
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/DB303ECE6F9811F1B69CA1B570A30FBC.roa
File: DB303ECE6F9811F1B69CA1B570A30FBC.roa (raw, json)
Hash identifier: 2i/RmVuau13EAza6ETcekxJOwQ/J9el6roQeii9jaLo=
Subject key identifier: 14:89:40:E9:BE:4A:92:4A:40:57:A8:EA:C2:46:5C:99:43:3E:6E:B5
Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial: DB
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/DB303ECE6F9811F1B69CA1B570A30FBC.roa
Signing time: Wed 24 Jun 2026 06:49:33 +0000
ROA not before: Wed 24 Jun 2026 06:49:33 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 149287
IP address blocks: 165.99.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 16 Jul 2026 08:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Validity
Not Before: Jun 24 06:49:33 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a3b7dfd-e161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:83:3e:f5:97:15:09:24:6a:8c:b9:48:5e:0f:
fe:2f:83:f3:80:44:2d:c1:12:9e:35:be:34:e9:38:
f4:d1:37:c6:06:2b:2d:45:e2:39:81:96:6e:65:0e:
b4:79:c2:a5:45:9b:47:ca:91:bf:6f:d2:7b:1b:2a:
cd:34:06:5e:bc:77:cf:2a:a3:c3:e0:ad:ce:e0:88:
ec:d6:96:c1:3c:99:3f:a2:5f:63:49:18:2c:64:4a:
46:6d:03:ef:d3:a7:de:a8:70:f6:12:0c:c5:ce:b3:
78:3a:2d:82:73:f1:3f:7a:9f:56:b8:1f:e0:d3:5b:
df:b8:d3:f9:d6:ee:ae:78:56:26:0e:08:f1:3c:ab:
da:45:90:b4:a7:60:a3:83:c8:ed:80:c7:0c:0b:fc:
cd:a4:64:77:62:e0:29:51:fa:e6:9f:da:0c:67:0e:
8b:d3:18:59:ed:4a:f8:a6:61:26:1a:a9:c3:d8:b8:
e4:a0:36:7a:45:5b:ae:72:5f:24:ab:e2:ca:fc:07:
24:5a:af:10:2e:c1:0a:04:ec:83:93:81:c9:a4:36:
10:31:d7:3f:43:78:ac:a5:65:6e:0e:bd:19:41:0c:
88:f7:af:c8:07:4e:8b:a1:8c:c0:b8:00:a9:43:0c:
2e:34:f3:b3:ce:89:37:23:02:ff:23:de:a8:54:4d:
ec:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:89:40:E9:BE:4A:92:4A:40:57:A8:EA:C2:46:5C:99:43:3E:6E:B5
X509v3 Authority Key Identifier:
keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/DB303ECE6F9811F1B69CA1B570A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.218.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:12:5a:72:7d:d1:96:4f:1f:7d:f0:e5:6e:37:f6:1b:2a:b9:
38:c7:06:a2:46:7e:c6:45:62:eb:7f:9e:22:68:35:56:bd:f3:
34:12:1d:92:ed:47:0f:e2:b4:a8:95:7a:68:cf:4a:ca:e4:a4:
ca:c2:ee:d2:9e:b6:46:86:c1:9b:c4:19:b0:aa:8b:bd:50:24:
d2:f7:bb:ca:bd:dd:62:33:cd:5a:24:56:89:0a:81:e7:a6:7a:
1b:2f:d5:37:62:7d:c4:98:ad:65:21:ae:a9:c0:a6:4d:75:4e:
58:11:86:e5:e3:0b:22:4b:5b:ee:88:49:a0:d7:1e:4e:7b:f9:
71:4b:b8:7c:d4:8a:06:b0:c9:32:ec:63:33:b5:01:28:4b:54:
41:4b:05:2f:ea:cc:63:f4:b1:c6:1f:8a:c5:ca:44:e9:ec:9a:
88:8a:e4:99:48:fc:df:0a:85:24:01:6d:00:73:f7:cb:8c:82:
12:52:98:fc:bf:a8:c3:fb:64:c4:ad:1a:c9:76:24:df:69:bc:
39:ff:96:dc:f1:38:f6:fc:34:b0:fd:90:6b:cd:5d:80:a6:c2:
06:df:8f:57:21:7a:91:66:65:57:ff:49:40:48:65:cf:9d:03:
6e:6c:d9:21:c2:8b:58:5a:56:f5:ca:be:fc:ab:96:39:70:c2:
60:12:60:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 01:51:53 2026 by rpki-client