
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/0EEDB772174D11F193D7AA7E173D8C67.roa
File: 0EEDB772174D11F193D7AA7E173D8C67.roa (raw, json)
Hash identifier: y6pgs+n3x+EaANPspWEoZC1ehkpn8O/za+IreRLvylU=
Subject key identifier: AC:0F:6F:EC:BB:1D:EA:BE:14:18:70:39:D1:04:B4:B6:BC:09:94:D5
Certificate issuer: /CN=A918D9E8/serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225
Certificate serial: 02
Authority key identifier: 06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/0EEDB772174D11F193D7AA7E173D8C67.roa
Signing time: Tue 03 Mar 2026 22:05:16 +0000
ROA not before: Tue 03 Mar 2026 22:05:16 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9268
IP address blocks: 203.2.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.crl
rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 08:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D9E8, serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225
Validity
Not Before: Mar 3 22:05:16 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a75b1b-b384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:5a:43:d2:d5:d1:f8:5c:6e:85:9b:7a:f9:
3b:8e:9f:f4:80:e3:3f:7e:b3:f5:98:da:fe:f7:f8:
a4:ba:99:79:0e:5b:ea:fa:97:bf:64:f3:03:59:70:
34:6c:e1:22:68:aa:8e:08:61:05:85:b5:7f:08:80:
5f:cc:21:3c:49:ad:50:d3:ca:eb:ca:98:13:f4:50:
7d:79:e0:eb:88:53:9b:ed:ef:a8:c3:cc:85:0e:a9:
36:1d:1e:3d:54:c1:55:3c:f8:7b:d4:9f:58:67:30:
d6:5a:7d:f8:5c:c7:f0:05:65:63:ce:b0:47:75:9e:
71:70:83:c9:74:88:08:b9:a1:59:d5:76:17:05:9d:
a7:b9:10:1a:4e:f0:71:6d:3d:bb:af:bb:c9:8c:25:
16:a3:41:ba:3a:ec:43:9a:cc:31:83:76:65:34:3f:
02:80:0b:81:74:ce:14:51:86:5d:c1:12:f0:82:3e:
88:5e:92:00:91:96:3c:fe:11:9b:ac:39:72:b4:3e:
2c:94:3b:42:0c:24:a6:d3:0a:dd:35:d2:85:91:05:
6f:ee:74:c3:52:f6:0e:52:59:d0:8c:48:48:a1:58:
09:76:66:f1:48:ff:02:29:20:51:5e:f3:d1:74:06:
c3:13:b0:43:b6:3d:ec:56:b9:1d:6f:59:42:8d:db:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0F:6F:EC:BB:1D:EA:BE:14:18:70:39:D1:04:B4:B6:BC:09:94:D5
X509v3 Authority Key Identifier:
keyid:06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/0EEDB772174D11F193D7AA7E173D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
203.2.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6d:73:1b:10:98:f0:19:36:d4:fd:e3:c4:f0:30:85:7a:9e:
b1:cb:ac:0c:f2:d3:1d:29:68:97:f8:ef:e8:1b:0c:7c:d0:cf:
92:e0:38:c0:22:a2:70:cf:23:80:7c:f6:2c:5f:e1:dc:e8:59:
64:62:73:c9:ad:7a:58:de:17:14:3c:1a:62:a0:d8:84:9e:b3:
5c:7a:36:8d:17:49:85:88:03:7b:ef:d2:76:82:c0:e8:64:f5:
70:99:3b:9b:ec:9d:4e:b5:00:3d:90:57:57:89:a9:25:3f:e2:
c9:e1:d0:d3:0f:6f:39:a1:18:d0:6c:15:5d:19:fc:aa:28:8d:
d0:7c:4f:a7:ea:f6:37:17:46:1c:db:cf:9f:60:5e:b3:9f:b8:
a3:82:09:c8:ef:9c:0a:8c:42:85:7c:75:da:25:37:df:d7:63:
85:77:92:55:d4:b4:fd:28:8a:02:16:5a:ef:dd:7e:db:37:29:
ab:d1:d6:79:d9:47:c0:94:0a:a8:05:6b:ad:fb:55:82:d0:73:
f0:00:49:f0:98:aa:c9:91:f9:ef:ae:f3:c7:31:f3:a1:12:99:
2e:1d:e1:d8:a5:06:8c:50:a6:41:52:c1:b2:ef:eb:43:7e:c5:
3b:14:ac:62:e9:8a:69:97:b9:3d:d6:f8:e5:d6:c6:52:45:cd:
82:b7:aa:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 8 03:10:34 2026 by rpki-client