
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/B87594FC08B311F1954B37591C3D8C67.roa
File: B87594FC08B311F1954B37591C3D8C67.roa (raw, json)
Hash identifier: H6vYE+gxhuAKlVgXnsRMmqmTt0CZdQJgg6x87GzOftE=
Subject key identifier: FD:40:60:75:2E:C4:10:E9:2F:F3:24:2E:AF:59:F8:EE:68:E6:AF:CB
Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Certificate serial: CA
Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/B87594FC08B311F1954B37591C3D8C67.roa
Signing time: Thu 21 May 2026 07:39:35 +0000
ROA not before: Thu 21 May 2026 07:39:35 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 132165
IP address blocks: 165.99.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Validity
Not Before: May 21 07:39:35 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a0eb6b7-5317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:8d:eb:d3:4b:30:20:be:d3:9b:fc:7f:31:
61:73:e7:3e:1f:11:3f:b3:36:c9:32:46:a0:ee:0b:
f2:73:c9:c7:c9:45:5a:9b:61:aa:35:ff:83:c7:54:
90:b2:cd:c0:8d:33:ac:8f:8b:13:6e:63:32:8d:af:
b9:7e:44:1e:08:f3:39:ec:f5:73:69:85:76:06:de:
18:52:05:1d:a7:11:07:30:8f:de:aa:88:b7:4a:02:
c0:9a:f7:64:bc:35:fd:fd:bb:91:b8:78:b2:68:37:
c1:c7:44:74:d7:55:f4:06:05:39:fb:90:e5:1d:3f:
76:60:f9:86:2f:66:ff:a4:4a:c4:56:80:79:89:53:
b2:ce:13:fc:94:bd:eb:a9:56:b3:d0:20:9a:98:29:
b6:05:41:ec:2f:06:f0:f9:65:da:97:f6:c6:e0:09:
24:8f:19:33:0a:a4:d6:f7:ee:82:33:5d:a1:01:07:
ba:6d:fa:fc:b1:19:d4:5a:dd:1e:e9:9b:69:51:ca:
c2:3a:ee:75:a1:c8:b5:8e:11:91:cc:5a:23:f9:72:
03:4f:e4:40:38:37:7a:ed:cb:7a:26:63:d1:9e:eb:
9d:ef:01:bf:33:1f:80:4c:93:a6:e9:e8:21:f4:de:
90:bc:fc:e6:86:fb:fd:8e:3b:33:9a:dd:df:43:c2:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:40:60:75:2E:C4:10:E9:2F:F3:24:2E:AF:59:F8:EE:68:E6:AF:CB
X509v3 Authority Key Identifier:
keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/B87594FC08B311F1954B37591C3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.191.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ef:9a:70:f3:10:a7:7c:d8:d4:4b:c0:81:96:08:37:bd:4a:
08:87:d2:21:36:75:28:25:54:d2:d9:e2:a0:34:a3:7a:49:d9:
af:54:f9:7f:ad:ef:9d:cc:9e:8b:4d:41:3c:3e:4d:e4:11:e9:
32:f7:18:7f:c0:d2:1f:65:19:8a:02:5e:92:e5:7e:87:35:c1:
35:9f:31:86:13:db:bf:8e:94:33:a8:3f:6b:7b:b3:8f:83:ba:
1b:69:7b:19:c3:c6:ad:40:9f:ae:0b:b0:ad:ca:46:02:a3:6f:
c0:fa:32:d8:9c:c0:67:c4:12:00:59:4e:43:1b:6a:3b:47:c8:
47:de:d7:8b:5a:54:59:ec:33:cb:57:a8:6d:7a:4b:58:b4:b6:
09:95:50:41:7f:f3:a5:d3:1b:16:0f:4a:44:5a:91:ba:f9:5e:
10:1e:bb:24:84:d2:03:8c:b2:1f:8a:b4:64:7e:45:da:b4:d3:
24:c4:31:81:6f:92:43:6b:8d:e6:9b:1f:ce:84:8d:3b:6e:43:
da:46:86:70:52:01:34:69:b2:c5:9c:8b:76:a3:ee:ba:e7:0a:
0e:b5:75:57:36:95:57:1a:f2:33:3b:7f:6a:77:e6:ed:89:3d:
8c:f3:20:f6:22:b3:c2:f6:85:c4:0b:50:d1:58:2a:c4:da:1b:
f5:62:54:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 16:37:02 2026 by rpki-client