
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/518E90D088BC11EB8D00B631C4F9AE02.roa
File: 518E90D088BC11EB8D00B631C4F9AE02.roa (raw, json)
Hash identifier: A7Cb32mKd1LBBSCYiyV/o1Hu7rJNA7Zb1mYo32rQ52Q=
Subject key identifier: CB:6F:A5:B6:78:F8:0C:09:35:DB:E8:36:65:6E:27:A8:6D:CC:30:56
Certificate issuer: /CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
Certificate serial: 07DE
Authority key identifier: E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/518E90D088BC11EB8D00B631C4F9AE02.roa
Signing time: Wed 22 Oct 2025 22:10:58 +0000
ROA not before: Wed 22 Oct 2025 22:10:58 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141695
IP address blocks: 202.0.156.0/24 maxlen: 24
202.0.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl
rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2014 (0x7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121D26, serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
Validity
Not Before: Oct 22 22:10:58 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68f95671-4310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:b2:51:ba:00:e9:59:f4:33:3a:5a:5b:91:
81:a5:cc:3f:df:73:e7:1d:3a:61:b5:b6:01:63:09:
36:13:63:d8:73:7a:38:43:6e:39:4e:1a:d9:5c:c7:
73:ee:6f:bd:76:2a:2e:3e:fc:bb:17:e4:9f:e2:41:
5a:aa:b7:70:ae:09:12:69:91:1e:aa:db:1d:99:50:
73:cf:c0:db:ee:d6:94:7a:32:3a:c4:ac:bb:96:ad:
16:6b:a4:3a:32:b5:e9:c4:56:fd:d1:74:f2:45:3b:
c5:a3:23:48:d9:c2:18:21:67:17:23:78:63:ed:be:
c0:1e:dd:fb:42:d0:2d:4a:71:62:15:7e:c5:61:03:
86:4b:71:e6:6f:37:75:b9:30:e3:c5:43:f5:8c:4f:
de:91:80:35:7e:d8:b4:2c:1c:ef:8d:01:1c:3e:9b:
4f:b3:b3:31:a9:8d:f9:96:55:72:48:bc:26:d1:fd:
60:06:2b:57:ef:1b:21:35:b7:18:f4:a9:17:09:50:
78:cd:65:7c:ec:44:aa:d5:e0:49:4d:1b:19:40:43:
3b:c2:3d:f3:61:50:a1:9c:42:6e:f7:f0:94:11:45:
07:0f:38:74:f1:18:4c:d3:eb:97:35:bb:8b:97:44:
24:37:43:3a:5f:3e:bd:6f:67:c2:73:7f:e1:f8:c7:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6F:A5:B6:78:F8:0C:09:35:DB:E8:36:65:6E:27:A8:6D:CC:30:56
X509v3 Authority Key Identifier:
keyid:E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/518E90D088BC11EB8D00B631C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.0.156.0/24
202.0.158.0/24
Signature Algorithm: sha256WithRSAEncryption
54:1e:25:2c:38:fa:d1:1a:15:ad:0a:7d:b1:4b:32:2e:62:f3:
b5:fd:03:bf:db:e8:cb:ff:27:60:f6:4a:e1:31:95:72:af:25:
f5:e8:23:41:bb:78:3b:2d:e6:20:3a:16:7a:06:ed:6f:b8:c0:
d3:65:7c:5e:15:59:ee:01:8f:5f:d9:91:f8:f8:ae:7e:da:06:
ad:b1:33:ac:1b:af:c9:41:14:31:8f:6f:1a:88:b6:20:9b:72:
eb:3d:09:99:87:84:6d:cf:20:d5:fb:d3:04:a2:f8:b5:08:62:
14:d8:07:62:f3:26:32:9c:4b:b7:1c:77:ac:e9:e5:0c:32:dc:
48:29:e5:ff:31:a8:fc:47:00:9d:3f:3f:69:57:41:a1:45:4f:
ed:ce:b0:7e:eb:a9:e1:90:33:4f:80:49:94:b4:a8:88:1a:b2:
54:77:c7:be:b1:f1:3d:37:f8:44:fc:98:91:26:2b:46:4c:fd:
d8:44:8f:0a:4a:bb:13:f2:5f:c2:5c:3f:f6:a7:e8:4d:9b:65:
e0:08:5d:63:d2:00:32:60:3b:1a:e5:58:12:d9:7c:c8:0b:27:
e7:88:c0:4f:7a:9c:25:20:57:40:ad:f8:83:f1:a4:75:33:5a:
3b:54:15:89:4a:b5:db:77:b0:7d:63:de:c5:52:99:fd:fc:0e:
1d:12:d4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:32:32 2025 by rpki-client