
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/E0C97CB098BB11F0B5530B6CC4F9AE02.roa
File: E0C97CB098BB11F0B5530B6CC4F9AE02.roa (raw, json)
Hash identifier: tzLz5H3WHIRmkrmCQ6z99a4YcvXFYzKj7iQvz5s9xtw=
Subject key identifier: BA:4D:55:46:70:0A:A3:23:4E:E5:23:70:76:6E:01:FE:95:EC:28:16
Certificate issuer: /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Certificate serial: 54
Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/E0C97CB098BB11F0B5530B6CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:18:14 +0000
ROA not before: Tue 23 Sep 2025 20:28:34 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 154126
IP address blocks: 198.17.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Validity
Not Before: Sep 23 20:28:34 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3da26-a11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:f0:e4:a7:d6:a7:7a:88:8f:60:c7:f5:30:
bd:fa:ab:1f:88:e1:88:6b:97:5b:eb:8e:b1:2c:59:
5a:97:fb:cb:dd:2d:1b:ca:aa:79:dc:ce:4a:ef:67:
d2:bf:08:71:e5:42:51:14:d1:aa:74:e2:97:e8:e9:
3f:97:84:0a:19:ca:7b:3c:07:6c:3b:0c:2d:a7:76:
75:52:9c:51:87:89:1e:1e:3b:c0:e7:ae:be:7f:f3:
84:a7:f4:7e:63:46:2e:c1:4e:7d:a2:a9:c6:1f:df:
81:6c:c1:62:a8:ab:44:f6:1f:bd:b9:f6:a9:a3:2d:
98:da:4f:3a:64:bb:b5:a5:4a:d7:1f:7a:84:0b:bb:
f2:e8:16:e0:76:55:fe:72:cf:a2:26:9d:41:d1:8c:
a3:05:f6:b7:91:f4:f8:3e:12:50:70:bb:0c:00:6e:
78:89:b2:de:25:48:68:6a:bd:21:da:1d:03:10:2b:
2a:c7:32:11:6d:4f:c7:6c:8f:c8:cf:bc:c0:2b:e6:
c0:0e:59:1b:f6:5e:21:22:ad:8d:8f:ac:2d:78:49:
8b:db:78:3e:cb:a7:62:a7:93:f0:ef:4e:02:ac:06:
00:5e:2d:70:6c:51:6c:9b:9c:ef:b6:35:bb:32:49:
b9:dd:0d:b9:bf:94:f2:bf:8f:29:4d:90:7e:cd:b7:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4D:55:46:70:0A:A3:23:4E:E5:23:70:76:6E:01:FE:95:EC:28:16
X509v3 Authority Key Identifier:
keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/E0C97CB098BB11F0B5530B6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
198.17.118.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d6:93:12:85:a0:9a:43:e7:4b:c2:ae:b1:ce:3c:50:75:89:
55:c8:a2:5a:54:1e:0b:38:32:b4:f3:ef:98:03:d4:bf:21:53:
28:6a:e0:4c:54:5c:ce:e1:6b:a2:fc:5f:bf:91:00:24:5e:c9:
a1:83:38:5e:ba:93:eb:8b:fe:67:b1:1e:46:e2:c1:a7:29:5c:
a7:66:c2:4b:b6:64:85:6d:e9:3c:72:75:aa:5f:d5:b3:02:72:
d6:ff:6b:cf:11:ec:82:89:fd:c3:69:89:4b:96:dc:11:00:47:
d3:ec:6b:a0:1d:51:c9:5d:81:f6:e5:4d:f4:60:a0:bd:39:88:
e4:49:59:a7:95:7a:99:c4:28:01:58:ee:cc:77:cd:72:98:94:
e1:8c:2d:e0:51:f0:6f:7d:07:66:f3:58:8d:33:38:6f:2d:45:
a0:80:11:fb:89:a8:0a:97:f6:13:83:1d:d3:05:8b:ab:23:42:
47:4e:71:15:0d:0b:6f:29:79:18:6c:dd:ee:f6:c2:98:4b:82:
c0:66:1b:9b:95:87:eb:d1:50:5a:15:b3:6d:75:d7:73:59:dc:
85:8f:c8:ac:aa:53:55:d5:2d:b2:33:47:d6:4a:2e:7b:69:e6:
22:67:19:1d:f5:f0:54:8c:26:36:f6:a8:e5:5a:8c:e6:89:31:
d3:82:29:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:07 2026 by rpki-client