
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/3698C9BA484A11F0B96B9D10C4F9AE02.roa
File: 3698C9BA484A11F0B96B9D10C4F9AE02.roa (raw, json)
Hash identifier: 0vz5hH8Qi0mQ8l4HL29D2PA4e6vODvqozBm3+6JiuQo=
Subject key identifier: F1:BB:43:44:CE:DE:E8:28:91:84:3A:48:F6:B2:4D:1E:5A:65:E2:08
Certificate issuer: /CN=A91E2EFF/serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
Certificate serial: 87
Authority key identifier: 06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/3698C9BA484A11F0B96B9D10C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:08:16 +0000
ROA not before: Fri 13 Jun 2025 11:33:23 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 147180
IP address blocks: 165.99.184.0/24 maxlen: 24
165.99.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl
rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2EFF, serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
Validity
Not Before: Jun 13 11:33:23 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3e5e0-38a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:59:a5:9d:4b:cb:d8:3f:ce:b6:fd:29:85:
ce:5d:7a:51:02:b4:c0:c8:14:f8:ef:bc:39:0e:37:
4d:7f:ad:3e:e1:92:51:46:7a:86:54:a5:0c:e0:3e:
f3:a9:1c:3c:e2:03:46:e0:35:22:4d:04:df:f2:2c:
87:0c:17:7b:7a:45:7a:a5:88:ff:26:2c:00:1a:4f:
47:ac:0d:8c:24:4f:6a:27:28:e6:63:63:ba:6b:f1:
3a:60:06:8d:6e:aa:b8:ce:9f:04:04:df:41:62:4c:
09:d4:59:3e:4d:b8:69:8c:e6:99:20:e0:92:bd:63:
b5:83:34:6d:c7:9a:44:59:6b:9d:09:da:ec:fd:99:
25:1c:eb:ee:0a:f8:7b:41:67:2f:5c:10:6a:1a:53:
29:f7:bd:89:02:26:70:0d:22:62:15:76:77:93:60:
b7:11:d9:d5:e7:d9:73:e3:98:ce:4c:62:ab:48:4c:
ef:f6:7d:b4:14:9e:c3:c4:36:7e:28:6d:49:30:d9:
24:80:42:f3:4d:bc:42:7a:85:75:03:7e:79:ce:0e:
81:76:b9:de:31:4d:f9:d5:da:ad:44:e8:40:86:c9:
66:e6:15:b3:2b:3a:76:35:43:5a:5e:ef:6e:15:3d:
ef:ae:b5:6d:83:8f:7d:18:a0:71:00:ea:ed:5e:5a:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BB:43:44:CE:DE:E8:28:91:84:3A:48:F6:B2:4D:1E:5A:65:E2:08
X509v3 Authority Key Identifier:
keyid:06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/3698C9BA484A11F0B96B9D10C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.184.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:00:6c:0f:3c:9c:ab:de:cd:4e:a3:7c:8a:e4:38:81:71:a0:
fa:02:57:33:1c:86:ad:0f:a0:44:3f:e5:85:4c:ca:df:de:9a:
ff:37:4e:36:db:85:bd:e9:fc:26:48:94:5a:29:ec:83:53:06:
11:a6:77:0e:5f:53:2f:a5:47:59:a1:e6:2c:5f:5d:f6:55:9f:
1f:ce:e2:b3:56:3a:bb:a7:86:8f:66:39:8f:d5:5a:bb:d3:63:
2b:35:78:8c:22:11:d9:b3:01:99:05:8a:80:0c:c6:89:15:b0:
05:d7:58:d0:3d:5c:59:7e:e9:3e:83:a5:60:ce:0a:4a:ba:e2:
e9:31:81:71:72:c6:2e:d3:8b:fd:66:67:76:40:f0:2a:9e:65:
95:20:0c:5b:e9:b6:f0:54:f7:eb:62:d4:58:27:bf:5d:5d:88:
d1:3a:7f:0e:c9:8b:96:cd:d5:53:a1:f7:68:ef:6a:ba:0d:f2:
65:8a:74:d9:46:fd:23:29:a7:03:6f:9b:ac:eb:0d:29:50:5a:
e0:6c:6d:2a:ba:17:e6:1a:f9:ff:b1:c1:82:5e:6b:7f:61:c0:
5a:46:ad:49:cf:2a:dd:f2:b2:2b:34:05:4f:1c:59:81:fe:57:
4f:d9:72:4f:c0:6d:79:be:33:a3:97:f8:3b:8f:28:92:98:71:
83:01:68:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:37 2026 by rpki-client