
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/29CA404A3B0D11F18EE2601DA2833773.roa
File: 29CA404A3B0D11F18EE2601DA2833773.roa (raw, json)
Hash identifier: SEQeKAJZ47ssFRvOtGo19kLELwxUiKXiWbmguFVl+b4=
Subject key identifier: E2:B8:A6:8D:EB:04:DE:31:F9:03:1A:BD:15:FF:68:3F:9A:9E:6C:05
Certificate issuer: /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Certificate serial: DB
Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/29CA404A3B0D11F18EE2601DA2833773.roa
Signing time: Fri 31 Jul 2026 08:56:38 +0000
ROA not before: Fri 31 Jul 2026 08:56:38 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 56264
IP address blocks: 165.99.196.0/24 maxlen: 24
165.99.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 24 Aug 2026 00:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Validity
Not Before: Jul 31 08:56:38 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6c6346-ae97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:9a:72:4e:e5:bd:d3:bd:38:f2:17:0d:9a:
3f:af:f5:f7:6e:13:77:37:db:77:d5:f2:68:b1:04:
eb:48:7c:08:83:79:cb:2a:29:91:c0:d5:89:ac:57:
d2:65:f2:c2:bb:a0:1b:bb:a3:83:5c:b2:4a:b2:e7:
4c:50:4e:50:6b:89:4b:2a:5d:ce:37:ff:de:19:f1:
d0:85:23:a2:18:8c:ab:eb:59:8a:80:f2:e8:4f:8d:
e6:fe:24:77:1b:97:31:b8:15:34:97:53:87:67:d5:
a2:79:64:e6:9b:58:65:fd:3f:c4:55:95:8e:91:fd:
fb:0f:f0:ed:af:d9:d2:9f:aa:39:64:5b:df:56:14:
28:bb:d7:ac:d7:f4:80:e4:96:63:32:d8:09:21:8c:
47:60:74:14:49:43:9f:0b:8b:92:b6:c2:df:34:15:
94:85:7a:5f:2b:c5:95:59:e8:40:13:eb:0a:2e:c9:
cc:58:9a:ce:0e:41:6d:5b:98:03:8a:b1:ed:2f:90:
83:a8:6c:b7:6e:66:68:69:cc:b8:41:6e:c0:20:82:
03:b8:8f:36:96:92:62:92:9b:6b:3d:72:a7:34:e5:
26:ef:77:c2:d3:f5:ae:6c:41:e4:cd:05:5b:7f:4d:
26:0c:7a:41:9f:62:57:bc:45:56:d5:18:24:f5:38:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B8:A6:8D:EB:04:DE:31:F9:03:1A:BD:15:FF:68:3F:9A:9E:6C:05
X509v3 Authority Key Identifier:
keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/29CA404A3B0D11F18EE2601DA2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.196.0/23
Signature Algorithm: sha256WithRSAEncryption
15:a4:8e:e5:f8:12:6e:1a:ba:60:14:42:81:71:0d:38:3b:ae:
06:30:4a:25:f7:4e:3f:47:d7:43:5c:73:57:43:0b:0d:75:da:
74:f8:9c:f4:d8:98:6d:c8:7c:e4:1b:69:26:45:1d:1a:de:c7:
05:df:76:06:4f:8c:c4:55:39:ab:75:90:e1:97:89:61:47:02:
a4:73:67:37:e9:82:7d:77:d3:d8:1c:ee:3e:03:da:ac:03:40:
30:22:17:aa:58:72:94:2a:d5:75:f4:70:54:d6:09:47:9e:94:
1d:d2:b2:a5:7e:11:0d:66:9b:30:d9:3e:bf:a3:53:87:ce:fe:
e5:75:d8:e6:c2:d9:b2:e1:57:f6:f5:b0:6a:69:c4:70:6f:d5:
08:61:62:c8:26:5b:33:52:9b:0c:fe:15:8f:13:cc:fe:50:27:
86:2e:21:a7:01:f0:48:c1:95:d2:bd:e1:51:58:0c:a1:90:d0:
03:56:28:4c:aa:aa:7e:9f:56:3f:92:b6:13:e6:95:47:7d:b0:
f3:52:8a:a2:7a:06:a1:68:a1:0a:96:87:a7:73:64:ed:1a:a1:
53:ad:ad:2b:a3:42:69:c0:53:83:22:dc:32:96:0f:4f:c0:32:
38:08:40:e7:cc:bd:70:4e:e3:6b:d0:e4:36:2f:7d:7b:b3:79:
00:fc:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:11:09 2026 by rpki-client