
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/CE1E14AE64DC11EFBE5A023AC4F9AE02.roa
File: CE1E14AE64DC11EFBE5A023AC4F9AE02.roa (raw, json)
Hash identifier: wHN0aGPYwsBLx8VSGnwrDe5+CCD/0y0eF5+OVSIPIjw=
Subject key identifier: EE:00:E5:50:97:DD:E6:69:12:C5:C2:24:D4:08:12:4C:09:FF:8B:45
Certificate issuer: /CN=A918DB7E/serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
Certificate serial: 0124
Authority key identifier: 02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/CE1E14AE64DC11EFBE5A023AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:18:41 +0000
ROA not before: Wed 03 Sep 2025 07:06:09 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 965
IP address blocks: 160.30.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl
rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DB7E, serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
Validity
Not Before: Sep 3 07:06:09 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a5aa50-9d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:b8:56:31:17:92:31:36:c6:44:d3:85:44:
d5:cb:7f:e0:a6:c3:82:f8:33:4d:53:1d:43:73:59:
8c:e6:dc:6d:9d:d0:fa:3e:ae:e6:69:1c:50:a2:1b:
a3:ad:a3:7d:2d:b0:7f:bf:32:be:fa:2e:27:09:d8:
11:c7:d0:d2:bc:12:58:24:62:1d:16:72:8f:79:80:
db:f8:ff:41:14:8e:99:51:a1:87:40:04:6d:62:6b:
17:9e:8e:c1:1d:5a:28:4b:1a:ad:b9:45:e9:2c:be:
7c:2c:f8:1d:9f:8f:65:16:93:01:41:70:b7:d2:2a:
e4:98:8a:58:5a:8f:19:51:45:63:89:e9:82:0e:7f:
a7:4a:60:69:b0:2f:f4:7b:71:bb:fd:e9:a2:68:8f:
0e:69:35:cd:0b:5d:bc:b6:e5:34:12:b5:d4:7b:51:
38:6d:d1:42:0c:c4:19:3d:98:58:3f:ba:30:db:75:
a3:91:39:35:13:70:24:73:6f:fe:26:6e:2e:b3:a4:
6b:05:0f:b0:6d:d6:b9:d9:14:fa:3c:fd:ad:57:bc:
3b:a6:7d:33:d3:92:5f:c1:ce:cf:f9:37:73:cd:d0:
da:d8:53:92:5d:cb:be:a1:20:60:9e:34:80:97:c9:
fe:04:6e:a2:bd:30:6b:27:ab:22:2d:b4:42:d8:60:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:00:E5:50:97:DD:E6:69:12:C5:C2:24:D4:08:12:4C:09:FF:8B:45
X509v3 Authority Key Identifier:
keyid:02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/CE1E14AE64DC11EFBE5A023AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.208.0/24
Signature Algorithm: sha256WithRSAEncryption
57:47:22:33:fa:7d:26:da:b2:d8:4e:98:68:e0:6a:64:bf:94:
0a:f2:99:c2:26:e6:b2:ec:12:de:34:a2:e1:bf:5d:26:79:0b:
80:25:ec:cf:26:60:1e:62:bb:1a:73:09:53:7f:8d:f2:2a:b2:
24:09:57:e9:91:24:51:f5:b7:72:56:f3:f1:81:c6:5d:65:ce:
e5:d2:72:e3:26:12:5b:d5:63:e3:26:06:e1:bb:27:19:1f:eb:
ea:e1:a1:63:1d:24:00:99:30:ae:33:f8:b5:66:4c:a8:be:c5:
b1:60:9a:69:35:05:1f:8f:56:f4:79:81:13:88:2d:c5:61:54:
18:93:6b:1f:31:00:26:b2:d9:dd:a1:72:d4:57:c7:d0:b6:93:
c3:76:e0:e2:b6:dc:40:7a:50:e3:9f:d8:3d:2c:1d:b2:11:28:
b2:eb:73:fe:ba:aa:cf:41:94:cf:eb:c7:ad:ee:f3:5a:99:33:
f3:c1:ee:47:1a:8e:bf:31:e1:54:f4:0a:44:11:ad:d4:c9:70:
ee:c3:b2:08:00:b5:c2:96:fd:b0:02:da:eb:44:00:8b:67:57:
6c:27:10:d8:ce:3a:b0:69:50:d2:57:7f:f4:6b:b2:4c:07:89:
f5:e4:d2:b3:1d:95:01:09:35:24:73:37:ae:b9:c0:6c:7b:c1:
95:78:53:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:51 2026 by rpki-client