
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa
File: 89A6BB88E06911EF9C6CF520C4F9AE02.roa (raw, json)
Hash identifier: xqfEAAZNTMugAs5yM4c6NJebBSslTWwSr9afKnN7xAw=
Subject key identifier: BE:C8:07:D3:8E:29:FE:B2:4D:00:D0:D2:D1:2D:FC:3A:DA:6A:46:50
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 375F
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:08:16 +0000
ROA not before: Wed 08 Oct 2025 14:40:42 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150675
IP address blocks: 175.29.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14175 (0x375f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 8 14:40:42 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a48ea0-9250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:1a:be:25:03:cb:5d:4a:ee:d9:14:ac:df:
e5:4f:ec:42:27:5a:83:9d:3e:6e:eb:88:43:57:33:
ca:a5:5f:0d:44:55:9a:de:f3:28:ea:c2:d3:22:60:
f4:b4:06:9e:48:66:a7:b3:6e:49:d0:1d:f6:ab:a8:
6a:04:fe:39:c9:d3:49:f0:4a:7a:9d:ce:24:c1:02:
b1:01:90:bb:e0:56:92:9e:b8:5e:65:68:62:64:40:
08:22:55:5e:8f:8c:6e:75:1c:b5:26:8c:c1:4f:23:
b9:5f:b0:74:88:7d:cc:1e:6a:e4:f0:58:12:8c:24:
a4:ce:69:86:d0:65:d3:0d:ea:83:d4:f5:1d:5e:d4:
70:a4:e8:13:cd:aa:f1:8a:ad:0c:e9:40:82:86:cc:
ae:60:f5:37:89:85:9a:38:ea:e2:a4:66:93:fd:59:
03:56:d5:24:44:bf:4a:4f:59:00:1d:a6:e1:10:42:
c9:7e:33:4d:66:cd:90:3c:4b:13:af:f7:05:8c:75:
5d:77:af:e9:62:fd:e3:72:c3:04:35:89:5f:80:c0:
be:98:c8:13:34:68:1e:13:c6:cf:b4:9b:d7:fa:ae:
da:3e:36:f1:8a:8f:9b:e1:57:43:77:c9:06:92:6b:
dd:7e:bb:a3:f0:22:ba:e6:73:b1:0e:7e:9e:2e:91:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:07:D3:8E:29:FE:B2:4D:00:D0:D2:D1:2D:FC:3A:DA:6A:46:50
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
175.29.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:70:81:ec:1e:61:8d:1f:eb:97:a1:b2:f1:0d:33:76:a9:d1:
d3:e5:05:9e:8f:0b:1a:d1:61:55:55:c6:cb:6e:5d:5f:3a:6e:
a5:b3:5e:8a:4c:2c:e0:eb:9a:68:0e:a9:91:3b:72:02:e5:7e:
a4:ff:fe:f1:62:10:b4:ef:c1:97:97:f2:9d:6e:7d:cb:58:0f:
03:a0:be:22:b0:d2:55:bc:62:88:2a:ba:77:1e:dc:e3:8b:45:
42:97:25:b7:c0:73:e2:e0:c7:c4:ce:f3:4e:20:1b:47:ef:e5:
01:bb:07:0b:24:a6:84:b4:fc:9c:46:33:01:a7:a8:88:2f:09:
03:b6:72:e3:e0:aa:54:83:8c:9c:75:68:94:f1:e8:84:e9:5f:
b8:f7:1e:b3:85:82:80:d5:75:e3:22:d7:9d:27:59:49:7d:4e:
af:1f:f0:65:ae:c3:41:9c:a3:e1:91:40:d7:6c:9b:fc:90:6a:
8b:41:9b:6f:67:df:79:67:b2:86:0f:69:9d:fb:86:ba:51:9a:
2a:1e:18:9a:83:fd:23:c4:fe:d8:c7:f4:a0:7a:6e:cd:87:66:
22:6f:35:08:f7:25:a8:0c:b1:93:51:dd:6d:20:5e:da:78:50:
3e:10:06:cd:bd:cb:9b:c8:04:27:6f:cb:ef:a1:71:6c:f8:d0:
99:e0:e0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:03:04 2026 by rpki-client