
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/25A5300C885B11F09F3C8013C4F9AE02.roa
File: 25A5300C885B11F09F3C8013C4F9AE02.roa (raw, json)
Hash identifier: QeN3kY7Jp8EcmxCUJ++F92Otf7l26Dz7rZaoTfGSBUo=
Subject key identifier: 7C:40:6E:11:10:C7:50:19:12:AD:CE:D6:C0:AC:D6:B0:66:20:1C:98
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0669
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/25A5300C885B11F09F3C8013C4F9AE02.roa
Signing time: Wed 09 Sep 2026 01:52:42 +0000
ROA not before: Wed 09 Sep 2026 01:52:42 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 401783
IP address blocks: 202.155.24.0/24 maxlen: 24
202.155.25.0/24 maxlen: 24
202.155.26.0/24 maxlen: 24
202.155.27.0/24 maxlen: 24
218.33.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1641 (0x669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Sep 9 01:52:42 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa0bbea-41ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:96:10:65:7d:d7:6b:3f:0c:c3:25:26:18:2a:
84:d9:73:ff:2b:a1:5d:10:f2:e2:df:17:fc:e3:a7:
c4:f1:6f:ac:eb:c6:f4:a2:77:33:9a:81:65:de:c1:
60:7c:0e:a4:97:38:0b:78:bf:16:e8:67:c7:4d:9c:
4b:94:75:ca:40:ca:54:d2:57:d5:2f:b5:b0:98:af:
09:a4:69:fd:bc:95:71:79:e2:86:2e:03:52:73:cd:
eb:9a:76:9c:ce:86:8b:27:fc:f2:26:ab:00:f9:ca:
a8:1b:5b:42:7e:f4:50:6d:a7:e8:5a:73:4f:9b:ec:
76:7c:a1:43:27:89:54:ca:34:52:8a:ec:64:0c:c7:
ff:18:e7:7c:74:1c:c2:6d:10:4f:73:a5:05:fc:fa:
3f:0d:2a:23:98:e3:7b:28:99:1e:0f:96:89:44:58:
be:18:0b:0e:e9:d7:3c:53:a4:e4:4e:13:cc:d8:25:
71:03:cf:da:36:a5:72:6f:56:35:77:c1:b1:10:b0:
31:58:40:62:b0:d5:3e:37:66:84:dd:fe:88:35:85:
3b:e9:6d:34:1f:ee:ff:fe:e0:01:02:20:bb:23:1b:
ef:98:8e:b8:01:ba:be:9a:78:ee:f6:cb:f8:dc:34:
1a:5a:22:49:42:ee:85:f9:36:01:b3:18:aa:25:5a:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:40:6E:11:10:C7:50:19:12:AD:CE:D6:C0:AC:D6:B0:66:20:1C:98
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/25A5300C885B11F09F3C8013C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.155.24.0/22
218.33.96.0/22
Signature Algorithm: sha256WithRSAEncryption
14:46:f0:3d:2b:15:13:a4:0b:61:41:ce:83:2d:0e:78:25:b6:
92:17:bc:38:75:27:04:80:a1:7a:3e:85:73:e0:87:b0:1f:8d:
b1:34:67:13:70:64:04:2c:58:07:c9:82:58:36:0e:d4:15:c6:
55:64:e1:4c:e0:c2:b0:ad:36:b6:04:66:d0:b6:9d:1c:79:c9:
d1:df:17:8b:4e:78:d2:5c:6d:bc:31:f1:c7:66:81:eb:9d:d1:
77:ad:3f:9c:08:55:ff:76:38:eb:84:2e:0a:1f:e4:b6:51:ff:
ea:80:9c:d9:77:48:42:e6:6e:b7:0e:f5:7c:90:3c:03:b6:82:
ad:92:29:88:df:de:e9:01:c5:66:6f:ce:87:3d:0c:89:d3:4b:
9d:e7:35:9f:f2:f5:02:35:4e:7e:59:ff:0c:ca:d6:b2:a3:6e:
5a:df:fa:e4:eb:8d:14:5f:9f:f6:e4:4a:7a:97:99:a3:c3:12:
10:2b:df:06:d0:b6:0f:03:cd:3e:a3:63:d2:64:0e:f1:2f:63:
ca:0f:ec:3a:0c:87:2c:35:13:00:28:cb:d1:43:e8:2d:8c:05:
b2:f1:d6:c5:fe:0e:e4:17:3a:a3:ed:6f:30:57:18:8b:ec:f3:
7d:d1:88:c7:98:30:7e:f5:47:6a:d8:da:c2:ed:18:62:0d:54:
da:80:7e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:37:49 2026 by rpki-client