
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/EE4BF2EAFB5911F0B335DD54496F56BC.roa
File: EE4BF2EAFB5911F0B335DD54496F56BC.roa (raw, json)
Hash identifier: eZzcu3WkSrdQ3SbkATMZ/OTsw4EduF9CCFIQg7N6Nlk=
Subject key identifier: 99:70:00:B7:29:4D:2E:8F:B9:19:A3:28:CF:B0:77:D7:2C:EB:88:46
Certificate issuer: /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Certificate serial: 22
Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/EE4BF2EAFB5911F0B335DD54496F56BC.roa
Signing time: Sun 01 Mar 2026 05:47:11 +0000
ROA not before: Tue 27 Jan 2026 08:26:52 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152605
IP address blocks: 192.232.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Validity
Not Before: Jan 27 08:26:52 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d2df-7b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2f:52:9b:c8:6b:e2:3e:70:97:bf:e1:dc:53:
b8:74:5b:ac:e5:c0:d1:20:45:eb:df:59:87:9a:10:
c4:55:4b:74:95:49:9d:46:bd:b9:19:22:4e:cb:34:
5d:54:ec:7a:dd:1c:1d:2b:6e:59:78:8f:72:93:a7:
2a:a5:ab:90:bf:f6:b3:96:36:2e:25:5f:01:f6:ee:
23:a0:86:cb:83:da:41:fb:7d:73:0a:ad:d7:f1:34:
a3:18:c4:65:fa:61:ad:38:aa:43:80:8f:60:e6:30:
e5:a8:38:24:f8:40:36:fb:be:9c:46:1f:83:7c:f2:
09:fd:30:e1:92:27:e1:56:46:ad:d2:21:d5:2e:aa:
0f:ce:b4:0f:a7:28:82:9a:62:c8:25:26:3e:eb:0f:
d0:86:d5:b8:79:d9:58:c2:ee:b6:f4:74:07:fc:b0:
aa:43:87:29:bc:ad:87:ac:5c:0a:2c:58:90:e2:0e:
40:ec:04:3a:36:8d:a1:df:23:c5:30:e6:4e:f8:f3:
4f:13:5f:c6:82:67:ca:53:82:5d:7f:34:4b:39:80:
2d:5f:d4:ed:c2:10:4d:97:2e:6c:7a:2f:94:f8:0f:
49:37:a7:5e:64:7f:fd:8f:c1:d6:0b:44:79:83:f7:
7c:3a:cd:25:a5:fe:d3:9d:57:67:73:62:8a:86:ee:
47:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:70:00:B7:29:4D:2E:8F:B9:19:A3:28:CF:B0:77:D7:2C:EB:88:46
X509v3 Authority Key Identifier:
keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/EE4BF2EAFB5911F0B335DD54496F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
192.232.42.0/23
Signature Algorithm: sha256WithRSAEncryption
47:13:a6:08:2b:25:0f:61:cd:d1:06:56:75:64:ca:c4:1a:33:
54:46:65:f7:5b:da:9e:c0:3b:0a:3b:a0:3c:a1:61:12:e8:c7:
00:df:3c:75:d0:f6:dc:de:2a:b8:a8:b6:2e:6c:bc:ad:8e:de:
d8:aa:ae:64:fd:b8:a5:3c:b9:7f:72:38:ee:fc:f1:9f:44:0f:
c5:53:ce:3d:fd:7c:a9:c0:02:4b:2e:2e:44:73:03:f9:2f:e1:
9a:12:5e:13:43:3b:8c:d3:94:89:06:be:38:0a:7c:72:eb:ca:
c7:44:23:60:ff:85:ef:96:7d:ef:49:61:31:99:6c:6f:9b:14:
d5:58:3d:aa:e4:c2:f7:74:e4:a2:59:ba:59:73:81:4e:5a:de:
fc:cb:fa:8f:d8:0f:60:26:1d:2f:f7:f9:08:86:e1:57:ff:1e:
50:f0:1d:c5:68:98:ee:a5:c2:1d:20:ed:61:6e:c2:af:78:8d:
44:aa:12:18:af:69:f7:93:e4:62:1e:7d:95:b0:74:4f:36:e2:
2b:c0:ad:59:74:91:b3:6e:99:f3:12:54:2c:df:36:eb:32:07:
99:65:9a:b3:a9:74:68:b0:9a:f7:24:ed:60:dd:21:0d:83:6b:
6a:79:d7:d0:78:c5:9f:01:87:0c:1c:b5:8a:04:e1:66:e7:88:
ae:52:37:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:29:23 2026 by rpki-client