
$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/9F9EF74086A111F18D87851971A30FBC.roa
File: 9F9EF74086A111F18D87851971A30FBC.roa (raw, json)
Hash identifier: MFU9g1zLut/X+3qK5+QNkUBcEhI1pfxDqvyTIelsUy4=
Subject key identifier: 07:6F:F2:B9:B1:0E:37:3A:3C:59:4B:DD:53:ED:FD:F9:3E:B3:EB:D0
Certificate issuer: /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Certificate serial: D5
Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/9F9EF74086A111F18D87851971A30FBC.roa
Signing time: Thu 23 Jul 2026 14:20:15 +0000
ROA not before: Thu 23 Jul 2026 14:20:15 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 149173
IP address blocks: 165.101.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 14:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Validity
Not Before: Jul 23 14:20:15 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a62231f-edf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:1d:00:92:e3:8c:c5:50:90:88:e6:50:59:
91:7e:75:6c:a1:1e:2c:12:6d:07:95:5a:e5:0a:c7:
f2:b5:1c:6a:06:d8:1c:2b:ad:5d:c7:fb:4b:3e:a5:
20:1d:27:96:b3:00:18:9d:45:63:9b:53:2a:a3:be:
be:08:80:24:fc:5d:bd:37:b9:e9:65:c8:e7:09:57:
07:78:84:b9:d2:2f:c6:dd:bd:04:dd:6c:aa:b9:24:
b3:1a:93:b7:86:2c:29:d3:1b:36:29:aa:69:19:77:
bd:3e:11:66:9c:fc:f5:50:9e:47:1e:c5:46:0f:01:
cc:49:19:86:10:6d:a5:ed:58:c5:45:84:df:ec:a6:
4b:4c:ca:23:6a:40:f0:ac:2f:e9:71:51:e3:79:4c:
8a:c4:7f:94:15:93:f9:39:d8:20:55:ad:b2:8c:d7:
9e:bf:fc:fd:e1:46:f1:97:ba:3b:71:af:da:88:15:
6c:86:e6:16:27:05:6b:e5:6f:87:a9:b6:1e:cb:3c:
5f:83:25:b7:2e:38:2e:c8:dc:7e:8d:c6:2d:af:b6:
4d:d4:28:00:2a:5e:05:85:b4:95:0b:32:dd:18:0b:
21:1f:29:3c:24:59:dc:cb:70:75:89:dc:49:67:cd:
d6:d7:4d:10:eb:6a:f6:76:ed:b8:5d:f4:41:7b:fc:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6F:F2:B9:B1:0E:37:3A:3C:59:4B:DD:53:ED:FD:F9:3E:B3:EB:D0
X509v3 Authority Key Identifier:
keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/9F9EF74086A111F18D87851971A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.21.0/24
Signature Algorithm: sha256WithRSAEncryption
75:57:19:62:6e:d5:b7:1c:95:5c:58:89:58:15:b4:f8:67:48:
75:77:c9:16:35:f1:cf:8d:3f:7d:ff:82:7f:2a:3a:ae:85:15:
54:08:92:b0:cd:70:a5:44:16:35:76:2b:f7:a6:f4:b8:27:bc:
aa:1b:73:84:69:57:b5:62:e2:17:82:e0:37:a7:7d:52:79:41:
d9:9a:97:80:0d:df:6d:05:9f:ac:be:ef:ef:7c:d8:2d:dd:66:
da:52:85:3e:e9:7c:2b:d0:03:67:59:0f:3c:d2:cb:86:27:e0:
15:d8:6e:b3:3a:f6:04:fa:0d:33:f3:23:ec:eb:c4:9f:26:34:
5d:fd:f4:e1:12:7d:bc:28:06:42:a5:3b:6e:bf:28:f5:c3:6d:
bc:79:78:17:bd:c1:f5:fd:18:a4:88:99:42:97:9f:ac:39:e1:
bb:69:e2:d4:0b:d3:a2:93:dc:a6:3b:1b:88:09:77:3c:04:9d:
1d:a1:3d:68:80:e4:69:2a:49:9a:40:fa:fd:9b:53:3c:c5:6c:
5c:34:f4:ca:d5:ba:f9:8a:0d:46:e0:d9:a7:6c:db:c6:ee:de:
64:91:1a:60:35:19:73:47:08:f3:df:0f:42:d3:e4:70:5c:71:
ca:17:7b:17:15:28:67:50:01:d8:7e:bd:bc:7b:29:2d:be:4c:
64:23:60:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:37 2026 by rpki-client