
$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/99DDC906ABCF11F09186B30FC4F9AE02.roa
File: 99DDC906ABCF11F09186B30FC4F9AE02.roa (raw, json)
Hash identifier: C0Cuj4295jMXddurmsuKdybi+VVlCTio/EAvQnqE+Cw=
Subject key identifier: 40:8C:84:15:64:9C:07:CE:EA:0D:EE:77:C4:58:C9:6E:51:55:9B:44
Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801
Certificate serial: 012C
Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/99DDC906ABCF11F09186B30FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:21:31 +0000
ROA not before: Sat 18 Oct 2025 03:07:38 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 26658
IP address blocks: 45.126.228.0/22 maxlen: 24
103.195.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl
rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801
Validity
Not Before: Oct 18 03:07:38 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a5aafb-9d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:62:39:89:c0:59:32:85:c4:55:72:56:a9:3c:
be:67:fb:6d:62:aa:3e:ce:06:e1:84:46:03:9d:42:
82:05:e4:ed:4a:ba:55:54:c3:ed:0e:1e:1d:90:5f:
a2:ed:d4:5c:3f:cf:e9:e6:9a:1d:35:da:00:8f:50:
a3:4c:0a:e0:75:fd:06:de:09:cb:64:7d:4d:e9:f5:
3b:47:e4:4f:2c:20:27:8e:29:22:01:6c:0a:7a:1c:
8a:f2:d8:99:4b:7f:e6:88:74:b8:c5:9d:c9:70:5c:
c5:3a:a6:07:2f:a7:3d:18:22:dd:7c:0e:0f:a6:e2:
16:27:d4:25:99:6a:66:c2:3e:cc:41:e0:50:c5:9f:
42:13:e4:1e:cc:b5:73:7e:53:f0:0d:f9:ff:af:32:
2a:4d:f4:77:f9:e3:5a:33:bb:20:39:8d:46:e3:c7:
39:ec:94:a1:74:99:3b:c1:40:e7:96:cc:00:0b:df:
81:64:7a:e5:58:ae:e8:cf:6d:c9:5b:13:ec:64:f2:
b4:fd:01:9e:cf:51:50:a3:36:4a:25:f9:25:40:73:
e1:8a:53:1c:d6:7b:31:8f:ac:8e:b2:08:d2:88:bf:
42:63:e9:92:3c:1b:6e:d3:a8:d1:c5:cc:f1:ae:fd:
5d:f5:55:32:66:71:3c:e1:89:b5:e7:4c:2a:d6:d7:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8C:84:15:64:9C:07:CE:EA:0D:EE:77:C4:58:C9:6E:51:55:9B:44
X509v3 Authority Key Identifier:
keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/99DDC906ABCF11F09186B30FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.126.228.0/22
103.195.116.0/22
Signature Algorithm: sha256WithRSAEncryption
27:db:cc:23:53:45:bb:27:23:e9:1a:ca:cf:b0:6a:c7:46:32:
57:1c:bd:89:92:ad:92:64:37:cf:67:ab:03:26:b5:1d:63:ae:
1e:2f:cb:87:9e:a6:1c:b4:b9:ef:a3:48:68:46:7e:09:aa:7f:
38:2e:8a:e7:12:ce:17:a0:ef:e0:ed:06:1c:b7:93:9f:8e:b0:
50:7e:a2:13:15:be:a9:8d:2b:1b:1e:7c:1d:58:15:bb:69:ce:
15:0b:cb:9e:87:bf:8c:dc:9e:24:4c:1f:db:bf:9b:24:ce:cb:
0f:82:76:3b:f1:52:15:aa:1f:8f:7a:f2:b0:ca:55:f8:4b:9b:
cc:13:27:3b:9f:5e:90:b9:48:55:96:80:ee:c8:26:78:5c:8a:
a0:c4:db:aa:43:c7:4b:a6:d0:8e:98:0f:4f:e7:f9:e2:4d:99:
06:49:15:b6:f6:35:0c:6f:73:f9:8f:14:14:c9:40:24:0b:14:
25:af:aa:ef:49:00:63:12:c0:8c:4d:c1:3c:7f:06:9a:93:de:
46:93:82:fe:b9:87:2f:a9:e2:c3:30:33:c8:5a:26:57:a6:7a:
14:3a:9e:c5:42:ba:69:75:8f:67:76:cc:18:8e:cc:00:6d:25:
08:8a:ed:e1:63:0d:4b:5f:ac:1e:29:43:e6:d9:c6:9c:d9:9c:
27:f4:5d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:44 2026 by rpki-client