
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa
File: D66D72562EAB11EF9B369566C4F9AE02.roa (raw, json)
Hash identifier: BTujCOzweyrlwkqHtVbjQnXK728OLdZVZlAKuLvnySY=
Subject key identifier: 7C:24:6B:34:7E:52:1E:66:B1:F1:5C:73:CF:7E:75:D6:F1:8A:1C:94
Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial: 01BA
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa
Signing time: Thu 23 Apr 2026 00:30:30 +0000
ROA not before: Thu 23 Apr 2026 00:30:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132139
IP address blocks: 185.81.70.0/24 maxlen: 24
185.81.70.144/29 maxlen: 29
185.81.70.160/29 maxlen: 29
185.81.70.176/29 maxlen: 29
185.81.70.184/29 maxlen: 29
185.81.70.192/29 maxlen: 29
185.81.70.200/29 maxlen: 29
185.81.70.208/29 maxlen: 29
185.81.70.216/29 maxlen: 29
185.81.70.224/31 maxlen: 31
185.81.70.226/31 maxlen: 31
185.81.70.236/31 maxlen: 31
185.81.70.238/31 maxlen: 31
185.81.70.240/29 maxlen: 29
185.81.70.248/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Validity
Not Before: Apr 23 00:30:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e96826-ba44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:07:68:ab:93:47:4e:1d:0d:4a:18:b6:14:
22:c4:34:42:69:4a:77:5e:fe:44:b4:51:05:24:c1:
2f:1f:77:e6:7e:91:78:22:48:18:91:2a:3f:81:aa:
e6:00:5e:c2:c9:f2:17:70:54:87:b4:aa:a1:45:f1:
d1:6c:d3:8f:2e:9d:45:f0:68:21:ab:db:86:77:09:
95:4b:6a:85:80:df:d5:77:bf:e8:a8:a0:74:b9:51:
c0:95:96:26:99:69:a1:65:8a:f8:a6:bf:c1:67:61:
7e:5e:3b:50:75:b4:4d:14:23:67:2c:23:f0:bf:2b:
b4:11:fe:de:9d:8e:13:2a:34:61:4c:73:ad:18:a4:
71:6c:bf:aa:24:61:61:be:9d:d7:e3:93:48:f9:a2:
c2:30:3a:da:a8:7b:4b:71:6a:78:b0:5e:4f:8d:9d:
c0:32:87:3b:5b:d5:ea:65:00:5e:4b:4c:7f:8c:1b:
60:3b:3c:ca:c6:eb:7b:d1:4b:e5:7a:c2:3d:dc:cf:
ca:97:14:47:09:69:1b:f6:c7:f6:2a:60:1d:2e:b8:
a7:55:3e:f8:79:92:ea:25:3a:16:a6:2b:57:3b:3f:
06:9c:52:79:ed:f3:c2:8c:09:16:35:0a:5d:ef:f7:
1b:22:08:99:d6:ce:92:eb:bf:0e:bd:ff:72:98:14:
5c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:24:6B:34:7E:52:1E:66:B1:F1:5C:73:CF:7E:75:D6:F1:8A:1C:94
X509v3 Authority Key Identifier:
keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
185.81.70.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:37:71:79:31:d8:69:20:08:26:d9:9d:9a:42:db:a3:60:8c:
16:3d:e0:4c:df:5c:10:c3:c1:b8:7f:cc:cc:26:08:3e:32:b5:
0d:ab:08:ec:11:70:5d:2a:14:8c:62:44:e5:04:a8:f2:92:5a:
d2:1f:06:46:3c:f9:ea:91:13:77:78:5b:a2:66:45:8d:66:ae:
28:48:44:5d:df:46:82:0d:5c:ae:c6:3f:d3:5d:9b:ed:28:1d:
70:06:73:b1:85:60:bc:52:14:d0:9b:05:39:58:45:f6:c1:6c:
59:4a:46:b0:58:5a:4a:85:17:fb:76:a5:86:ce:78:1a:d1:ab:
d2:c1:c7:fb:2e:e6:2d:c3:67:91:78:95:1f:79:52:43:0c:ef:
72:09:94:e1:5e:ad:1e:c7:75:ce:48:df:5f:56:cc:75:e3:cb:
72:8d:cf:17:d3:cc:15:1d:42:d0:00:bc:b4:e6:e2:0f:be:6e:
29:2b:a6:99:57:85:ac:73:d2:ff:ac:ac:cc:d6:b8:18:58:93:
3b:ea:d4:54:7b:10:54:42:df:92:7e:56:e5:02:47:88:bf:3a:
35:8e:61:0d:d3:2e:5f:13:b2:8e:2b:ec:6c:f1:e7:ef:72:01:
92:ce:c0:df:b4:5a:89:61:62:77:0b:84:49:52:2f:37:05:f3:
a6:68:85:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:50 2026 by rpki-client