
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/0099AE56536911EE8594503BC4F9AE02.roa
File: 0099AE56536911EE8594503BC4F9AE02.roa (raw, json)
Hash identifier: A3g1MvapK720MR4guCb5ZHynm0vdBJ498DzGR8wq4fU=
Subject key identifier: 9C:60:5D:EE:82:C2:43:0E:BB:E4:F8:63:85:F0:89:EC:75:02:2C:D8
Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
Certificate serial: 01DC
Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/0099AE56536911EE8594503BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:57:07 +0000
ROA not before: Fri 09 Jan 2026 03:22:23 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4768
IP address blocks: 192.107.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl
rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 03:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
Validity
Not Before: Jan 9 03:22:23 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a59733-2a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fe:31:03:73:85:21:d8:39:17:58:88:05:c9:
f3:51:78:37:26:bc:9f:57:a7:6f:cc:ed:0c:67:50:
75:dd:cd:e2:1d:a0:01:f7:e5:f8:6f:74:df:b8:12:
65:57:ce:c2:2c:52:c0:c9:2f:12:d3:c2:f1:8d:86:
57:fe:b8:0b:88:22:fa:07:77:fa:fa:64:a4:1a:41:
47:dd:02:3d:59:0b:db:83:72:53:6c:d3:78:9b:d3:
7a:58:f5:80:49:ff:cf:ce:93:43:18:d9:3f:1b:2c:
dd:74:ca:ee:cd:90:69:fb:0d:aa:7a:20:c6:d4:c1:
70:60:62:df:37:2e:d3:73:c3:5b:18:60:dd:c0:88:
d1:e1:b1:62:3d:6f:b8:6e:6a:f1:29:45:04:f2:b8:
6f:88:4c:13:f2:80:5f:45:34:8e:67:bb:9a:5f:79:
d2:f6:be:5d:63:a9:71:ef:df:e6:a2:9a:b2:c9:b0:
67:29:58:19:58:2c:ba:67:49:75:b1:50:86:84:ab:
be:84:47:76:b5:44:3a:e4:09:66:93:95:7a:ae:50:
84:43:e3:36:c0:36:d3:da:c2:d8:a8:e2:dc:f6:aa:
b4:e8:2c:86:52:7d:a8:88:a9:ac:00:4c:91:f7:ee:
d0:17:1a:95:fb:e9:36:60:d9:4b:c2:86:e4:01:bf:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:60:5D:EE:82:C2:43:0E:BB:E4:F8:63:85:F0:89:EC:75:02:2C:D8
X509v3 Authority Key Identifier:
keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/0099AE56536911EE8594503BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.107.113.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:7a:01:7e:37:92:fc:66:4c:e0:50:37:f2:a3:06:79:21:05:
01:8b:aa:8a:e4:1a:50:d4:79:55:23:30:04:3f:69:58:f4:15:
d8:1d:db:4c:1d:a3:20:0b:ed:b3:93:af:80:a1:4f:54:9d:40:
b5:36:86:a5:49:34:59:c8:8c:57:2f:93:d5:35:ee:0d:b3:b9:
42:46:fd:b7:54:48:48:14:cd:79:1a:1b:71:ac:97:1e:6e:e3:
56:50:48:ad:b2:16:5d:9a:bf:52:d6:af:e5:1e:48:e8:cc:dc:
72:6b:c7:4f:4c:e6:57:0a:e1:71:3a:0b:e7:14:ad:a5:b9:5e:
3f:e2:97:d9:6e:d0:a1:78:52:29:ee:df:a7:50:94:4c:7c:20:
37:ee:cd:a0:f0:ce:89:50:ef:d6:bc:27:fd:72:46:58:98:6e:
59:8e:db:a0:c1:a7:3f:f5:42:c1:8a:ca:4e:9b:f0:05:c8:9b:
e0:ce:af:cc:d4:d7:21:e0:bc:27:70:d3:29:23:00:5a:1a:02:
f4:0f:2b:79:61:cc:5d:7f:4a:ec:e6:16:31:fb:e9:35:6b:01:
de:9b:26:4f:ce:bc:04:54:61:37:be:70:31:ce:52:92:0d:85:
05:cd:3c:55:c0:be:48:76:b0:52:71:d3:6b:43:8a:0c:84:f9:
93:e9:b4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:06 2026 by rpki-client