
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/916E622AFB8A11F0A03435B8556F56BC.roa
File: 916E622AFB8A11F0A03435B8556F56BC.roa (raw, json)
Hash identifier: Iebk6ILmCSfbJ1DrvF9DOcVVKbQq+nPdw3EpDt5lvKQ=
Subject key identifier: 42:A4:BD:BF:71:1B:36:9E:5C:FD:97:1E:65:2A:E6:E3:D9:7A:A6:6D
Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial: 8E
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/916E622AFB8A11F0A03435B8556F56BC.roa
Signing time: Sun 01 Mar 2026 08:09:50 +0000
ROA not before: Tue 27 Jan 2026 14:15:01 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153947
IP address blocks: 165.99.218.0/24 maxlen: 24
165.99.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:52:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Validity
Not Before: Jan 27 14:15:01 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3f44e-59dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:36:47:06:ec:40:7e:8f:ca:00:45:98:93:fb:
89:1b:d6:34:8d:01:02:b3:96:cd:e5:4a:2a:d4:66:
8f:d1:de:b9:9d:cb:f0:e0:24:49:0b:bf:28:08:fb:
7a:f1:a9:20:ef:2a:8f:6d:a2:e8:07:05:20:ee:48:
77:46:54:83:05:8d:f2:d1:dd:04:e9:51:60:3f:37:
8b:9f:b7:97:08:5c:7a:74:9a:39:ed:5a:5a:55:ce:
17:cb:d7:c0:bf:00:0e:1c:05:dc:dd:0c:84:4d:a2:
1f:f9:93:b4:95:59:4a:75:c6:8f:48:88:f2:e3:51:
af:5d:f2:fa:15:a7:f1:a4:af:bf:00:f0:9f:32:b7:
93:13:1a:bc:35:18:fb:45:53:ea:13:29:2a:88:08:
25:4b:72:4f:0c:8c:1f:9f:75:f4:82:cc:a4:25:4d:
7d:8c:4a:d2:1f:19:df:70:26:d9:11:81:f1:35:82:
7f:b7:c2:22:e2:fd:34:0d:f5:6d:e6:7a:94:4e:fd:
f4:24:f0:b7:11:dd:90:2f:34:c3:10:f9:60:ab:29:
55:41:73:71:17:ef:14:97:12:b3:e8:fa:23:13:a9:
c2:7d:85:12:e8:c9:a1:3e:19:bc:7b:dd:16:0d:8a:
f1:da:75:bf:f3:4b:3a:1f:61:44:ec:c2:b8:df:2d:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A4:BD:BF:71:1B:36:9E:5C:FD:97:1E:65:2A:E6:E3:D9:7A:A6:6D
X509v3 Authority Key Identifier:
keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/916E622AFB8A11F0A03435B8556F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.218.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:6b:28:56:ca:9c:86:4c:c0:e4:71:49:05:9a:e0:b1:83:a1:
a5:c3:fb:98:b7:42:1f:e6:26:d9:51:d9:d5:74:4b:ec:27:7a:
07:40:b1:82:83:ba:09:b2:d6:da:3d:1b:29:40:f2:38:97:0e:
0a:27:59:40:8d:85:d8:f0:28:88:11:5d:1f:a8:86:07:7a:b2:
9a:65:c1:71:d6:17:84:78:4f:73:ab:11:9f:a5:39:f6:45:e4:
15:62:40:e1:01:0b:ac:1e:8f:30:7c:7c:24:dd:b5:88:0b:a9:
6c:1c:84:01:34:1b:8a:61:29:4a:a6:7a:98:ef:c9:24:6a:ec:
7f:59:2e:50:6c:a6:d1:e0:aa:c8:61:55:1d:fc:7f:3b:40:41:
36:58:49:24:46:e0:d5:cf:56:8a:c6:f4:ee:ae:ec:e1:b1:57:
30:8a:a1:49:ab:17:82:8a:3b:0e:cf:92:87:95:81:21:bd:98:
f9:ba:de:05:c5:4e:b7:85:b3:a3:43:57:10:c6:3b:d4:49:98:
43:eb:26:10:c2:c9:39:ac:6d:a7:ce:80:76:5a:13:f2:b1:b7:
af:8c:b5:1a:37:6a:fe:c8:3d:f9:9c:52:6c:91:d6:ce:50:9f:
4f:11:0e:6c:43:4e:cc:69:e4:1c:cf:cf:e3:43:aa:fb:40:75:
98:e9:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:23:20 2026 by rpki-client