b4:01:6d:
c6:48:c9:ca:2a:74:f3:83:af:a1:de:c0:fd:55:9a:58:cd:12:
49:04:95:ef:b7:50:02:28:c0:2e:c7:96:35:8f:7f:cd:7e:ec:
f8:e4:f7:d7:a2:64:32:83:f5:33:5e:02:a1:93:47:c6:32:c8:
83:42:d2:5b:60:6f:1f:08:56:12:7b:e2:40:7c:c0:9a:e6:9b:
7b:91:fa:d4:c0:72:f9:47:28:54:77:5c:4e:33:d2:9f:27:11:
ec:45:c7:b1:f9:fe:7e:ae:60:15:6f:0e:5b:e2:f8:e4:86:0f:
7e:5b:bd:34:0b:ae:51:c4:d3:2c:9d:a1:8b:5e:3f:95:8d:a6:
dc:88:fc:6e:17:0f:d5:15:3a:fa:6f:e1:f6:52:eb:3e:1e:83:
07:26:9e:5e:5c:d9:c6:ab:44:4d:c0:6a:ff:26:a0:6d:79:55:
ab:0e:6d:a9:ed:a8:77:8d:a1:c3:93:8b:92:e3:fa:5a:7c:5e:
4a:b3:c6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:23 2026 by rpki-client