
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/EEFF812CED0B11F08C41E7DD3C6F56BC.roa
File: EEFF812CED0B11F08C41E7DD3C6F56BC.roa (raw, json)
Hash identifier: HwgenjraowOblpNrXjkbZ8VcEooL/21DPOHNV4tiwDo=
Subject key identifier: 19:2C:60:53:E6:F2:24:99:C8:49:56:56:99:3A:22:57:E1:1C:D1:A6
Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Certificate serial: 08AE
Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/EEFF812CED0B11F08C41E7DD3C6F56BC.roa
Signing time: Sun 01 Mar 2026 16:33:30 +0000
ROA not before: Fri 09 Jan 2026 03:33:16 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137445
IP address blocks: 103.218.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2222 (0x8ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Validity
Not Before: Jan 9 03:33:16 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a46a5a-ccaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:65:2f:c3:31:b4:6a:11:7e:9b:e6:e5:84:
21:5a:2c:a4:34:ee:fb:3c:11:ba:ff:e9:30:fe:c3:
de:54:44:b1:53:16:95:c1:42:70:94:e6:d9:45:a9:
60:a4:3a:e5:58:dc:c8:a1:10:ba:21:75:d1:f4:b8:
61:f3:1f:35:32:dc:8a:7e:db:17:6f:f0:5b:b5:c4:
61:fb:04:b1:e9:c4:ba:d7:e1:ce:6f:99:2b:28:61:
3f:b8:75:ca:3d:bf:21:3e:d9:66:95:3d:c6:81:b5:
0d:00:f5:af:fd:70:3c:4a:5f:d7:9d:e2:d0:a7:cc:
26:f0:49:5c:01:40:d0:9a:2b:db:9d:db:bb:7c:e9:
c6:40:ff:e2:7b:d9:27:82:4f:5a:a1:a8:07:67:fd:
98:d6:b3:16:a6:b9:95:9f:21:2f:08:4d:71:cc:50:
11:52:0a:76:99:60:4c:7c:42:1c:72:a0:93:4d:bb:
47:9f:64:91:58:37:ca:f9:01:82:12:44:82:fd:19:
41:c4:58:04:ad:b1:26:f3:1c:d3:56:98:5d:98:44:
83:36:9e:33:b8:45:b5:61:c2:fa:42:df:61:89:28:
9a:50:9e:69:0b:0c:61:46:b4:fb:c2:19:0a:52:a4:
e7:f1:5d:5b:ef:ed:32:4d:c3:e7:1d:20:8d:ca:db:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2C:60:53:E6:F2:24:99:C8:49:56:56:99:3A:22:57:E1:1C:D1:A6
X509v3 Authority Key Identifier:
keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/EEFF812CED0B11F08C41E7DD3C6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.218.7.0/24
Signature Algorithm: sha256WithRSAEncryption
35:57:dc:33:e0:5d:9f:eb:ac:0c:8d:eb:52:2a:10:68:09:e7:
86:1b:75:75:df:62:dd:19:63:27:e5:dd:b6:a5:7e:0c:7f:4a:
d4:e6:0c:8f:61:dd:84:ae:9d:3d:81:4b:30:df:8a:41:f9:ca:
70:88:9f:b8:19:a1:5d:e7:25:26:d0:a0:a3:86:d4:db:83:01:
8b:6a:47:53:45:a2:ce:6f:7a:35:42:66:83:a7:6f:ab:3d:00:
b7:c7:c4:e5:b8:59:e8:76:a5:6a:e6:de:0b:02:ea:98:3f:06:
aa:30:c0:c0:2a:cf:11:ce:36:b8:a9:22:1d:48:bb:54:f3:36:
e6:6a:70:f4:15:8b:36:89:e5:9b:32:d1:d6:a3:47:24:d2:00:
cd:5e:4f:bc:e3:cd:0c:9b:c8:1e:14:06:4f:b9:63:be:82:e5:
6d:8d:4b:65:09:86:d2:5f:54:bf:39:39:b6:bf:67:11:ff:4c:
32:a4:6a:51:b6:c2:41:6f:b1:8e:74:cc:fe:24:f9:89:0c:d1:
f0:f1:fa:f6:ef:ce:71:00:45:7c:94:be:96:cc:b8:8c:72:33:
20:99:36:02:e9:0e:63:d5:f2:3b:89:27:0b:4c:3a:5a:b4:69:
85:8f:a5:3b:4f:92:20:ca:6f:4d:4a:e7:ea:ad:9f:70:66:b1:
db:ef:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:44:40 2026 by rpki-client