
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/E8819018178811EC876F5F50C4F9AE02.roa
File: E8819018178811EC876F5F50C4F9AE02.roa (raw, json)
Hash identifier: k8RYTUE2R9W0lvCqWeEJGJcaj3xzsyGqjLk5FFAGEEQ=
Subject key identifier: CD:2A:4E:B5:9C:F5:C6:8A:CC:CF:78:AB:D2:E4:18:44:93:A9:67:05
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0D21
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/E8819018178811EC876F5F50C4F9AE02.roa
Signing time: Fri 14 Aug 2026 19:38:44 +0000
ROA not before: Fri 14 Aug 2026 19:38:44 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 45682
IP address blocks: 180.189.10.0/24 maxlen: 24
2407:b000:4011::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3361 (0xd21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Aug 14 19:38:44 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7f6ec4-893d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:2f:e8:d6:7f:ef:bc:4b:07:1c:6e:5f:5a:
ac:8b:d1:e9:27:87:e9:90:d9:0d:b2:45:d5:71:62:
17:ba:99:a4:97:7c:b3:fd:c3:cd:8c:5c:b7:a9:71:
b7:3c:1b:ac:f0:a8:b5:8f:8d:51:f0:e3:31:6c:01:
d3:07:98:2b:20:75:79:62:39:f1:40:49:d8:b9:1f:
87:57:14:8e:7a:3b:be:4e:3a:e4:43:22:35:f5:08:
e9:c3:90:ff:f5:8b:69:e9:0a:af:3c:18:30:d0:d2:
24:1e:9d:9a:9f:20:7a:bb:32:f7:1d:e0:8a:06:d2:
fa:b3:dd:01:ca:82:e6:33:21:a5:75:0d:29:17:3d:
0b:ca:d5:7b:dd:76:a9:a1:46:9c:c7:63:4c:ff:b5:
a6:14:6f:9a:ba:1f:e7:cf:dc:f5:a8:ad:cc:1e:53:
e5:bc:4c:89:17:e0:b3:7e:74:7e:16:cc:09:83:cb:
40:b7:d3:a5:de:7e:22:dc:5e:40:19:a9:47:24:99:
58:73:47:a9:1e:c6:f3:f9:82:a4:d9:8b:d1:4d:c8:
ee:45:7c:89:ca:ef:a0:7d:2d:a8:6e:85:91:ae:8a:
06:78:24:2d:38:5c:c5:fe:e9:1d:8e:56:51:1a:0f:
b2:4e:f4:aa:3e:dc:98:76:05:58:52:e5:85:8c:47:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2A:4E:B5:9C:F5:C6:8A:CC:CF:78:AB:D2:E4:18:44:93:A9:67:05
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/E8819018178811EC876F5F50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
180.189.10.0/24
IPv6:
2407:b000:4011::/48
Signature Algorithm: sha256WithRSAEncryption
49:1e:15:ad:df:c9:a5:2c:0f:b0:0c:28:01:b5:71:f1:80:58:
dc:10:a1:f4:09:a4:d1:d3:49:50:7f:f3:b9:c5:10:36:ce:b9:
cf:71:34:76:6c:d1:95:f4:68:a9:e5:1b:87:c2:22:64:37:7a:
9b:02:31:3c:e1:53:e9:54:3a:6f:a4:d3:df:1c:59:7a:9f:d6:
52:db:59:ee:d3:84:cf:c9:08:31:10:22:1e:86:fa:cf:9d:20:
6c:f8:b8:63:40:87:20:94:0f:b4:67:56:e1:54:2e:b2:8e:1c:
33:a1:85:66:15:0a:ad:0b:04:31:8a:2f:eb:aa:06:cb:63:2e:
8c:dc:44:35:49:30:15:bc:65:6b:45:8e:80:43:cd:c0:c4:87:
50:e8:76:03:f4:c8:6f:27:67:4c:9b:83:ed:c5:69:aa:1d:39:
69:7f:a3:e9:b3:b4:f1:01:32:02:14:43:71:d0:25:13:6a:d7:
13:29:8b:ea:93:d3:6c:0a:b7:d7:8b:cd:15:6f:18:71:80:3c:
88:46:3a:1a:c8:6f:b3:eb:ca:a1:af:d2:90:a7:79:b9:0e:da:
54:bb:b2:bc:49:83:ce:b7:c1:65:df:b1:b9:34:87:78:88:89:
a8:b3:31:06:c9:18:6a:9f:8b:17:5d:c0:fc:28:cb:7c:ce:c6:
c1:3c:ee:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:09:48 2026 by rpki-client