
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/889930E805E011F18AD458A9133D8C67.roa
File: 889930E805E011F18AD458A9133D8C67.roa (raw, json)
Hash identifier: 6Xr8zkjpwgzzu+pV8hgykjL+uM8MQRKO4RcwgTTu2OA=
Subject key identifier: 35:0A:9C:27:9E:0E:AB:AD:51:67:73:FF:A2:D8:14:5D:B6:48:E8:0F
Certificate issuer: /CN=A9152E70/serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Certificate serial: 5C
Authority key identifier: 07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/889930E805E011F18AD458A9133D8C67.roa
Signing time: Mon 09 Feb 2026 17:55:35 +0000
ROA not before: Mon 09 Feb 2026 17:55:35 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136258
IP address blocks: 167.150.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70, serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Validity
Not Before: Feb 9 17:55:35 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=698a1f97-d248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:d2:6a:00:2c:ce:6d:62:05:6a:33:82:02:
be:1b:1a:20:0b:57:4c:a9:18:d6:33:66:99:20:12:
4d:94:62:15:ca:05:9e:f9:d2:cc:12:d4:d1:ec:49:
e6:25:d0:67:7d:ff:5a:d0:2c:58:1e:7c:8c:8c:4e:
d8:cb:31:b9:3f:6b:68:b1:c9:be:f4:92:da:c9:8f:
9f:f2:05:20:d2:2d:b2:cf:15:7a:87:8e:34:aa:6d:
62:71:c4:d6:c6:a7:63:ac:63:de:d2:f7:98:e3:a9:
97:0f:8f:1c:e8:61:75:29:43:e4:61:49:7e:ef:6d:
dc:86:cf:f3:1e:ed:f4:45:4e:de:5f:23:cf:97:8b:
62:46:ce:0f:30:92:53:bf:34:1f:1e:f8:82:3d:15:
32:90:12:04:92:a6:a5:97:f7:0a:3d:cf:db:9c:bc:
fa:93:1c:b4:55:1c:61:c2:2a:0a:c2:3a:ac:74:6d:
68:eb:c6:37:bb:42:35:b3:98:54:0f:6b:62:04:06:
7a:2e:ce:7d:9c:f3:09:6c:5a:67:06:c0:65:08:33:
b0:5d:34:2d:eb:ae:9e:9c:4b:94:9e:d6:4c:fe:90:
2b:8a:2f:f4:a6:d8:ab:af:fc:79:9d:ec:59:49:10:
02:d1:67:56:a2:15:d7:c6:19:e9:59:8e:4d:bb:20:
7b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0A:9C:27:9E:0E:AB:AD:51:67:73:FF:A2:D8:14:5D:B6:48:E8:0F
X509v3 Authority Key Identifier:
keyid:07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/889930E805E011F18AD458A9133D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.150.100.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:35:57:10:66:e6:2f:32:a4:db:99:64:23:5e:d1:d2:61:c0:
c1:ef:72:03:36:bc:93:8a:01:a5:e8:c6:4e:46:84:1f:18:a8:
97:86:fd:f8:1b:3a:f8:d4:0f:a5:b5:1a:52:ed:dc:b4:42:2f:
db:5e:7b:75:e7:59:dc:a5:aa:d9:d3:45:c1:42:3c:af:80:e7:
fe:5f:69:da:ba:19:b2:b1:e7:38:a7:7f:c9:91:c0:2b:63:3f:
a2:08:cf:f4:90:35:a7:0a:19:c3:5c:54:87:5d:cf:84:ee:df:
78:13:3b:ff:c6:e3:1e:6a:0e:fa:ee:9a:57:b3:c6:ee:a7:93:
14:7e:9f:4c:70:cc:9b:73:7a:09:17:75:74:d4:e0:19:25:b3:
d5:0c:92:31:a2:b2:47:e2:cd:96:ba:cd:45:f6:36:fb:df:86:
1f:58:77:e6:fc:14:26:ab:06:33:bc:45:65:1a:12:a6:02:31:
c2:86:72:9a:75:b6:67:f8:49:14:55:c7:12:ac:a8:43:af:ec:
8a:4d:ce:f7:c8:63:0a:17:d9:ba:7f:c1:1b:2e:a7:b9:75:5c:
1b:13:24:65:4d:d7:06:12:56:9c:95:24:89:0a:e2:50:a5:3a:
ff:ae:c1:05:cc:2e:97:ab:26:f2:9a:17:d0:ec:ce:f6:9d:83:
fa:34:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:50 2026 by rpki-client