
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/186E151AD35C11E69A0BDB79C4F9AE02.roa
File: 186E151AD35C11E69A0BDB79C4F9AE02.roa (raw, json)
Hash identifier: cWAyzYqC5O+jPUCFavqVibzAeEoOgWWMZB3C1RvuIBs=
Subject key identifier: 91:02:E8:D2:0B:35:A2:05:B4:FA:0B:38:D1:07:7C:6C:05:85:3A:41
Certificate issuer: /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial: 1D93
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/186E151AD35C11E69A0BDB79C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:24:27 +0000
ROA not before: Fri 12 Dec 2025 16:14:09 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 5511
IP address blocks: 202.167.0.0/17 maxlen: 17
202.167.128.0/18 maxlen: 18
202.167.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 15:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7571 (0x1d93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Validity
Not Before: Dec 12 16:14:09 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4683b-841d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:81:67:1b:a9:e4:fe:b6:60:e7:8c:1d:a1:
80:5c:0c:28:8b:eb:de:ef:e7:57:32:9d:6e:2c:77:
e4:3e:1b:68:2f:96:8c:58:ba:39:ad:89:c6:ee:d8:
68:df:4f:05:63:02:d6:40:d2:9e:f5:ac:d4:db:89:
0d:db:8a:48:a0:ec:b8:f8:0c:f6:aa:9a:fb:58:8e:
e8:a2:bb:9b:89:a1:54:5e:a0:86:99:49:40:77:90:
11:2c:ed:00:5e:bb:2e:a5:0a:23:43:48:80:12:39:
5b:24:42:4c:70:e7:e0:4f:a7:28:80:f7:85:1b:34:
0a:6b:bc:f7:1e:ca:8a:15:e7:3e:94:70:e3:a9:82:
1e:4b:87:cc:cb:e6:0a:73:64:ce:e6:04:59:58:99:
5f:c8:24:02:5e:e3:51:d3:be:b4:a4:dd:46:cb:68:
9d:35:2d:5d:42:eb:e6:b8:4e:18:05:ee:f6:40:1a:
70:eb:0b:1d:36:d4:25:c8:1c:12:84:33:ae:cf:14:
d2:14:9e:8e:8c:c1:4e:16:fa:36:27:92:17:84:e4:
7e:03:85:a8:0e:93:5a:cc:96:68:57:a8:9a:96:4f:
96:69:2e:71:df:5f:e4:54:4a:a8:9d:82:32:f3:8e:
b2:a5:dd:fb:8e:6e:ae:7f:cb:c8:44:c0:cb:9c:3d:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:02:E8:D2:0B:35:A2:05:B4:FA:0B:38:D1:07:7C:6C:05:85:3A:41
X509v3 Authority Key Identifier:
keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/186E151AD35C11E69A0BDB79C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.167.0.0-202.167.207.255
Signature Algorithm: sha256WithRSAEncryption
58:46:69:9e:d5:4d:c9:cb:f9:40:e1:39:0c:99:f2:a8:28:82:
51:64:35:93:ab:26:e3:78:ef:44:81:a3:d0:c2:ef:be:ca:a8:
e7:62:f1:8c:bf:5f:78:a7:4e:1d:71:97:51:c5:af:7e:0d:0a:
42:76:ea:95:54:07:26:c3:9b:00:b3:23:ea:07:4e:ac:cb:29:
f2:31:db:04:76:67:24:25:bd:90:4b:ad:35:4d:95:41:73:08:
d4:61:df:9d:1a:1a:7d:2e:46:57:04:f0:66:39:35:17:b0:9e:
fc:8f:28:2b:96:52:f7:13:53:ef:b2:0d:f8:0f:87:6a:7a:b7:
4c:02:d3:71:7a:2a:70:b9:1e:3c:f4:ce:4a:d3:cd:4a:0c:47:
e0:ad:6d:29:a7:cf:d6:63:c4:ca:6a:a9:42:e4:46:e8:f9:59:
db:4c:cb:90:25:13:7d:68:45:27:7c:c2:b2:15:9f:82:e4:e1:
2b:4d:bc:8a:e3:97:82:00:9a:85:a3:df:d0:9c:bf:fe:af:0a:
c4:f7:f8:0b:18:44:e1:cd:8a:67:4a:44:9c:6b:ed:b2:7a:c6:
19:85:44:97:93:87:c8:f6:77:58:b2:c2:19:1e:cc:e7:0d:31:
a1:82:6e:91:5c:09:61:ab:d3:d0:51:a9:ee:10:39:2b:79:19:
19:d9:d7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:18:52 2026 by rpki-client