
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/889930E805E011F18AD458A9133D8C67.roa
File: 889930E805E011F18AD458A9133D8C67.roa (raw, json)
Hash identifier: gNdtveZEpCizlmdSaRRT7PFk1kOLRVTddyti60NdCY0=
Subject key identifier: 14:23:2B:CB:FD:7B:66:B3:50:6E:22:DF:56:73:F3:8C:0D:C9:51:8D
Certificate issuer: /CN=A9152E70/serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Certificate serial: 6A
Authority key identifier: 07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/889930E805E011F18AD458A9133D8C67.roa
Signing time: Mon 02 Mar 2026 13:47:17 +0000
ROA not before: Mon 09 Feb 2026 17:55:35 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136258
IP address blocks: 167.150.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 23:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70, serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Validity
Not Before: Feb 9 17:55:35 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a594e4-3d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:95:3d:7b:78:ec:97:c0:78:c8:d4:b3:18:
bc:82:d1:a8:28:61:82:19:12:58:7d:79:c1:06:13:
01:59:cd:6a:6c:dd:c7:7b:9e:4b:ee:97:42:bd:4f:
25:be:94:6f:d3:75:59:d0:85:36:17:ce:80:21:6e:
64:45:e4:c2:3f:7c:3a:af:ea:6f:b5:17:76:2f:20:
3c:f5:e3:d8:d7:50:c0:2a:82:f5:12:69:0e:37:16:
cf:82:16:39:1e:00:f6:ad:87:85:41:d6:79:4b:f7:
0d:ce:db:b2:4c:3f:b7:df:61:3b:33:2d:d1:cd:d5:
5e:47:e3:58:5f:3a:1b:f2:86:00:7b:da:6b:5e:7f:
10:3c:c3:d7:ea:47:2e:e4:a2:e5:98:57:5b:66:d1:
c9:7d:49:19:24:7d:fd:f6:84:ca:c5:b7:8b:ec:78:
b0:5a:84:0e:98:8d:3f:9a:65:fe:a2:c1:02:de:46:
81:d7:b1:28:45:ac:50:96:0a:4f:8c:12:bf:d8:3e:
f3:54:be:f7:eb:a8:2c:55:02:a7:03:39:81:0c:73:
f1:b8:b5:af:f8:7f:a9:1e:2d:03:73:2e:b5:1e:2a:
be:73:96:7e:75:da:bc:86:ba:6d:df:cd:2c:13:87:
de:c4:27:73:76:5a:ad:8a:62:1a:df:38:2b:31:68:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:23:2B:CB:FD:7B:66:B3:50:6E:22:DF:56:73:F3:8C:0D:C9:51:8D
X509v3 Authority Key Identifier:
keyid:07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/889930E805E011F18AD458A9133D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
167.150.100.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5c:8e:d2:b4:95:c5:23:e7:9a:6f:13:ae:a9:58:e3:2b:fe:
50:09:2e:dc:62:8b:b3:32:0b:3a:64:d5:b5:c3:60:1d:a9:55:
68:24:cc:2c:5f:cd:48:76:90:7a:59:6d:5b:19:87:d3:72:ac:
ee:5a:ad:73:15:f8:6c:bb:39:3b:8a:6b:39:e8:56:a7:7f:46:
6f:80:f3:6d:c4:8e:b4:98:7f:86:df:f8:28:0d:d7:5a:0d:f4:
93:37:eb:a7:1f:9a:74:24:9a:f2:ec:d5:28:aa:be:e9:e8:34:
f9:e3:db:c5:61:b9:58:f6:c2:20:a3:09:0b:44:55:04:c8:06:
1e:1b:a2:13:e0:f1:5f:d3:40:23:12:ba:40:c7:f1:66:58:b3:
9c:5e:1b:7f:13:56:21:fe:65:66:26:67:2b:24:4d:bc:c3:69:
5a:cf:e0:ac:cf:88:71:d1:8c:70:5f:72:30:89:97:8c:55:e2:
de:8a:7b:1b:96:3b:4e:05:db:60:9e:f5:01:ba:c3:a3:2d:88:
67:67:33:e6:8c:bf:cd:15:5e:77:a7:cf:68:ed:4d:f2:25:4f:
94:6e:0d:eb:53:f0:f0:39:dd:48:e9:be:1a:d7:cd:93:4e:ca:
97:62:2e:96:d7:17:4b:cb:30:3a:e1:f3:3e:3a:4e:0c:69:5d:
e9:f0:16:01
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MkU3MDExMC8GA1UEBRMoMDdGRTg5NjMwMjAxREVGMzdGNEQ2OEEyMEVEMTMzQTlD
M0I2QTJBMzAeFw0yNjAyMDkxNzU1MzVaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTU5NGU0LTNkNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJ5ZU9e3jsl8B4yNSzGLyC0agoYYIZElh9ecEGEwFZzWps3cd7nkvul0K9TyW+
lG/TdVnQhTYXzoAhbmRF5MI/fDqv6m+1F3YvIDz149jXUMAqgvUSaQ43Fs+CFjke
APath4VB1nlL9w3O27JMP7ffYTszLdHN1V5H41hfOhvyhgB72mtefxA8w9fqRy7k
ouWYV1tm0cl9SRkkff32hMrFt4vseLBahA6YjT+aZf6iwQLeRoHXsShFrFCWCk+M
Er/YPvNUvvfrqCxVAqcDOYEMc/G4ta/4f6keLQNzLrUeKr5zln512ryGum3fzSwT
h97EJ3N2Wq2KYhrfOCsxaFunAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUFCMry/17
ZrNQbiLfVnPzjA3JUY0wHwYDVR0jBBgwFoAUB/6JYwIB3vN/TWiiDtEzqcO2oqMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyRTcwL0U2MEU5MzdDN0Q4
NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZOX1RXaWlEdEV6cWNPMm9x
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQl82Sll3SUIzdk5fVFdpaUR0RXpxY08yb3FNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MkU3MC9FNjBFOTM3QzdEODYxMUYwOEZCMEU4NzlDNEY5QUUwMi84ODk5MzBFODA1
RTAxMUYxOEFENDU4QTkxMzNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACnlmQwDQYJKoZIhvcNAQELBQADggEBAI9cjtK0lcUj55pvE66pWOMr
/lAJLtxii7MyCzpk1bXDYB2pVWgkzCxfzUh2kHpZbVsZh9NyrO5arXMV+Gy7OTuK
aznoVqd/Rm+A823EjrSYf4bf+CgN11oN9JM366cfmnQkmvLs1SiqvunoNPnj28Vh
uVj2wiCjCQtEVQTIBh4bohPg8V/TQCMSukDH8WZYs5xeG38TViH+ZWYmZyskTbzD
aVrP4KzPiHHRjHBfcjCJl4xV4t6KexuWO04F22Ce9QG6w6MtiGdnM+aMv80VXnen
z2jtTfIlT5RuDetT8PA53UjpvhrXzZNOypdiLpbXF0vLMDrh8z46TgxpXenwFgE=
-----END CERTIFICATE-----
Generated at Wed Mar 4 09:52:52 2026 by rpki-client