
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa
File: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (raw, json)
Hash identifier: 8nO2AeS9eovrPZRh+g/EszCqDMKsxw0JXOWkxPqyIxA=
Subject key identifier: 0A:F8:85:FC:11:39:A4:5E:DF:B6:F6:28:00:E4:E0:88:F9:7F:81:54
Certificate issuer: /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93
Certificate serial: DA
Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa
Signing time: Wed 01 Jul 2026 08:35:06 +0000
ROA not before: Wed 01 Jul 2026 08:35:06 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 138575
IP address blocks: 165.99.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl
rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93
Validity
Not Before: Jul 1 08:35:06 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a44d13a-dc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:d2:5f:4f:55:6f:a1:8d:cc:81:b8:23:c9:
6c:dc:5b:32:bf:cc:de:39:b1:69:24:77:7b:61:28:
c0:dc:35:c0:59:b4:25:d8:b8:0e:dd:44:a2:68:cc:
bb:a1:26:94:5c:9e:25:e4:d3:bf:2b:32:9f:3c:fe:
b4:ad:50:7f:80:3a:73:c0:04:69:25:21:b4:e1:b8:
9f:fd:7f:02:fd:ae:fc:8a:79:a1:5b:71:86:26:98:
fd:5e:8a:89:da:d2:e9:59:6e:8c:4a:17:7c:7d:1c:
84:36:5b:92:76:5b:95:15:53:64:c9:9d:0f:54:b0:
c9:81:36:66:8e:0e:da:7b:f2:18:42:1e:09:f7:9f:
b3:6c:9c:90:21:86:c1:d2:f6:b9:41:cf:39:f9:b4:
b7:7a:ed:ff:e5:47:1a:8d:6e:3d:84:de:45:ec:5f:
89:d4:dd:33:4e:7a:d9:5c:19:0b:12:6a:1f:a2:3b:
77:a1:2e:31:b8:42:ee:19:47:d6:a5:97:2c:6e:f4:
61:af:12:e3:8c:96:32:29:e2:bc:00:fc:ed:27:79:
77:6f:28:57:94:8f:9d:a1:de:1c:1b:90:9a:fe:b8:
e6:96:58:b7:c9:8c:d0:51:be:b3:bc:09:14:f6:b0:
80:83:4e:64:47:76:a3:33:ee:e5:2e:ee:c5:97:81:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F8:85:FC:11:39:A4:5E:DF:B6:F6:28:00:E4:E0:88:F9:7F:81:54
X509v3 Authority Key Identifier:
keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.81.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:9f:8a:7a:5a:ab:eb:97:80:42:8d:bc:6e:ea:08:3d:94:27:
13:f7:f8:24:68:84:f1:64:3e:fb:b1:60:af:76:ed:ba:04:04:
c2:28:d4:dd:46:a4:0c:bc:66:ce:b4:78:a3:64:69:b6:78:23:
a0:14:df:8e:71:09:9a:5a:00:a3:8a:96:fe:9c:95:dc:26:d6:
0d:56:fe:15:37:04:b7:ad:62:69:44:dd:d1:7a:44:e6:07:56:
11:b3:4d:f9:e3:a3:2b:53:2f:2a:5d:ca:0d:6a:ac:15:46:81:
e8:52:8d:76:ac:c0:6d:ea:e8:ce:89:c5:39:21:6b:0b:b7:ff:
6e:98:c7:0d:1b:f2:d7:d9:a2:cc:00:e9:09:67:d2:85:55:ff:
f7:49:f6:6a:77:4c:04:94:d7:cc:12:ac:01:80:bd:ef:a0:f8:
67:29:71:41:58:ec:cb:25:aa:20:a8:c1:f7:fd:91:6a:2b:aa:
e5:b7:6d:d6:81:37:59:db:33:7c:80:5a:81:7a:26:eb:ed:92:
03:f7:94:2e:a4:20:92:f3:be:13:b8:99:2c:d1:d4:a8:c1:81:
aa:1d:0a:34:2f:67:82:c1:ae:a5:eb:84:be:3e:6d:78:d9:58:
a7:2d:1d:17:4f:96:c5:86:6b:ef:a7:d9:54:a7:39:9d:2e:f2:
79:de:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:20:47 2026 by rpki-client