
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/8C9E2B18354711F09FCEEE25C4F9AE02.roa
File: 8C9E2B18354711F09FCEEE25C4F9AE02.roa (raw, json)
Hash identifier: 9lJDx4+O6el+GSFbl7FYDnsYPGw+jTdGP9VGs+k2cYw=
Subject key identifier: 68:6F:81:48:28:79:67:91:B5:B8:55:B9:34:39:A0:5D:6D:7E:E9:58
Certificate issuer: /CN=A918D2CA/serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Certificate serial: 9B
Authority key identifier: 6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/8C9E2B18354711F09FCEEE25C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:27:54 +0000
ROA not before: Sun 01 Mar 2026 09:27:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133182
IP address blocks: 160.250.201.0/24 maxlen: 24
165.101.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D2CA, serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Validity
Not Before: Mar 1 09:27:53 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a40699-de88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:9f:dc:81:23:4d:8e:55:fd:fd:7c:78:fd:
85:7c:eb:3a:b3:7e:a0:bb:35:db:20:c6:76:bf:65:
c8:74:2c:30:54:c5:b8:44:78:d1:f2:3e:9f:a1:ba:
08:56:d0:cf:6d:66:4f:40:22:35:98:b8:2f:87:ab:
a7:2b:a3:54:da:b2:68:2b:d9:ad:7d:92:50:8c:53:
ac:dc:d0:27:c1:d2:5a:f5:a7:d6:13:ea:16:5c:d6:
32:a6:c1:f3:8b:d5:b2:70:21:51:7b:42:23:ba:03:
af:31:57:28:65:62:7b:1a:bd:80:bc:a3:f6:8b:59:
0d:1b:ff:cf:3f:7f:6c:c9:99:01:68:96:27:38:21:
94:1a:ac:cd:b8:86:cf:e7:00:c0:ab:ba:ae:ac:67:
8a:92:02:11:d7:42:d9:d7:c3:28:6a:fa:15:9b:7d:
0d:d9:2c:77:0a:8b:ff:a7:17:d3:19:97:f9:eb:f8:
97:57:b5:6b:6e:38:10:9b:b4:bb:90:a5:7c:5a:6e:
fd:3e:3e:6c:7c:da:b5:98:f9:1f:bc:7e:99:0a:64:
e4:1a:f1:ee:8f:7d:07:56:28:ee:87:4f:14:4b:cd:
e1:94:31:e1:df:48:32:fb:86:71:c0:82:d2:84:8e:
aa:4f:cf:a2:f0:a9:bb:ea:75:e1:cb:57:73:74:61:
70:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6F:81:48:28:79:67:91:B5:B8:55:B9:34:39:A0:5D:6D:7E:E9:58
X509v3 Authority Key Identifier:
keyid:6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/8C9E2B18354711F09FCEEE25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.201.0/24
165.101.124.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:40:40:42:5c:d7:3c:9d:b5:5f:56:7c:cb:fd:b3:4f:e1:70:
92:cb:0d:5f:90:5e:f3:eb:71:6e:dd:19:7e:a8:90:a5:93:f9:
4b:27:2c:69:51:42:98:d8:53:df:02:8a:cf:ff:09:e5:cb:0d:
e5:c6:e6:bf:8e:a0:4c:f3:37:68:78:e9:1c:81:bf:94:77:7d:
69:26:2c:77:be:8a:a1:47:3d:a4:17:38:a4:fb:ee:bc:e5:ff:
3e:c9:1a:22:dc:35:fe:7d:b3:07:3c:bf:e4:db:d9:36:e8:50:
82:e9:73:18:c5:0e:d7:09:75:db:52:bd:56:53:ef:3d:d9:af:
0c:5b:fc:da:8c:0a:db:29:29:da:f3:7e:86:ee:5f:7a:13:97:
d2:06:49:8d:3b:56:0d:e4:aa:40:fb:73:17:5f:72:d7:80:df:
15:f9:ea:b6:be:4a:da:ab:e9:29:98:9b:9c:e9:79:8a:5e:58:
d8:7b:4d:d2:01:ff:f3:11:34:e4:ab:c2:be:77:63:de:ab:b8:
57:7b:26:80:64:a8:64:a2:bf:4f:ad:74:1b:b4:71:6b:e2:7d:
c2:41:91:2d:5f:c0:ac:98:72:98:31:5e:90:8c:93:44:24:d3:
5b:db:32:7e:97:8d:22:70:9f:53:7e:78:00:fd:81:6c:62:24:
aa:49:e9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:57 2026 by rpki-client