
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/518E90D088BC11EB8D00B631C4F9AE02.roa
File: 518E90D088BC11EB8D00B631C4F9AE02.roa (raw, json)
Hash identifier: +ZMmi0M42end+esMRbfjBvUTFp78nXymKqQmVVuLyUo=
Subject key identifier: 3B:E0:ED:2F:79:31:37:A8:55:F1:B0:46:2D:4B:BE:08:1F:77:18:74
Certificate issuer: /CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
Certificate serial: 0899
Authority key identifier: E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/518E90D088BC11EB8D00B631C4F9AE02.roa
Signing time: Tue 22 Sep 2026 20:41:19 +0000
ROA not before: Tue 22 Sep 2026 20:41:19 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 141695
IP address blocks: 202.0.156.0/24 maxlen: 24
202.0.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl
rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2201 (0x899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121D26, serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
Validity
Not Before: Sep 22 20:41:19 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ab2e7ef-8037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:ba:b4:9f:4d:cb:14:39:62:cb:db:af:26:
ae:ac:54:8c:1f:6f:2f:56:3b:c5:5a:c5:cd:d8:86:
e2:68:47:96:12:5a:b0:39:1a:a8:64:05:df:ce:14:
1d:90:6b:fa:56:55:5a:db:b5:cd:71:4e:4f:03:22:
03:df:0a:d3:b4:2c:17:03:b6:d6:a7:64:ff:30:53:
dd:db:19:e2:77:e7:84:ed:0c:c4:96:b0:1b:a5:a3:
06:0e:c2:be:11:b3:82:72:2a:5f:05:20:02:74:b4:
8d:94:c6:3c:50:d2:32:d0:14:61:f7:e6:6a:3e:c5:
a1:ad:a3:2b:4e:7d:5c:b1:f1:22:80:49:12:82:bd:
6e:12:8b:35:39:62:42:fd:9a:a0:d1:84:51:a9:eb:
88:cc:3f:68:84:07:ce:22:64:b4:fa:ad:9e:1d:54:
b4:ef:4a:4e:24:f2:30:45:e4:80:fb:d2:73:1a:6e:
a1:bc:8b:a6:df:f5:7f:ac:fe:64:55:48:79:b9:f6:
d5:6b:83:19:c3:14:05:ee:39:be:cc:88:51:cf:cb:
de:74:16:c7:16:f9:51:18:26:8b:17:1e:c5:cc:b9:
c7:2a:33:d1:23:94:44:53:e2:d1:56:41:58:34:f9:
59:a3:ae:83:a9:79:76:26:16:d9:bc:e8:75:07:5c:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E0:ED:2F:79:31:37:A8:55:F1:B0:46:2D:4B:BE:08:1F:77:18:74
X509v3 Authority Key Identifier:
keyid:E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/518E90D088BC11EB8D00B631C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.0.156.0/24
202.0.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7e:72:82:59:29:a7:15:4d:a8:76:28:f9:f3:35:6e:47:a4:
b6:ba:bf:61:cb:5e:77:08:df:0f:e8:26:31:68:ee:0e:53:02:
cf:d6:ee:14:54:52:7d:7d:9a:c4:ff:18:34:6f:73:ab:03:46:
5d:d0:51:dd:23:21:27:0f:da:a1:81:c4:56:8f:8c:a8:87:ec:
a0:9b:2f:50:f9:fe:a5:01:6e:ae:39:30:0d:12:e1:a9:5e:64:
a6:92:a8:c2:90:2c:ad:1e:ac:f7:76:39:2f:d4:e1:e1:5e:19:
b7:66:2d:13:3b:b5:3f:29:56:61:a7:12:13:9b:09:5c:85:c3:
d4:be:14:92:48:73:01:ff:08:d0:66:a5:84:a6:7f:cc:31:d4:
41:34:2f:56:ec:dc:2f:59:8b:62:4e:2e:eb:bb:a7:49:5c:6b:
b3:f5:e8:cf:1e:f3:96:5b:bf:fb:c0:3b:31:73:88:58:80:80:
5c:b5:ca:40:9d:ed:af:d1:15:b4:72:2b:ba:53:ae:e6:ef:a6:
01:50:ca:3a:5c:3a:6a:b5:2f:8a:dc:8b:90:0b:90:29:a5:39:
ce:ba:c2:a9:2b:1e:53:08:e5:2a:c4:41:51:fb:f3:b0:6b:c1:
f1:76:eb:3f:a4:d0:f2:d0:48:9c:6a:6d:d6:dd:d8:fa:d1:49:
bb:0a:ba:0a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjFEMjYxMTAvBgNVBAUTKEU5NUVGRkMyOTQxNjU4NEJGMzdDMEM4RjlFQjczQjky
MEY5QTQxQUQwHhcNMjYwOTIyMjA0MTE5WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIyZTdlZi04MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsNO6tJ9NyxQ5YsvbryaurFSMH28vVjvFWsXN2IbiaEeWElqwORqoZAXfzhQd
kGv6VlVa27XNcU5PAyID3wrTtCwXA7bWp2T/MFPd2xnid+eE7QzElrAbpaMGDsK+
EbOCcipfBSACdLSNlMY8UNIy0BRh9+ZqPsWhraMrTn1csfEigEkSgr1uEos1OWJC
/Zqg0YRRqeuIzD9ohAfOImS0+q2eHVS070pOJPIwReSA+9JzGm6hvIum3/V/rP5k
VUh5ufbVa4MZwxQF7jm+zIhRz8vedBbHFvlRGCaLFx7FzLnHKjPRI5REU+LRVkFY
NPlZo66DqXl2JhbZvOh1B1w/RQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDvg7S95
MTeoVfGwRi1Lvggfdxh0MB8GA1UdIwQYMBaAFOle/8KUFlhL83wMj563O5IPmkGt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQyNi8wN0YwODQ4MDE4
QUQxMUVCOUVFMzM0ODVDNEY5QUUwMi82Vjdfd3BRV1dFdnpmQXlQbnJjN2tnLWFR
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZWN193cFFXV0V2emZBeVBucmM3a2ctYVFhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjFEMjYvMDdGMDg0ODAxOEFEMTFFQjlFRTMzNDg1QzRGOUFFMDIvNTE4RTkwRDA4
OEJDMTFFQjhEMDBCNjMxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAygCcAwQAygCeMA0GCSqGSIb3DQEBCwUAA4IBAQAcfnKCWSmnFU2o
dij58zVuR6S2ur9hy153CN8P6CYxaO4OUwLP1u4UVFJ9fZrE/xg0b3OrA0Zd0FHd
IyEnD9qhgcRWj4yoh+ygmy9Q+f6lAW6uOTANEuGpXmSmkqjCkCytHqz3djkv1OHh
Xhm3Zi0TO7U/KVZhpxITmwlchcPUvhSSSHMB/wjQZqWEpn/MMdRBNC9W7NwvWYti
Ti7ru6dJXGuz9ejPHvOWW7/7wDsxc4hYgIBctcpAne2v0RW0ciu6U67m76YBUMo6
XDpqtS+K3IuQC5AppTnOusKpKx5TCOUqxEFR+/Owa8Hxdus/pNDy0Eicam3W3dj6
0Um7CroK
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:45:53 2026 by rpki-client