
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0DD48D2ED2D311F1BF0D52DA0A66CEF9.roa
File: 0DD48D2ED2D311F1BF0D52DA0A66CEF9.roa (raw, json)
Hash identifier: szvJCDusdIOaQFmnGRZHr5ibNtiowlquv0mt0cHHjB4=
Subject key identifier: 0F:53:6C:86:C5:9D:2B:26:A7:AE:BA:49:10:27:C6:7B:3C:77:18:C0
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0695
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0DD48D2ED2D311F1BF0D52DA0A66CEF9.roa
Signing time: Wed 28 Oct 2026 13:25:34 +0000
ROA not before: Wed 28 Oct 2026 13:25:34 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 136809
IP address blocks: 202.155.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 01:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1685 (0x695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Oct 28 13:25:34 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ae1f7ce-df9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:5e:09:de:b6:8b:5b:0f:2e:f4:b3:9e:dc:
c2:c9:90:39:2b:cf:4b:a4:1d:b8:14:6d:cf:54:6a:
e0:f1:b8:38:11:da:79:00:3d:e1:42:e7:27:27:75:
60:e9:d5:d2:a4:ba:b6:ce:53:64:e3:97:19:28:37:
48:71:8b:dd:82:60:08:e3:1a:da:cf:75:d4:0f:ae:
10:07:9b:21:5e:0f:e9:80:53:db:23:73:46:31:36:
7d:1b:58:06:d4:de:5f:47:7d:29:1a:18:ee:6d:b3:
b5:f3:b4:84:81:fa:42:a8:fe:ee:7b:7b:12:98:c0:
0d:57:c5:94:58:e9:a9:42:be:d6:5f:2f:6b:fb:c5:
56:43:cf:29:6a:a4:c6:52:d7:2a:8c:b9:bb:24:36:
0f:b9:c3:0a:bf:ab:3e:a9:c1:42:50:fb:99:82:b1:
67:4c:c5:a6:f8:8d:f2:3f:7f:93:7b:9a:cf:39:fd:
f3:7a:4e:b5:14:ef:66:ad:96:7c:41:18:0a:a0:b6:
2d:d9:8c:90:10:1a:61:b2:e5:b3:61:93:a3:ea:18:
f3:46:9a:f4:bb:73:3b:af:78:40:59:63:c4:d0:08:
20:3c:8f:7b:97:90:83:4a:62:89:ea:4d:cd:68:dc:
cd:fa:5f:34:06:d2:5a:95:82:d2:29:ac:f2:39:d4:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:53:6C:86:C5:9D:2B:26:A7:AE:BA:49:10:27:C6:7B:3C:77:18:C0
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0DD48D2ED2D311F1BF0D52DA0A66CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
202.155.149.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fd:b7:29:c9:e5:2f:19:4d:64:94:d6:9e:27:dd:e9:ad:4a:
6a:4a:be:86:42:f6:99:78:7f:b2:55:5f:9f:27:47:88:c5:78:
2a:74:5d:6d:d8:6b:13:76:2e:02:4b:bc:56:91:36:15:70:dc:
cc:ce:f1:d5:de:36:07:87:c9:dd:47:e7:dd:bf:61:6c:f1:14:
31:70:cc:50:f6:6f:d2:3e:02:61:8d:8b:f1:69:e9:e5:dc:95:
c4:89:4d:92:e5:16:0e:10:38:71:b8:db:b7:c2:b0:55:c4:ee:
4e:8b:b6:b0:5f:95:a5:46:e7:89:ba:5b:5c:5c:d5:3a:8f:5b:
ea:9f:12:fc:75:db:59:17:d7:11:1b:aa:5e:b5:88:dd:45:bf:
01:94:ac:01:17:11:e0:2c:cd:18:bf:60:af:ac:40:c8:c9:78:
2c:3e:f7:90:99:0e:a6:52:16:8e:d0:08:41:91:5d:0a:10:e5:
c3:01:07:cf:fc:a4:0b:2b:cc:bc:21:81:d7:50:3e:60:af:48:
b6:f4:65:7e:02:72:7e:44:37:a3:af:40:19:28:f5:02:55:ab:
08:b0:57:07:45:66:c5:06:5a:44:75:31:b4:9d:9f:69:8b:56:
9a:a4:de:48:38:95:1c:09:a5:86:cf:cf:73:7b:6f:c7:86:a8:
9a:50:8a:7f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjYxMDI4MTMyNTM0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWUxZjdjZS1kZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0UheCd62i1sPLvSzntzCyZA5K89LpB24FG3PVGrg8bg4Edp5AD3hQucnJ3Vg
6dXSpLq2zlNk45cZKDdIcYvdgmAI4xraz3XUD64QB5shXg/pgFPbI3NGMTZ9G1gG
1N5fR30pGhjubbO187SEgfpCqP7ue3sSmMANV8WUWOmpQr7WXy9r+8VWQ88paqTG
UtcqjLm7JDYPucMKv6s+qcFCUPuZgrFnTMWm+I3yP3+Te5rPOf3zek61FO9mrZZ8
QRgKoLYt2YyQEBphsuWzYZOj6hjzRpr0u3M7r3hAWWPE0AggPI97l5CDSmKJ6k3N
aNzN+l80BtJalYLSKazyOdSK8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA9TbIbF
nSsmp666SRAnxns8dxjAMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvMERENDhEMkVE
MkQzMTFGMUJGMEQ1MkRBMEE2NkNFRjkucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAypuVMA0GCSqGSIb3DQEBCwUAA4IBAQAz/bcpyeUvGU1klNaeJ93p
rUpqSr6GQvaZeH+yVV+fJ0eIxXgqdF1t2GsTdi4CS7xWkTYVcNzMzvHV3jYHh8nd
R+fdv2Fs8RQxcMxQ9m/SPgJhjYvxaenl3JXEiU2S5RYOEDhxuNu3wrBVxO5Oi7aw
X5WlRueJultcXNU6j1vqnxL8ddtZF9cRG6petYjdRb8BlKwBFxHgLM0Yv2CvrEDI
yXgsPveQmQ6mUhaO0AhBkV0KEOXDAQfP/KQLK8y8IYHXUD5gr0i29GV+AnJ+RDej
r0AZKPUCVasIsFcHRWbFBlpEdTG0nZ9pi1aapN5IOJUcCaWGz89ze2/HhqiaUIp/
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:25:51 2026 by rpki-client