
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/EE88C2F6580711F09A56942DC4F9AE02.roa
File: EE88C2F6580711F09A56942DC4F9AE02.roa (raw, json)
Hash identifier: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=
Subject key identifier: CB:B4:23:5A:D6:5F:72:91:DC:0E:73:FA:07:E9:A2:50:21:AD:8E:7E
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 04A5
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/EE88C2F6580711F09A56942DC4F9AE02.roa
Signing time: Thu 03 Jul 2025 12:19:14 +0000
ROA not before: Thu 03 Jul 2025 12:19:14 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 15830
IP address blocks: 203.32.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1189 (0x4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Jul 3 12:19:14 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68667542-9e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:7b:1b:e9:ac:fa:91:81:c3:45:dd:d3:b4:
d3:65:81:06:c3:26:37:eb:55:c5:82:d3:9c:6b:ef:
4e:90:2c:e3:ed:e2:99:4f:b1:71:76:ec:c7:d4:97:
68:02:99:75:9b:2c:d6:8b:16:e8:b6:d9:90:9a:54:
57:93:30:5a:37:36:b8:6f:e5:d4:a6:a2:96:b1:d8:
69:c7:0b:fc:46:e4:f0:54:aa:0d:76:9a:6b:56:5c:
dc:dd:da:40:7d:14:4b:41:2e:52:f9:8a:ff:bb:da:
68:44:9b:7f:50:f8:0a:1f:31:79:47:c4:85:72:ba:
7a:25:90:42:2f:75:fb:51:5b:5e:c8:81:bb:e8:9a:
06:fa:ba:6d:7d:5d:9f:44:9a:b5:79:bd:10:c6:90:
dd:89:24:20:97:c2:7f:6d:3c:82:dc:6d:53:4e:05:
25:3f:23:2d:1a:af:f8:71:e0:7a:55:b2:ef:c5:50:
90:3a:23:04:c9:5f:95:77:31:2d:67:86:9a:ab:44:
97:f7:60:af:32:8b:5b:08:41:a5:03:00:cc:51:5d:
c6:75:e0:cf:5c:87:12:d9:9a:b0:2d:62:aa:79:c9:
75:fd:e4:aa:58:1f:f6:9c:26:16:25:6d:5a:03:71:
04:fd:61:00:33:ae:c4:df:2b:df:01:54:6b:02:43:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B4:23:5A:D6:5F:72:91:DC:0E:73:FA:07:E9:A2:50:21:AD:8E:7E
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/EE88C2F6580711F09A56942DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.41.0/24
Signature Algorithm: sha256WithRSAEncryption
48:cb:f4:18:92:dd:74:7c:0a:fa:b6:c3:4d:23:52:00:7b:d0:
0b:c8:6a:f5:91:31:33:12:e3:23:3c:39:db:b5:6e:a8:bc:ee:
7a:57:80:84:95:58:b1:21:d1:0c:6d:91:48:ec:e0:35:98:99:
d0:b3:75:4f:a0:36:b5:ec:31:5c:ae:cf:01:98:ae:fc:bf:8a:
b6:67:16:45:aa:e0:11:de:af:d6:78:14:bb:7f:37:41:f3:7f:
a0:f6:b9:be:cf:d5:2c:6a:86:39:84:bb:60:83:6a:d5:e8:02:
a8:1a:51:f6:cd:1d:eb:e1:3b:1c:f1:07:df:46:29:83:07:29:
a5:d1:4f:68:b0:cc:18:0d:42:eb:6a:fd:36:a3:0c:32:74:59:
f6:38:a7:a1:10:30:e6:6b:65:c2:8e:32:3b:19:32:52:e8:36:
2a:9a:94:66:0a:27:79:89:d3:e1:3e:aa:6f:70:b3:7c:80:79:
f4:1d:fc:8e:41:3c:49:61:89:86:3b:71:6f:3e:93:b2:f9:88:
df:ed:44:41:c4:23:df:ab:b2:ff:b5:a8:ea:73:28:ff:de:bc:
e7:f3:b7:93:d4:49:9c:ba:fb:ec:7a:7a:c6:ee:63:ce:b6:ad:
2d:31:e6:2c:b4:1a:69:93:fd:02:ee:a7:fd:68:3a:4d:4e:d6:
9b:e0:15:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:55:42 2025 by rpki-client