
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/889930E805E011F18AD458A9133D8C67.roa
File: 889930E805E011F18AD458A9133D8C67.roa (raw, json)
Hash identifier: coEpUspblzPFvORawLzP4BPk3NGo6TsW79ltjfm6ee4=
Subject key identifier: 1D:EF:21:AD:58:93:F5:AD:A4:B4:0D:D7:24:CB:0C:5B:85:A8:98:36
Certificate issuer: /CN=A9152E70/serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Certificate serial: 8C
Authority key identifier: 07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/889930E805E011F18AD458A9133D8C67.roa
Signing time: Mon 04 May 2026 18:12:55 +0000
ROA not before: Mon 04 May 2026 18:12:55 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136258
IP address blocks: 167.150.100.0/24 maxlen: 24
167.150.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70, serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Validity
Not Before: May 4 18:12:55 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69f8e1a7-1baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:e9:8e:93:be:82:37:b4:a1:79:7b:ff:e8:
97:b2:55:36:e7:bd:a1:02:49:0c:a2:2b:77:eb:9d:
8f:31:c7:20:24:58:ef:73:fc:fe:b1:2b:c5:35:0b:
b0:5a:a7:40:c6:d6:0c:a9:df:27:4a:2e:3c:d5:8d:
fd:29:1f:c1:11:97:12:88:ea:09:be:dc:68:81:2c:
8b:41:36:c2:14:c7:72:52:1c:2b:4d:a0:88:47:04:
a5:d1:3e:f7:be:8a:37:ab:18:b5:90:25:64:e9:13:
75:12:34:1c:31:7c:57:05:b4:df:04:a2:8f:24:56:
2f:94:d6:83:0b:1e:51:08:32:6d:db:cc:e0:2a:17:
48:8e:39:9f:ae:1f:4e:f8:5d:bd:ad:61:5e:e1:ad:
15:68:6d:5c:3b:02:c2:f1:a8:2c:f1:87:0c:3b:23:
17:73:26:c7:4f:6f:44:db:f3:2f:fd:37:8b:64:e1:
4a:9c:2f:f2:76:15:8b:0d:6c:2e:75:de:a9:85:de:
52:12:35:2a:19:93:c9:bf:3c:81:dd:b6:ae:56:9a:
fe:bc:ed:00:65:82:01:76:93:e4:bd:35:0c:11:df:
3f:bc:c5:d2:f7:30:7e:49:24:7f:1d:25:72:47:df:
13:2b:f1:30:21:07:d6:f4:84:eb:da:c9:11:43:af:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EF:21:AD:58:93:F5:AD:A4:B4:0D:D7:24:CB:0C:5B:85:A8:98:36
X509v3 Authority Key Identifier:
keyid:07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/889930E805E011F18AD458A9133D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
167.150.100.0/23
Signature Algorithm: sha256WithRSAEncryption
11:d7:32:78:ad:88:c2:90:0a:67:11:93:8c:e8:a5:0d:58:a5:
13:9f:97:16:12:1c:dc:a1:32:8c:b1:68:2a:d6:73:34:64:1a:
fd:43:e1:7b:9d:6a:1f:73:c3:75:d3:b0:a2:79:04:a4:13:92:
e0:08:0a:f7:fa:8b:67:fe:f0:e5:c3:69:f5:59:44:e4:14:46:
18:eb:02:46:5c:be:6e:6f:00:86:2d:e0:fb:45:99:32:00:4f:
a8:62:c2:6b:c1:d1:59:cc:eb:70:74:d8:75:3a:05:29:ba:32:
d4:f0:5c:67:79:ff:ac:52:1a:ed:f7:22:bc:9c:06:58:63:36:
2a:c5:6b:9f:d8:54:d0:23:7e:b3:7d:f3:c1:87:ca:9b:6b:32:
47:88:15:c9:02:c4:2c:66:f1:89:87:86:3d:c6:6f:98:89:00:
c3:86:76:9a:a4:2d:d3:c4:aa:82:68:30:4d:d3:45:3d:cb:42:
8c:7e:88:53:b6:e4:f2:42:96:3d:e7:c9:0e:47:08:04:15:45:
23:58:46:4f:19:9a:ef:da:e1:6b:fd:a6:b8:9f:58:09:3c:07:
7c:50:d9:05:f2:7e:ad:7d:01:ce:b9:8f:84:3c:02:0a:1e:f6:
00:31:16:a0:6b:f6:4d:e9:bb:50:47:5c:5d:0d:ca:b1:ff:ae:
30:9e:eb:07
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJFNzAxMTAvBgNVBAUTKDA3RkU4OTYzMDIwMURFRjM3RjRENjhBMjBFRDEzM0E5
QzNCNkEyQTMwHhcNMjYwNTA0MTgxMjU1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY4ZTFhNy0xYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs9XpjpO+gje0oXl7/+iXslU2572hAkkMoit3652PMccgJFjvc/z+sSvFNQuw
WqdAxtYMqd8nSi481Y39KR/BEZcSiOoJvtxogSyLQTbCFMdyUhwrTaCIRwSl0T73
voo3qxi1kCVk6RN1EjQcMXxXBbTfBKKPJFYvlNaDCx5RCDJt28zgKhdIjjmfrh9O
+F29rWFe4a0VaG1cOwLC8ags8YcMOyMXcybHT29E2/Mv/TeLZOFKnC/ydhWLDWwu
dd6phd5SEjUqGZPJvzyB3bauVpr+vO0AZYIBdpPkvTUMEd8/vMXS9zB+SSR/HSVy
R98TK/EwIQfW9ITr2skRQ683rwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB3vIa1Y
k/WtpLQN1yTLDFuFqJg2MB8GA1UdIwQYMBaAFAf+iWMCAd7zf01oog7RM6nDtqKj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9FNjBFOTM3QzdE
ODYxMUYwOEZCMEU4NzlDNEY5QUUwMi9CXzZKWXdJQjN2Tl9UV2lpRHRFenFjTzJv
cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JfNkpZd0lCM3ZOX1RXaWlEdEV6cWNPMm9xTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTJFNzAvRTYwRTkzN0M3RDg2MTFGMDhGQjBFODc5QzRGOUFFMDIvODg5OTMwRTgw
NUUwMTFGMThBRDQ1OEE5MTMzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBp5ZkMA0GCSqGSIb3DQEBCwUAA4IBAQAR1zJ4rYjCkApnEZOM6KUN
WKUTn5cWEhzcoTKMsWgq1nM0ZBr9Q+F7nWofc8N107CieQSkE5LgCAr3+otn/vDl
w2n1WUTkFEYY6wJGXL5ubwCGLeD7RZkyAE+oYsJrwdFZzOtwdNh1OgUpujLU8Fxn
ef+sUhrt9yK8nAZYYzYqxWuf2FTQI36zffPBh8qbazJHiBXJAsQsZvGJh4Y9xm+Y
iQDDhnaapC3TxKqCaDBN00U9y0KMfohTtuTyQpY958kORwgEFUUjWEZPGZrv2uFr
/aa4n1gJPAd8UNkF8n6tfQHOuY+EPAIKHvYAMRaga/ZN6btQR1xdDcqx/64wnusH
-----END CERTIFICATE-----
Generated at Wed May 13 11:12:02 2026 by rpki-client