
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/CE1C73F63F8211F1AB237298B0833773.roa
File: CE1C73F63F8211F1AB237298B0833773.roa (raw, json)
Hash identifier: wmJO/RC/icF4iS9DvaqPjod6p0WgtVixmksw7oAc8/c=
Subject key identifier: 3B:16:5B:31:40:28:80:18:5A:F3:75:09:7C:71:3E:B6:69:AD:A3:30
Certificate issuer: /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Certificate serial: B2
Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/CE1C73F63F8211F1AB237298B0833773.roa
Signing time: Fri 24 Apr 2026 02:10:46 +0000
ROA not before: Fri 24 Apr 2026 02:10:46 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 153885
IP address blocks: 165.99.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:11:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Validity
Not Before: Apr 24 02:10:46 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69ead126-0648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:51:71:93:a1:ca:b9:b4:fa:2a:d3:3c:d5:
0c:b8:32:47:88:b7:08:2e:d9:07:de:50:81:d2:e6:
e4:10:44:6a:47:4c:93:36:98:4b:c6:41:9f:5e:36:
c4:81:53:92:93:76:83:11:56:dd:6c:ac:47:8a:d7:
24:10:fd:ca:67:70:85:15:fe:00:e3:0e:de:49:96:
80:2a:7d:e0:46:f9:c5:ad:6f:6c:ff:0e:a9:c3:cc:
75:8e:e3:2e:53:f1:1d:1e:ca:56:db:af:b6:ec:12:
e3:e3:d3:2a:74:a4:71:f9:d8:14:08:0d:b0:b2:88:
47:7f:f4:98:7b:c9:3c:53:c9:0b:61:e0:bc:41:b2:
47:04:9f:ff:4d:96:a4:b7:3d:ba:6e:ab:3c:81:f2:
04:0a:b0:f4:9a:3c:54:27:04:6c:c9:82:49:4a:1d:
9f:a6:28:af:db:71:18:80:66:25:3c:de:09:12:6b:
51:38:06:d2:9b:f4:93:e2:a0:e4:9c:eb:34:a8:a9:
7c:8c:1f:4e:ad:d8:54:0c:1b:4d:0a:f2:ba:a0:dd:
73:e1:1b:34:7d:ee:60:ea:76:55:8a:58:13:0d:31:
5a:22:2c:c3:f8:9b:bf:cb:ec:4c:a5:0e:67:c2:ac:
32:cb:52:fc:8e:f8:a1:ef:04:f9:09:64:53:41:f4:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:16:5B:31:40:28:80:18:5A:F3:75:09:7C:71:3E:B6:69:AD:A3:30
X509v3 Authority Key Identifier:
keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/CE1C73F63F8211F1AB237298B0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.60.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4b:d1:a4:96:41:41:b9:07:c9:c9:7b:03:1c:91:8c:a1:24:
21:90:8c:fa:20:cf:86:9e:0e:fb:e8:1f:9c:df:22:d9:ee:e7:
4a:bb:08:9e:70:31:50:cf:d1:6a:f6:f8:f4:72:3c:70:e7:c7:
67:95:e4:03:c6:dc:a4:b4:00:00:c3:4c:7c:da:49:9f:d3:f1:
04:52:8f:bb:91:42:50:a6:1a:3b:c2:5e:2d:c7:3c:60:9f:83:
a9:ea:16:11:14:01:df:89:3b:a3:96:25:b1:e0:b3:d3:26:92:
1c:34:60:00:6f:2d:ef:a9:42:60:8c:39:7c:26:3a:ae:25:9e:
2f:b1:45:29:b5:41:c1:9b:56:f4:6f:6b:a6:fa:91:9d:ad:70:
d2:7e:fa:1b:fa:b8:f1:61:1f:d7:25:c3:71:d0:2b:70:69:e9:
ce:b0:04:7e:88:16:23:10:89:83:e2:9c:24:13:26:13:6a:ba:
b7:5f:4f:c3:99:18:4a:c4:24:63:a1:ca:93:09:76:2d:45:8e:
ff:6b:c0:f8:63:4a:7f:cf:08:06:bf:5a:31:d6:4b:ab:72:09:
81:46:61:c9:d1:d5:f6:e1:be:d4:fc:9d:48:2f:92:ca:c4:3e:
ec:cd:56:c6:e1:91:f6:15:a8:30:6b:3b:0b:d2:6e:0b:d0:48:
ae:4c:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:05 2026 by rpki-client