
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/D055AA08480111F098A44B5CC4F9AE02.roa
File: D055AA08480111F098A44B5CC4F9AE02.roa (raw, json)
Hash identifier: XsH+IJ5SSw5cAUWIZZhkMzbgbFC8kkMlwg6uRhNZXvk=
Subject key identifier: FF:5A:43:D1:92:D5:20:50:51:B8:DE:D2:3E:C2:D6:03:E8:DE:73:C3
Certificate issuer: /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Certificate serial: D4
Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/D055AA08480111F098A44B5CC4F9AE02.roa
Signing time: Tue 07 Jul 2026 08:34:00 +0000
ROA not before: Tue 07 Jul 2026 08:34:00 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 153908
IP address blocks: 165.99.114.0/23 maxlen: 23
165.99.114.0/24 maxlen: 24
165.99.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Validity
Not Before: Jul 7 08:34:00 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4cb9f8-e499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:ca:7d:dc:a9:42:d3:6b:07:c6:cf:21:9e:
b7:11:d9:0a:9c:b9:64:40:52:76:51:31:ad:6a:0e:
8f:85:98:93:2b:80:3c:82:16:b9:a0:be:a1:86:d6:
13:c5:8e:d7:9f:41:fc:ed:5a:b3:60:fa:4d:2b:dd:
2c:95:b4:6c:8f:59:96:c5:a0:28:4a:2f:7a:90:d0:
f6:3f:ec:69:08:5c:93:fd:ec:90:68:22:26:04:f3:
d5:3e:05:81:b4:1f:a3:ae:a6:c9:67:ca:19:cf:7d:
c6:9d:3b:94:e5:95:46:2d:e3:6a:be:8f:32:7f:21:
ff:a4:d0:56:0a:a3:13:0b:71:f2:e0:fb:9a:2f:9a:
a5:e0:bf:18:24:e2:43:7f:18:4d:af:24:dd:eb:b1:
63:b0:2f:a0:f7:55:b0:ec:65:74:aa:20:2e:94:5a:
d5:51:2e:6a:1f:b3:1a:b6:08:5d:1d:f3:2f:12:96:
33:0d:65:cc:fb:49:3c:38:87:15:d7:47:fa:59:20:
66:94:a5:fe:e6:4f:93:5b:8c:13:21:fb:7f:bc:ae:
9f:64:b2:74:50:e8:62:46:4c:60:fd:83:66:3d:27:
54:90:17:c4:55:14:3e:b8:2d:7d:95:fa:d1:f2:fa:
53:0a:3f:04:1f:75:ad:bc:95:c7:1f:cf:a2:9b:e5:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5A:43:D1:92:D5:20:50:51:B8:DE:D2:3E:C2:D6:03:E8:DE:73:C3
X509v3 Authority Key Identifier:
keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/D055AA08480111F098A44B5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.114.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:80:19:a4:30:3f:ca:f7:19:b8:a6:89:78:22:dc:ff:10:6c:
9e:79:c7:07:fd:3a:8a:6d:13:c5:8f:b1:d0:af:a5:c1:1c:9d:
d6:43:02:90:ef:87:af:d6:3e:17:a2:e1:a5:03:35:53:53:19:
15:7d:8a:70:74:bf:3c:ea:e5:59:53:60:08:0d:49:6b:6b:da:
ca:70:f6:06:ae:5f:08:a2:b2:f9:e7:39:0e:1b:1a:1e:fe:d7:
73:89:36:3f:da:a9:c4:8f:a4:9f:ce:8d:80:f1:43:d1:9b:84:
59:b5:37:7a:d9:0b:bd:a4:9b:ed:e7:c5:b8:80:a6:ae:60:d2:
21:78:2d:5d:b3:4b:c8:de:f9:29:91:98:33:07:c4:26:34:3f:
ef:39:e3:41:79:10:c4:2a:a3:dd:1d:d9:16:1e:dd:fa:82:bd:
99:11:f0:58:08:11:b8:a6:fb:bd:0b:86:5f:0d:6f:81:08:78:
8f:91:a7:31:b7:35:a0:34:fd:77:fd:44:81:87:5e:84:e7:58:
5a:5b:85:6f:26:9d:d0:29:1b:fe:75:eb:af:1b:9b:1d:22:8e:
1e:5f:7b:b7:f3:01:88:1b:cd:8b:15:b0:b9:00:bf:4b:58:fc:
a9:d9:b3:13:8a:75:25:c8:c6:48:88:b6:9c:29:33:73:43:13:
23:0b:05:47
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdCMzYxMTAvBgNVBAUTKDJEM0UzRkJCQzdDMkIxMkNENTM0QzhCOUVEMzc4NkZC
NkFBNTU1MDYwHhcNMjYwNzA3MDgzNDAwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRjYjlmOC1lNDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtnfKfdypQtNrB8bPIZ63EdkKnLlkQFJ2UTGtag6PhZiTK4A8gha5oL6hhtYT
xY7Xn0H87VqzYPpNK90slbRsj1mWxaAoSi96kND2P+xpCFyT/eyQaCImBPPVPgWB
tB+jrqbJZ8oZz33GnTuU5ZVGLeNqvo8yfyH/pNBWCqMTC3Hy4PuaL5ql4L8YJOJD
fxhNryTd67FjsC+g91Ww7GV0qiAulFrVUS5qH7MatghdHfMvEpYzDWXM+0k8OIcV
10f6WSBmlKX+5k+TW4wTIft/vK6fZLJ0UOhiRkxg/YNmPSdUkBfEVRQ+uC19lfrR
8vpTCj8EH3WtvJXHH8+im+VKpwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP9aQ9GS
1SBQUbje0j7C1gPo3nPDMB8GA1UdIwQYMBaAFC0+P7vHwrEs1TTIue03hvtqpVUG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0IzNi82QTJDRTg4MjQw
OEYxMUYwQjM0QUVGNDdDNEY5QUUwMi9MVDRfdThmQ3NTelZOTWk1N1RlRy0ycWxW
UVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xUNF91OGZDc1N6Vk5NaTU3VGVHLTJxbFZRWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTdCMzYvNkEyQ0U4ODI0MDhGMTFGMEIzNEFFRjQ3QzRGOUFFMDIvRDA1NUFBMDg0
ODAxMTFGMDk4QTQ0QjVDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWNyMA0GCSqGSIb3DQEBCwUAA4IBAQCggBmkMD/K9xm4pol4Itz/
EGyeeccH/TqKbRPFj7HQr6XBHJ3WQwKQ74ev1j4XouGlAzVTUxkVfYpwdL886uVZ
U2AIDUlra9rKcPYGrl8IorL55zkOGxoe/tdziTY/2qnEj6Sfzo2A8UPRm4RZtTd6
2Qu9pJvt58W4gKauYNIheC1ds0vI3vkpkZgzB8QmND/vOeNBeRDEKqPdHdkWHt36
gr2ZEfBYCBG4pvu9C4ZfDW+BCHiPkacxtzWgNP13/USBh16E51haW4VvJp3QKRv+
deuvG5sdIo4eX3u38wGIG82LFbC5AL9LWPyp2bMTinUlyMZIiLacKTNzQxMjCwVH
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:59 2026 by rpki-client