
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/E0C97CB098BB11F0B5530B6CC4F9AE02.roa
File: E0C97CB098BB11F0B5530B6CC4F9AE02.roa (raw, json)
Hash identifier: Xq+V2dhbaDK8xNC15SN+JABvncsJM2uUz84UdZHMyf8=
Subject key identifier: E1:60:AD:99:5D:ED:32:52:1A:D7:14:4D:BC:0A:7A:45:BE:B8:7A:1C
Certificate issuer: /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Certificate serial: 03
Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/E0C97CB098BB11F0B5530B6CC4F9AE02.roa
Signing time: Tue 23 Sep 2025 20:28:34 +0000
ROA not before: Tue 23 Sep 2025 20:28:34 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 154126
IP address blocks: 198.17.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Validity
Not Before: Sep 23 20:28:34 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68d302f2-60cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e0:25:c5:3b:f8:8c:a7:97:5d:15:2e:2b:1b:
cd:fd:b0:27:54:84:b1:ef:9b:6c:5f:40:7d:a4:da:
03:59:0c:b3:0b:ec:27:83:9e:3f:01:4c:23:60:0a:
68:fd:c2:66:75:63:9d:c7:5b:6e:7e:d5:23:60:67:
62:8c:dd:78:2f:ec:e0:a0:8e:8c:97:42:17:0c:89:
a4:ab:4d:a9:25:4a:b2:42:af:c3:ad:59:cd:4d:d6:
7f:9b:b2:bc:82:bd:61:c1:c7:1d:b0:c5:80:c8:32:
7c:05:e2:dc:22:84:b6:a0:43:e3:e6:04:ad:ea:85:
f5:74:9d:61:4f:4f:67:ac:a3:da:dc:c1:de:be:93:
26:05:d8:2c:43:fe:06:49:d6:af:f7:4a:80:be:95:
a1:8b:4c:de:18:3b:6e:c6:fa:09:2a:cc:44:84:70:
78:dd:f1:ab:08:5b:ec:26:b9:5e:44:e7:72:71:75:
74:32:71:47:e0:1d:37:8f:35:bc:4d:a1:03:a5:ad:
48:66:1f:af:7c:80:b8:02:e1:61:42:cb:f3:34:e9:
1c:39:93:c4:b7:cc:71:58:cb:94:9e:ea:66:36:a3:
6f:c2:f8:16:84:39:e1:4b:39:f0:29:b3:42:18:bf:
97:7f:cf:d0:9c:e7:c7:b8:57:4a:95:0a:04:f0:87:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:60:AD:99:5D:ED:32:52:1A:D7:14:4D:BC:0A:7A:45:BE:B8:7A:1C
X509v3 Authority Key Identifier:
keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/E0C97CB098BB11F0B5530B6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.17.118.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:2f:fb:f9:15:17:bb:f1:c6:dc:28:6a:12:e3:ff:bf:73:34:
a0:58:d4:31:25:b6:9c:5c:d0:50:8e:2b:df:c6:79:e8:be:5e:
a7:fb:20:34:e6:31:7f:ff:45:46:ed:76:3c:57:0a:6d:2e:e5:
58:a3:be:e2:a2:bb:ab:69:0f:f2:8a:ac:a5:9a:89:ee:9b:14:
e0:b0:13:63:bd:3d:33:3c:ed:08:c3:66:9e:b1:98:cf:a5:fa:
cf:66:44:93:5f:07:63:97:33:29:b1:14:1b:05:7f:8a:60:9e:
36:5c:aa:b7:fc:4f:09:a7:31:3b:bd:2d:fb:49:81:9b:67:5f:
84:63:8f:00:2f:0e:71:36:06:4c:65:87:70:77:ea:b3:dc:47:
21:98:bb:40:a8:0e:a0:3f:80:95:e5:f5:f4:10:5e:26:ef:2b:
4b:9e:ed:c4:0a:dc:f2:6c:b1:5e:9d:b5:bb:70:d9:08:bd:2f:
77:51:2c:c5:57:97:3e:46:72:a6:ea:18:22:67:04:69:0b:bb:
c1:ce:6a:b0:f5:ec:b2:40:64:a8:c3:8d:bb:08:01:15:e1:9e:
bf:40:8c:2b:44:81:e2:3c:62:1c:da:c6:91:0b:a6:4b:eb:d9:
c2:47:37:7f:3d:d6:6e:c0:a0:cd:f3:73:12:f4:81:62:73:b7:
24:5e:97:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:13:01 2025 by rpki-client