
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/3A864E90FE5111F0B3F486DA4D6F56BC.roa
File: 3A864E90FE5111F0B3F486DA4D6F56BC.roa (raw, json)
Hash identifier: Vpx4zDnZ5S98CaJ9xe7SeJd/Y3mjsyEN7SSmpXxs8zE=
Subject key identifier: 6E:00:FE:AC:4A:C9:7B:89:33:18:31:B3:A5:84:6B:A7:A8:EF:87:74
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 054D
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/3A864E90FE5111F0B3F486DA4D6F56BC.roa
Signing time: Sun 01 Mar 2026 20:06:39 +0000
ROA not before: Sat 31 Jan 2026 03:02:07 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 40676
IP address blocks: 202.155.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357 (0x54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Jan 31 03:02:07 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a49c4f-25a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:15:a0:af:61:d0:d7:ae:07:14:7e:1a:2f:
15:63:0d:1b:68:04:24:85:69:92:5e:ba:ab:43:a2:
07:16:10:ff:32:00:ef:23:07:0b:43:c9:70:54:62:
0c:2f:83:bf:cc:bc:97:73:b4:7e:e5:29:89:92:f7:
bf:e2:81:ad:a7:02:7b:37:97:16:6c:7d:ae:b1:22:
45:88:f2:69:89:0c:07:aa:d4:41:e8:13:a7:5e:58:
8a:e1:7c:96:03:3a:5b:16:52:4c:17:09:bb:ba:2f:
70:29:d4:ea:7b:3f:8c:9e:3e:24:af:fe:f2:e8:cb:
e8:a1:ec:47:61:9d:fd:fa:5b:98:e8:5a:27:19:b3:
52:4a:51:3c:fe:bc:14:c6:c0:dc:03:1e:10:a5:6a:
61:bd:5d:ab:ca:60:8c:c7:f9:b2:b3:4f:ea:8e:dc:
ce:3c:19:38:30:04:6b:30:23:95:f2:69:4d:df:3d:
26:e2:ac:42:e4:7b:38:73:0d:9e:d5:e5:83:1f:60:
31:e0:4b:15:ce:91:d1:39:d2:89:0b:c6:23:e6:a5:
1b:5a:f4:f6:56:fa:0d:72:4a:95:95:d4:27:d8:39:
97:77:e6:1b:3f:cf:bf:05:fd:8e:de:a6:f1:2e:ba:
ab:f9:2c:4c:63:c8:34:8f:2c:26:23:57:d0:d0:6d:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:00:FE:AC:4A:C9:7B:89:33:18:31:B3:A5:84:6B:A7:A8:EF:87:74
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/3A864E90FE5111F0B3F486DA4D6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
202.155.136.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:4c:1d:5e:bc:47:f1:02:f8:83:fa:38:4b:6a:6f:eb:2f:ba:
8f:43:1b:ef:c5:52:75:6a:5f:df:a9:06:d0:65:8a:08:3f:c1:
e8:af:ec:fe:bc:c1:3f:5a:37:36:75:a7:5d:90:a2:f5:88:4d:
c6:31:85:36:2e:3b:2f:18:af:49:d5:48:05:1e:d7:40:04:bd:
7a:69:93:ed:8d:c3:b6:40:2e:e5:ce:66:66:26:df:16:e9:4b:
f0:a8:41:dc:1f:ce:1e:d5:c8:46:9e:38:76:54:07:61:36:63:
42:24:4a:68:b4:bc:55:fc:42:97:ca:af:d7:21:b5:62:69:e1:
3c:4b:05:2f:bf:8a:e1:85:ff:58:52:5e:66:5b:54:25:4f:40:
d5:af:15:9e:b0:07:3a:50:79:b1:20:b4:57:69:80:3d:c0:d0:
5f:2c:a8:5b:8f:03:f8:6d:e1:29:70:22:92:59:63:40:bd:f4:
5b:22:e3:de:e7:9f:8c:34:bb:43:e9:ef:23:05:85:5a:d1:20:
d2:e9:17:f2:b5:9d:7c:89:0a:59:68:9a:f2:eb:e6:cc:16:d5:
d4:4b:38:d8:e6:b3:cf:0b:04:69:97:66:bb:bc:2a:12:d7:b8:
72:2c:b4:2d:88:4e:c2:b2:30:4c:3f:6e:fe:29:87:02:0b:d2:
31:04:2b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:58:13 2026 by rpki-client