
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/4881B000288D11F19BDD6B76AC833773.roa
File: 4881B000288D11F19BDD6B76AC833773.roa (raw, json)
Hash identifier: rEN37lmGj7miwKByIvFWg1gtu5AStLDZq19R48cidBk=
Subject key identifier: 91:03:28:FA:1F:84:61:D1:1C:D2:26:47:29:3D:4D:0B:4A:37:66:26
Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial: 9E
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/4881B000288D11F19BDD6B76AC833773.roa
Signing time: Wed 25 Mar 2026 20:57:50 +0000
ROA not before: Wed 25 Mar 2026 20:57:50 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 152698
IP address blocks: 165.99.218.0/24 maxlen: 24
165.99.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 20:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Validity
Not Before: Mar 25 20:57:50 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69c44c4e-997d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:7f:4a:2a:21:86:4f:ea:23:9b:8e:d0:db:
dc:79:a1:d2:5e:b4:26:e1:9d:99:77:8f:25:41:24:
68:ec:2f:b3:cd:1f:45:0f:d8:0a:14:aa:f9:ae:f2:
c4:5c:8d:c4:3c:53:c3:00:5c:dd:44:47:bd:2b:ac:
bf:ca:a9:3c:ec:50:83:b7:a9:4b:fa:94:57:50:f1:
78:9b:65:29:fb:67:23:5b:ce:69:5b:95:51:6b:6b:
5b:c1:c7:b3:36:88:d2:6f:15:59:bd:56:6b:76:fc:
4f:2c:1e:d7:4d:d7:9c:b4:47:22:ef:5d:59:19:6e:
66:8e:ea:45:7c:a5:7c:b0:42:95:7f:72:97:12:d0:
7b:a5:f8:92:cc:b7:c8:ca:a2:35:00:20:07:39:2b:
99:3b:17:51:48:e4:85:d6:21:60:39:7c:d8:fe:b6:
8c:03:3e:0e:1f:9b:8e:ac:6c:e5:18:1d:9a:f0:38:
78:90:22:24:12:8c:f3:5f:78:96:63:ad:19:d5:a5:
c6:5d:c1:77:29:91:9d:fb:c0:af:4a:d3:a5:9a:d1:
ac:7b:95:ed:3c:80:ad:a0:23:dd:47:7b:b2:fa:1f:
ec:06:a4:8b:9a:0e:94:a0:d8:6f:59:58:a9:14:dc:
66:ad:69:9a:00:e0:ae:ec:78:ff:4b:c4:a1:e5:a0:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:03:28:FA:1F:84:61:D1:1C:D2:26:47:29:3D:4D:0B:4A:37:66:26
X509v3 Authority Key Identifier:
keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/4881B000288D11F19BDD6B76AC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.218.0/23
Signature Algorithm: sha256WithRSAEncryption
24:b4:4b:35:07:0c:ba:a1:a0:50:8e:2b:51:68:58:1c:5e:e9:
79:53:65:7d:cf:32:e9:7b:c6:76:f1:c2:75:66:6c:75:19:a2:
2a:02:b0:1b:3c:62:6b:27:20:51:d9:8d:3e:2e:91:a5:9a:70:
87:f5:ec:a4:38:ea:e7:2a:4f:ac:8e:e9:f9:56:3a:eb:af:30:
6f:08:9c:19:70:1b:31:b8:d2:33:7f:72:c9:7b:39:79:b5:01:
f5:9f:57:a5:c0:fe:22:1f:56:20:da:62:c9:df:70:bc:89:58:
98:1c:ee:28:bf:01:f9:8e:77:b3:30:09:a3:3a:3b:35:63:dc:
33:2c:23:07:58:c0:ee:c6:41:1a:16:6a:75:eb:c2:a9:f7:a3:
5c:c8:23:23:15:bd:cb:f1:3c:83:5f:05:84:b8:92:3f:4e:72:
73:15:00:29:d1:d0:10:6e:43:d9:90:65:11:07:be:c0:1b:94:
64:e0:c6:21:f6:2b:3c:7d:a7:6e:81:03:9a:71:c1:51:c9:15:
76:af:0b:73:bb:c1:86:83:46:42:0a:dd:5d:5f:14:f7:c3:39:
85:d6:ce:e9:03:d9:f9:7f:8f:fa:c5:4e:23:c6:e1:3b:61:48:
9d:3b:ff:bb:2a:9a:2b:0b:f1:79:f2:60:ad:41:bf:86:c3:cb:
62:d5:40:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:35:59 2026 by rpki-client