
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/C3C056A636DD11F08C82E269C4F9AE02.roa
File: C3C056A636DD11F08C82E269C4F9AE02.roa (raw, json)
Hash identifier: iP/6xi2129urspCLbMmJYNgMwMlUN1peIHRT5SM4ZI4=
Subject key identifier: 55:D3:60:02:BC:90:32:8C:BD:98:FA:8D:A5:A0:4D:B0:61:A7:09:DB
Certificate issuer: /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Certificate serial: 94
Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/C3C056A636DD11F08C82E269C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:06:21 +0000
ROA not before: Thu 22 May 2025 13:51:22 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 153885
IP address blocks: 165.99.60.0/23 maxlen: 23
165.99.60.0/24 maxlen: 24
165.99.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Validity
Not Before: May 22 13:51:22 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3e56d-4930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:35:7c:75:9f:cd:3d:77:31:35:9a:ad:6a:
34:ec:cf:19:cf:12:64:18:11:6b:4c:88:f4:43:ab:
2b:34:65:59:e5:bd:eb:b9:a3:28:02:d8:76:f8:23:
f1:bb:e8:a3:c0:38:a9:b7:88:ae:5f:12:5a:8e:a3:
34:06:76:1e:9f:fb:2c:c0:8d:79:57:fa:46:d3:eb:
dd:91:6c:07:1b:12:bc:17:f9:c8:0e:22:72:5a:96:
9a:9d:3c:93:b5:94:c1:60:41:9e:33:b4:c5:ca:f5:
27:c7:4a:c5:bb:11:08:a9:e5:10:93:88:ed:dd:27:
27:7a:2d:2b:fe:e2:03:5e:e3:73:b4:92:f7:5a:d2:
9e:7a:c8:08:8f:b3:93:21:32:e4:14:b1:f2:9f:54:
e5:3e:7b:e2:65:a5:15:68:8c:3a:6f:b5:25:f6:db:
54:0c:29:50:92:49:cb:99:0e:94:ed:29:ea:b2:f1:
08:da:5d:d2:4e:60:24:8a:eb:a2:cc:fe:d9:9b:20:
82:48:76:34:f6:bc:21:9c:5a:18:34:e9:e8:e4:43:
fb:7c:93:f4:90:de:57:3d:26:5b:38:26:56:e0:67:
0f:6f:73:7d:b7:03:d0:0f:ed:68:41:22:12:04:cc:
a0:37:75:46:c9:5f:9f:e2:07:86:7d:40:f0:8b:90:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D3:60:02:BC:90:32:8C:BD:98:FA:8D:A5:A0:4D:B0:61:A7:09:DB
X509v3 Authority Key Identifier:
keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/C3C056A636DD11F08C82E269C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.60.0/23
Signature Algorithm: sha256WithRSAEncryption
72:b8:7b:f9:70:94:72:50:05:47:2a:d4:0c:ea:f9:34:c1:ad:
70:dd:56:d0:1b:59:c9:53:66:2a:40:f2:14:2d:0a:b3:70:f5:
77:09:07:ee:ea:34:e0:af:60:63:ac:18:18:a3:3f:0a:31:2a:
9b:d8:fb:5b:5c:93:60:96:98:12:da:15:07:31:b4:50:1c:6c:
ff:37:5b:35:24:15:74:df:4c:bf:79:45:cb:19:42:08:91:9d:
40:d0:9b:d2:8b:3f:54:a1:36:e4:93:05:75:34:78:46:8a:5f:
29:0a:62:26:79:62:3c:3a:1a:6f:9b:03:3f:fd:43:94:5a:e9:
91:ec:3c:99:af:6f:3b:fe:e3:c4:c5:d7:19:d5:3a:ff:c7:fc:
9e:4b:8a:04:76:6a:90:7a:0d:d8:b0:d3:2b:2c:a8:cf:70:fc:
58:20:02:b0:30:c9:ec:b8:57:89:90:99:c3:0c:0a:8a:67:88:
85:cd:d5:29:27:40:3d:f3:18:ce:bc:40:71:73:c0:05:79:cb:
18:9f:bb:fb:40:3a:c2:74:0c:3c:f0:47:de:47:84:42:83:ae:
9f:d9:95:7a:6c:7c:ea:f1:95:73:d5:7a:b9:d5:69:15:ac:36:
f8:0f:9d:bb:21:9d:3c:2c:d0:10:1a:30:1f:94:bf:40:45:28:
03:80:8d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:17 2026 by rpki-client