
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/CE1C73F63F8211F1AB237298B0833773.roa
File: CE1C73F63F8211F1AB237298B0833773.roa (raw, json)
Hash identifier: 0E3rcn/AMOWR95yzSBcRzzQYaugTtSGyakdzbiglBbk=
Subject key identifier: 7D:4A:C6:4B:3E:A8:31:43:FB:4A:CD:CA:09:20:E4:37:C4:5D:D7:73
Certificate issuer: /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Certificate serial: C7
Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/CE1C73F63F8211F1AB237298B0833773.roa
Signing time: Tue 26 May 2026 13:22:03 +0000
ROA not before: Tue 26 May 2026 13:22:03 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 153885
IP address blocks: 165.99.60.0/24 maxlen: 24
165.99.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Validity
Not Before: May 26 13:22:03 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6a159e7b-d8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:6f:4e:3f:21:9a:a8:90:50:09:8d:e8:e6:
a9:47:da:c3:25:f0:9d:16:b7:8c:06:cf:c6:e2:36:
81:d1:2e:5f:4f:34:27:f9:fc:be:14:20:6b:f8:58:
2a:59:dd:ce:1e:4a:56:69:77:9c:7c:9d:48:22:a6:
2f:34:25:2d:80:6d:4d:38:33:59:ca:21:64:3d:71:
32:85:7f:3b:9c:9c:69:02:75:b5:55:27:61:9b:71:
24:6d:9a:da:e5:82:03:1b:74:36:32:66:d5:68:91:
b3:75:d2:8e:cd:ab:3b:b3:93:53:ce:ba:fe:f2:c0:
54:2d:13:e4:9c:63:cc:c2:e7:2c:23:22:40:ef:fc:
8d:76:c4:b1:e9:45:72:02:31:cc:ce:fc:79:48:ca:
49:2a:c7:1b:4a:d8:ce:ad:cd:75:a6:2b:97:f5:29:
37:d8:0d:84:49:83:f3:f3:2a:1e:1d:40:7d:57:e0:
73:07:69:72:a9:dc:db:5f:5c:92:40:f6:96:ee:51:
7f:be:4e:04:f3:82:fe:fc:ef:94:49:4a:71:e3:7d:
7c:39:d3:71:2e:ec:c9:fd:c7:fc:54:35:fa:e7:84:
4e:f8:94:d6:25:c7:0e:41:0f:9d:66:f8:ba:ee:db:
2c:93:1f:ea:15:74:28:aa:f6:d2:67:1d:20:c9:16:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4A:C6:4B:3E:A8:31:43:FB:4A:CD:CA:09:20:E4:37:C4:5D:D7:73
X509v3 Authority Key Identifier:
keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/CE1C73F63F8211F1AB237298B0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.60.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:6f:4e:62:d4:ee:24:41:60:86:13:66:4f:27:3b:1c:0a:a7:
46:cb:61:30:7c:cd:d0:9a:9b:54:3e:57:0a:ea:5f:82:c6:8a:
c2:85:23:10:0b:76:0a:37:6d:e7:b5:e6:ef:66:b9:85:db:98:
19:db:b0:77:97:d2:05:35:2a:a1:f2:78:c3:87:83:fe:20:4c:
7d:36:c3:38:1f:1f:2e:1b:e4:e0:31:79:6c:bd:48:51:d1:ff:
07:20:b6:dc:31:1b:59:19:5a:ec:e9:47:ca:4a:4b:93:e9:d5:
93:b0:9e:40:b9:6c:f9:da:5f:42:ce:c8:0a:66:5d:43:b0:1b:
f8:bf:4f:9c:e5:58:17:38:5b:e9:6c:aa:df:21:d6:a6:59:64:
d3:cb:81:19:4e:79:55:40:64:bf:61:47:a1:f4:6c:6d:77:33:
be:7c:7e:4e:81:bd:cf:d6:bb:f7:5a:08:f4:86:51:7c:6c:1e:
d5:69:fa:c3:18:c9:67:55:6c:26:a4:e7:ec:2b:1e:60:51:f1:
b0:39:13:e2:d0:85:5b:d8:5d:de:4e:21:5c:49:85:90:bf:68:
e6:34:fe:2b:38:42:30:01:c4:2c:3e:9e:86:77:33:04:dd:b2:
67:65:a2:65:6d:60:0a:c5:22:a2:02:3e:36:3a:e3:85:ab:7a:
fe:66:96:60
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJCQUYxMTAvBgNVBAUTKEQyMDY2QjYxOTM0RTc3Q0YyNjdBOURDQzM4QkY1REVF
MjFGMDdCQTMwHhcNMjYwNTI2MTMyMjAzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE1OWU3Yi1kOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy8dvTj8hmqiQUAmN6OapR9rDJfCdFreMBs/G4jaB0S5fTzQn+fy+FCBr+Fgq
Wd3OHkpWaXecfJ1IIqYvNCUtgG1NODNZyiFkPXEyhX87nJxpAnW1VSdhm3EkbZra
5YIDG3Q2MmbVaJGzddKOzas7s5NTzrr+8sBULRPknGPMwucsIyJA7/yNdsSx6UVy
AjHMzvx5SMpJKscbStjOrc11piuX9Sk32A2ESYPz8yoeHUB9V+BzB2lyqdzbX1yS
QPaW7lF/vk4E84L+/O+USUpx4318OdNxLuzJ/cf8VDX654RO+JTWJccOQQ+dZvi6
7tsskx/qFXQoqvbSZx0gyRbA0wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH1Kxks+
qDFD+0rNygkg5DfEXddzMB8GA1UdIwQYMBaAFNIGa2GTTnfPJnqdzDi/Xe4h8Huj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkJBRi8xMEMxOUQzMDM2
REQxMUYwOTY4NjIxNjZDNEY5QUUwMi8wZ1pyWVpOT2Q4OG1lcDNNT0w5ZDdpSHdl
Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBnWnJZWk5PZDg4bWVwM01PTDlkN2lId2U2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUJCQUYvMTBDMTlEMzAzNkREMTFGMDk2ODYyMTY2QzRGOUFFMDIvQ0UxQzczRjYz
RjgyMTFGMUFCMjM3Mjk4QjA4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWM8MA0GCSqGSIb3DQEBCwUAA4IBAQCMb05i1O4kQWCGE2ZPJzsc
CqdGy2EwfM3QmptUPlcK6l+CxorChSMQC3YKN23ntebvZrmF25gZ27B3l9IFNSqh
8njDh4P+IEx9NsM4Hx8uG+TgMXlsvUhR0f8HILbcMRtZGVrs6UfKSkuT6dWTsJ5A
uWz52l9CzsgKZl1DsBv4v0+c5VgXOFvpbKrfIdamWWTTy4EZTnlVQGS/YUeh9Gxt
dzO+fH5Ogb3P1rv3Wgj0hlF8bB7VafrDGMlnVWwmpOfsKx5gUfGwORPi0IVb2F3e
TiFcSYWQv2jmNP4rOEIwAcQsPp6GdzME3bJnZaJlbWAKxSKiAj42OuOFq3r+ZpZg
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:52 2026 by rpki-client