
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/E8118BFA022C11EBAC47A831C4F9AE02.roa
File: E8118BFA022C11EBAC47A831C4F9AE02.roa (raw, json)
Hash identifier: LlVbkIBf55WD9ol7tZ+8YsYWKIE8b97eX9bCwSF3NSs=
Subject key identifier: 2D:88:F9:26:7B:B4:EF:27:9E:F4:8F:56:5B:84:07:10:CA:47:DB:D9
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 1875
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/E8118BFA022C11EBAC47A831C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:19:37 +0000
ROA not before: Thu 08 May 2025 17:17:43 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 132585
IP address blocks: 203.198.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6261 (0x1875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: May 8 17:17:43 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a47529-5699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:f1:d6:18:79:68:ca:c7:76:93:7f:a4:e9:
20:41:a8:99:52:0a:1a:4a:37:ac:eb:4a:8e:85:64:
2f:e8:c9:a8:c7:39:9b:f9:c1:81:2c:74:5d:96:0d:
c5:17:01:e0:61:30:1c:d7:f6:d8:cd:5d:2a:8a:06:
64:31:74:4d:e7:25:96:ae:88:21:93:82:83:48:b8:
cb:c9:18:51:99:dc:12:6d:6f:31:65:69:fa:05:6e:
db:ac:01:19:b4:bf:86:69:97:97:7b:07:67:c6:d9:
b1:8e:8d:b8:d3:df:4c:57:3f:6f:c5:d7:fa:18:ed:
56:61:6a:2c:09:f6:e6:d2:6d:ee:68:3e:8b:ff:91:
2c:30:54:9c:55:b8:6b:29:24:1a:f5:09:39:87:7a:
36:7a:3d:3a:7c:92:01:39:a5:51:0e:a9:6b:5a:d2:
53:ec:f9:96:f2:1a:8c:a8:7d:a6:93:00:f9:32:80:
4d:be:44:7e:ed:cc:ed:4b:98:20:2b:35:d8:94:17:
f2:57:1e:cb:ef:f0:f0:3f:c3:9f:fb:10:9b:37:ca:
cd:8e:f6:ea:1a:d7:f8:02:56:ca:7e:33:83:cd:e8:
ef:12:cb:8a:27:b2:f7:e2:08:23:16:01:e7:04:06:
3a:76:fc:7a:43:52:81:4f:eb:a8:be:19:9a:b1:6e:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:88:F9:26:7B:B4:EF:27:9E:F4:8F:56:5B:84:07:10:CA:47:DB:D9
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/E8118BFA022C11EBAC47A831C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.198.168.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:47:4a:7c:c4:2f:ab:4b:9e:9c:c1:dc:a7:93:96:bb:2a:cb:
3e:eb:a8:97:95:ed:89:34:e2:f5:7a:7c:c8:57:a7:63:a8:3a:
75:09:1f:f5:cb:bd:bf:25:85:ad:ec:85:45:d9:53:20:af:01:
ab:99:71:43:a6:f3:90:1b:df:6a:b7:a7:d6:09:75:07:68:52:
1a:70:76:00:e6:43:d8:5a:89:40:72:3d:c5:63:61:46:3f:96:
6d:68:84:34:e0:6d:33:0b:df:73:ef:89:8c:69:2d:1e:7a:9f:
bd:b4:d0:da:61:46:ee:cc:27:31:ce:bd:c1:a7:c4:0d:34:27:
45:59:d5:4f:d7:42:0a:bc:69:48:e7:d7:67:70:97:af:aa:eb:
ff:61:bf:19:95:97:91:6e:61:3b:d8:d2:bd:f4:99:c3:d6:83:
0a:6e:a8:8e:f8:7e:40:1f:4a:7d:1b:5a:5f:1e:57:89:92:4b:
e4:12:d1:ec:7a:fd:2a:12:51:c6:d5:2d:e8:8b:40:b3:71:33:
43:c7:83:8a:54:40:6b:1b:a4:fb:f0:64:43:6c:ca:ef:84:67:
7c:db:dc:df:31:db:6b:cb:41:59:f3:94:48:f2:5d:a1:3d:e8:
fb:55:c9:b4:c9:87:9b:c0:e5:e7:f0:ed:31:74:89:37:56:01:
86:0e:ce:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:52:50 2026 by rpki-client