
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/31CFD07A812611F1838CF11F75A30FBC.roa
File: 31CFD07A812611F1838CF11F75A30FBC.roa (raw, json)
Hash identifier: bhn1gFoscu7GDMW9snpcnw6lHnDZPw2a7lIZ4tNkPOw=
Subject key identifier: 87:79:81:14:32:0E:65:A1:25:DD:29:51:81:A7:32:27:F1:EB:DE:0A
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 233A
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/31CFD07A812611F1838CF11F75A30FBC.roa
Signing time: Thu 16 Jul 2026 14:54:07 +0000
ROA not before: Thu 16 Jul 2026 14:54:07 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151898
IP address blocks: 165.99.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9018 (0x233a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Jul 16 14:54:07 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a58f08f-4d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:47:da:6d:bf:16:ed:f8:42:71:c9:fd:29:
12:29:e6:29:c1:e7:21:0f:5f:9b:d7:34:0a:e1:10:
89:a5:4f:f7:97:82:94:03:59:25:05:52:c0:16:72:
c9:0d:23:0a:32:4e:0c:96:c9:be:81:ac:b6:bc:d1:
d7:e1:1b:05:c4:75:8e:75:51:c3:2f:b1:6c:e3:55:
c6:5c:51:24:a0:ea:4e:bc:62:a4:69:91:07:94:f7:
c9:0e:e7:c0:12:b7:a8:27:5b:24:71:58:48:54:59:
a0:d1:d2:1d:05:9b:38:5e:87:1c:f4:75:7f:d7:54:
f5:b1:e7:2e:9c:21:fd:8d:d7:72:7d:b7:c3:f2:18:
36:0e:da:e2:c8:09:6d:4c:f3:ea:e6:53:74:12:ab:
1f:8e:8c:82:fb:5f:c1:7a:8e:4f:41:d8:07:76:34:
10:50:53:22:8a:6b:86:91:ca:d3:66:6a:04:9f:e8:
58:fb:4a:53:37:cc:e0:58:2d:d0:39:12:bb:66:c8:
19:a5:77:70:1f:e2:33:19:e4:6c:3e:c4:74:47:e5:
d1:d5:d8:f0:ec:51:75:53:3e:24:fa:88:27:e9:b8:
c9:86:82:f0:4d:4d:e0:15:89:c2:ce:ca:35:e7:fd:
16:81:68:11:ab:79:87:6e:d5:01:65:72:7b:06:29:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:79:81:14:32:0E:65:A1:25:DD:29:51:81:A7:32:27:F1:EB:DE:0A
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/31CFD07A812611F1838CF11F75A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.16.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:b6:c6:5e:13:d8:b9:75:d0:b2:ff:d5:6a:7f:df:91:2e:79:
c8:c7:25:9e:77:a5:66:26:76:4d:38:52:92:5a:82:11:bc:4e:
45:74:64:12:1d:7e:be:3e:5a:01:33:34:92:fc:27:2e:a7:d5:
9d:53:49:2d:76:92:ba:14:07:bb:cf:1b:1b:fe:30:f7:c5:5e:
b7:c9:26:2a:11:dc:39:25:e3:d6:42:eb:d7:60:a6:4d:2f:48:
c0:b0:a8:b8:4a:37:d1:88:7d:76:25:8e:ac:ab:c9:7c:28:10:
47:cd:3e:b1:c7:10:3c:66:db:6a:66:91:ff:60:e1:f4:c4:eb:
7f:6e:14:f0:b9:e9:ff:95:d4:44:e8:9c:11:a9:f3:6b:dc:7f:
ce:9b:60:7a:ab:7b:cc:6b:2a:15:d9:2e:26:d5:c7:13:94:5d:
2c:dc:05:6a:8f:9b:2b:be:1a:37:0d:32:e7:56:55:39:44:8a:
ac:11:3e:6d:b1:ee:c6:95:87:fe:4a:09:8a:40:69:74:4b:a3:
49:1f:a8:01:94:df:f6:75:65:25:84:68:b7:cd:01:3b:d8:3c:
6c:9c:6a:e0:16:27:cd:a5:54:16:16:13:0e:f0:50:9e:d5:eb:
df:da:63:c1:88:98:e0:5e:bb:a6:b2:23:c2:86:f8:b3:ab:a7:
c0:ab:04:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:09:11 2026 by rpki-client