
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/8F8A915C590C11F0AC0A3639C4F9AE02.roa
File: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (raw, json)
Hash identifier: +1at33QnbgxnZAr+yaqQBfNmqk6yXdfwXvQNEtuPBPk=
Subject key identifier: FA:F2:91:82:DE:AD:81:EE:79:90:55:A1:30:32:60:95:C8:FE:A0:F3
Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Certificate serial: BF
Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/8F8A915C590C11F0AC0A3639C4F9AE02.roa
Signing time: Mon 11 May 2026 07:40:45 +0000
ROA not before: Mon 11 May 2026 07:40:45 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 140919
IP address blocks: 165.99.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Validity
Not Before: May 11 07:40:45 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a0187fd-e89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:79:82:9f:f2:50:d6:3c:38:d3:73:62:76:
f9:e1:db:4a:74:65:62:30:e0:ab:c1:3c:1d:aa:5a:
3c:e0:65:6b:05:53:5c:2b:0f:84:c1:7f:4b:81:46:
a8:ff:c7:20:da:35:e7:e6:79:a2:37:95:db:d3:4d:
62:a1:1e:0e:35:39:8a:70:ca:e5:6e:b4:ff:01:f1:
8a:59:3f:91:21:40:47:56:16:8b:93:ec:e4:4a:c6:
da:1f:5d:e0:c1:ad:3c:22:11:45:6b:8a:9f:f3:f8:
68:ea:21:c0:a6:56:86:88:a9:8b:b9:a6:1b:5d:30:
4b:59:cf:15:34:f5:a9:d3:b9:a2:89:82:53:6f:30:
f8:87:12:e9:23:0c:ca:4b:e4:dd:b8:f6:ab:64:68:
0d:31:1c:19:67:28:5c:25:02:29:42:67:cd:64:41:
4d:c9:14:cf:24:76:74:3d:23:ce:f1:0a:59:d3:a8:
20:11:61:8f:c8:0b:b3:ef:fd:84:d2:4c:10:99:96:
27:15:c3:85:dd:18:20:9f:49:ef:ac:46:fa:02:a8:
df:49:f9:38:de:d9:ff:01:84:2c:42:14:cd:ae:16:
67:33:8c:b4:8e:8a:29:35:3e:58:22:3f:b1:d2:57:
53:cc:e6:bc:0a:2f:c8:4f:88:d6:b0:1d:89:45:4b:
00:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F2:91:82:DE:AD:81:EE:79:90:55:A1:30:32:60:95:C8:FE:A0:F3
X509v3 Authority Key Identifier:
keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/8F8A915C590C11F0AC0A3639C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.38.0/23
Signature Algorithm: sha256WithRSAEncryption
74:a7:49:f4:c9:5a:cd:1a:59:f1:55:5b:f1:a0:8a:ed:ad:6d:
6b:a1:94:f2:96:79:d2:9e:c2:51:f6:c0:f6:51:dc:2f:06:09:
2c:a7:94:b7:35:15:d2:1f:91:a7:ce:9f:b1:80:22:ce:8b:3f:
b3:48:c5:1c:06:cc:05:73:35:87:2a:fb:39:7b:65:91:f4:ea:
a8:86:df:b4:81:08:f4:6a:d6:fe:f2:a0:e1:8f:0b:41:a9:0e:
60:86:7b:29:0e:41:5a:f5:ee:50:79:12:ab:7e:26:0f:1e:7e:
fd:fa:2d:e0:22:81:ad:d4:3e:e9:ee:6e:a5:8b:d2:92:98:23:
e6:5b:20:2c:f6:52:96:f3:e3:f0:b3:47:17:e8:bc:64:1c:7b:
47:c1:bd:bd:4a:eb:01:ec:ec:fb:a6:b9:58:3e:ac:fe:fc:18:
b5:f9:4e:cf:3a:b0:07:72:fb:98:12:10:b6:67:06:46:af:eb:
55:80:f7:12:d2:81:66:ce:21:9d:f7:cc:5b:c2:0e:b5:94:9d:
d7:24:f5:0f:65:cd:51:b2:86:d0:05:1a:46:3f:ec:b6:df:c7:
11:6a:d0:e8:2b:21:19:07:cb:e3:b3:6a:69:bf:79:f1:7f:a2:
7f:cc:a2:d3:b6:21:fd:65:a3:7c:c1:2c:e9:c4:40:9e:b9:c3:
84:cf:d3:15
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U0NTgxMTAvBgNVBAUTKDU0REU5OTk1MEI3RkM5NTgxRkU4QUM5NjFGMzdCNzg5
OEYzNUNEQzMwHhcNMjYwNTExMDc0MDQ1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTAxODdmZC1lODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1655gp/yUNY8ONNzYnb54dtKdGViMOCrwTwdqlo84GVrBVNcKw+EwX9LgUao
/8cg2jXn5nmiN5Xb001ioR4ONTmKcMrlbrT/AfGKWT+RIUBHVhaLk+zkSsbaH13g
wa08IhFFa4qf8/ho6iHAplaGiKmLuaYbXTBLWc8VNPWp07miiYJTbzD4hxLpIwzK
S+TduParZGgNMRwZZyhcJQIpQmfNZEFNyRTPJHZ0PSPO8QpZ06ggEWGPyAuz7/2E
0kwQmZYnFcOF3Rggn0nvrEb6AqjfSfk43tn/AYQsQhTNrhZnM4y0joopNT5YIj+x
0ldTzOa8Ci/IT4jWsB2JRUsAkwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPrykYLe
rYHueZBVoTAyYJXI/qDzMB8GA1UdIwQYMBaAFFTemZULf8lYH+islh83t4mPNc3D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTQ1OC8xRUM3MkYyMjMw
RDgxMUYwQTdCRTJFNEZDNEY5QUUwMi9WTjZabFF0X3lWZ2Y2S3lXSHplM2lZODF6
Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZONlpsUXRfeVZnZjZLeVdIemUzaVk4MXpjTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0U0NTgvMUVDNzJGMjIzMEQ4MTFGMEE3QkUyRTRGQzRGOUFFMDIvOEY4QTkxNUM1
OTBDMTFGMEFDMEEzNjM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWMmMA0GCSqGSIb3DQEBCwUAA4IBAQB0p0n0yVrNGlnxVVvxoIrt
rW1roZTylnnSnsJR9sD2UdwvBgksp5S3NRXSH5Gnzp+xgCLOiz+zSMUcBswFczWH
Kvs5e2WR9Oqoht+0gQj0atb+8qDhjwtBqQ5ghnspDkFa9e5QeRKrfiYPHn79+i3g
IoGt1D7p7m6li9KSmCPmWyAs9lKW8+Pws0cX6LxkHHtHwb29SusB7Oz7prlYPqz+
/Bi1+U7POrAHcvuYEhC2ZwZGr+tVgPcS0oFmziGd98xbwg61lJ3XJPUPZc1RsobQ
BRpGP+y238cRatDoKyEZB8vjs2ppv3nxf6J/zKLTtiH9ZaN8wSzpxECeucOEz9MV
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:18 2026 by rpki-client