
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/C3DCFE54EB2911F0BD7173483B6F56BC.roa
File: C3DCFE54EB2911F0BD7173483B6F56BC.roa (raw, json)
Hash identifier: GRUkISuSjrdPycV7YoKPvCtNvhdJEKU1KQQr0iDkDpg=
Subject key identifier: 86:43:BE:54:FD:A6:C3:F2:58:06:AA:3F:BC:52:D3:4A:66:05:CD:4D
Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3
Certificate serial: A2
Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/C3DCFE54EB2911F0BD7173483B6F56BC.roa
Signing time: Sun 01 Mar 2026 17:45:09 +0000
ROA not before: Tue 06 Jan 2026 18:01:47 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 213549
IP address blocks: 165.99.164.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl
rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3
Validity
Not Before: Jan 6 18:01:47 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47b25-d6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:d4:56:b4:82:40:cd:c0:a4:13:16:b4:38:
5f:e4:41:d3:c5:ee:e6:92:b4:a7:85:0e:e0:b7:17:
92:9c:eb:e3:49:bb:7b:9d:e4:4b:c0:de:97:7d:79:
c7:ba:a1:8e:f3:7b:f9:c1:6d:3a:d7:97:a7:41:9a:
50:98:ce:9c:bc:3f:97:54:f0:a6:d3:4d:6d:80:dc:
96:4c:51:ee:44:6f:eb:fb:83:75:8a:ea:7b:70:ea:
7e:ea:1e:75:03:17:e5:1c:34:40:5b:ee:cf:a4:8d:
da:0a:c4:91:ec:89:bb:68:50:47:77:ce:72:de:e6:
3e:ea:09:06:77:ab:51:e7:e4:1e:17:83:87:60:75:
ff:d0:9b:e9:b3:c5:5d:30:88:0b:fd:f0:57:8f:42:
61:ff:93:8f:c4:f8:bc:ac:2b:50:40:be:d4:5a:6f:
9f:09:0c:8a:30:76:c1:c3:d0:11:9c:04:44:84:a2:
5a:4a:b8:16:9c:eb:1f:bf:70:f9:f1:4e:c3:67:81:
ed:d7:7c:3d:89:03:01:f5:00:e6:21:d2:ff:7b:09:
49:85:1e:d1:c3:65:30:31:21:a2:69:f2:36:43:eb:
f5:11:0d:27:28:10:e8:2d:86:7e:5f:e5:e7:e2:c8:
75:f4:01:d3:6f:53:89:4a:80:aa:18:20:0b:81:9d:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:43:BE:54:FD:A6:C3:F2:58:06:AA:3F:BC:52:D3:4A:66:05:CD:4D
X509v3 Authority Key Identifier:
keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/C3DCFE54EB2911F0BD7173483B6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.164.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:07:db:f0:68:fb:31:42:d2:ef:79:de:2c:ee:bd:de:67:97:
8d:a7:1f:ec:ba:d9:77:81:b5:3b:b9:ef:e5:88:33:0d:3a:df:
04:7c:a8:b7:69:77:f8:86:c2:61:a4:b0:56:d5:dc:81:1b:91:
19:79:01:fc:98:37:50:b6:de:ae:cd:08:3d:dc:86:26:e5:9d:
d8:fc:6d:d1:70:e8:ab:a6:78:ef:ab:04:d2:4d:39:cf:0d:ed:
67:37:68:84:6e:49:04:bb:87:ce:45:11:29:b4:dd:ee:9e:f2:
64:c7:fc:8c:07:95:69:6c:85:3e:1d:65:2c:82:f4:c8:f5:3b:
36:bd:d4:4b:8e:24:e0:9f:d2:24:13:8d:06:06:ef:fa:40:65:
3f:e2:a3:a4:52:67:8d:50:a0:ee:56:b4:e3:7f:5b:b4:94:2d:
0a:0f:fd:41:1c:a2:a4:5c:7d:81:00:98:28:21:4b:a6:9c:34:
eb:33:b7:f4:f4:d5:23:04:7c:5d:21:50:72:80:be:c9:db:86:
46:78:5d:c8:53:63:98:4a:2b:4c:22:c6:1d:07:56:5c:03:0b:
83:91:7c:65:6d:62:f0:b3:69:4f:3f:ca:ad:ee:b5:3b:12:7c:
bf:6c:06:a8:32:74:d0:bf:01:98:d8:35:9d:d6:a7:f1:bb:1b:
5a:2e:a6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:38 2026 by rpki-client