
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/CE1E14AE64DC11EFBE5A023AC4F9AE02.roa
File: CE1E14AE64DC11EFBE5A023AC4F9AE02.roa (raw, json)
Hash identifier: Abzh5hO1STDCOE2dqwlQK0dttAq//NKbjnjx7Uzj2vo=
Subject key identifier: 06:84:75:4D:A2:69:17:17:45:35:D4:B7:C9:40:44:EE:00:11:02:6B
Certificate issuer: /CN=A918DB7E/serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
Certificate serial: 0185
Authority key identifier: 02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/CE1E14AE64DC11EFBE5A023AC4F9AE02.roa
Signing time: Thu 03 Sep 2026 04:56:22 +0000
ROA not before: Thu 03 Sep 2026 04:56:22 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 965
IP address blocks: 160.30.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl
rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DB7E, serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
Validity
Not Before: Sep 3 04:56:22 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a98fdf5-5160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:48:3e:7b:e7:28:38:10:e5:56:8f:ae:8f:
23:d7:06:d9:56:f0:65:f4:b8:63:71:a9:67:d4:4f:
fb:ad:81:62:77:87:9e:46:35:ca:cd:71:b4:ed:e5:
5a:e7:9e:c1:db:a4:ac:d2:0d:23:0f:d6:cc:94:43:
75:47:ca:d8:0b:39:28:b4:c9:be:47:dd:a4:bd:d5:
ec:f0:8a:8a:92:90:84:53:79:64:b6:e5:c6:38:2e:
b3:6a:c2:4b:1c:7e:cd:fa:c2:33:b4:73:18:bd:4f:
5a:41:83:c8:a7:8d:dc:97:b8:1a:b2:71:0d:74:50:
22:a3:23:a4:64:0f:2d:eb:94:c6:0a:97:b8:31:b9:
df:67:b6:1f:61:13:26:c7:eb:ff:14:07:af:51:5e:
ab:ce:d5:2b:c2:f8:8c:f2:52:9e:f6:87:35:da:aa:
f1:83:4b:37:16:63:40:dc:fc:43:ce:7f:f4:0d:e8:
47:f8:4b:92:08:70:7a:c7:d5:70:be:8a:da:a8:79:
06:6b:b5:05:0e:53:79:b1:9b:08:85:6c:b6:79:4b:
4c:5d:f9:0c:3c:86:7c:97:17:dc:76:14:fc:b8:00:
80:a5:16:25:26:21:00:47:44:c3:ac:9f:10:f4:6a:
bf:41:a2:6c:54:72:66:d8:c2:ba:01:c5:5b:23:fa:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:84:75:4D:A2:69:17:17:45:35:D4:B7:C9:40:44:EE:00:11:02:6B
X509v3 Authority Key Identifier:
keyid:02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/CE1E14AE64DC11EFBE5A023AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.208.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c5:9a:94:0b:80:39:c4:97:85:04:e0:c7:77:87:8d:03:f1:
5b:c3:2c:94:e3:8c:b2:db:29:20:be:34:02:14:30:70:9d:c8:
cf:c5:b2:03:de:c2:d9:e8:3e:59:cf:2d:f6:38:c4:18:c6:59:
5c:57:30:fe:47:dc:9a:6a:7d:9a:a3:e4:43:e1:f4:bc:0e:9e:
c4:3e:e1:eb:18:ea:49:00:76:1c:4f:2c:62:61:b0:a1:16:56:
7f:e3:5f:39:d8:04:62:05:cd:76:46:ad:80:c3:66:6b:53:99:
0b:e8:1b:13:c2:66:59:26:4f:cc:a3:61:5a:cf:c5:37:bc:c7:
54:ff:7f:cf:d3:45:c5:1c:71:50:45:2e:d3:9f:f7:8a:fe:20:
d4:24:73:44:2c:ba:75:a7:58:8d:47:b3:1c:16:80:ec:8e:9c:
98:d8:ff:33:09:65:ad:d5:e0:c8:bc:5d:c0:cc:5f:d7:fb:bf:
2b:2d:7a:00:ce:12:60:6f:01:27:a4:c1:15:c0:58:7f:4b:21:
15:d4:8e:56:a6:00:70:0a:c0:2e:72:2f:f2:90:2e:12:86:61:
f1:5b:9e:0a:bb:10:3f:c5:34:52:eb:c4:7a:64:b0:67:86:ad:
d5:c3:5d:9e:a3:cc:7e:af:46:bd:28:0a:33:c1:30:88:0f:d8:
8f:fa:f1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:32:59 2026 by rpki-client