
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/49564F2478D611F18E610B8795A30FBC.roa
File: 49564F2478D611F18E610B8795A30FBC.roa (raw, json)
Hash identifier: br+bzHlmBGen3teekF6r+mZElZ/t1pmZicYJJvYblT4=
Subject key identifier: 31:E6:42:01:76:18:60:AE:0A:B3:69:83:DC:2A:F2:34:90:0B:C6:EB
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0673
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/49564F2478D611F18E610B8795A30FBC.roa
Signing time: Wed 09 Sep 2026 01:53:02 +0000
ROA not before: Wed 09 Sep 2026 01:53:02 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 9304
IP address blocks: 202.155.149.0/24 maxlen: 24
202.155.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1651 (0x673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Sep 9 01:53:02 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa0bbfe-28ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:7a:14:7f:1c:2b:61:28:96:bf:52:09:53:
73:1c:88:39:3c:bb:38:9d:33:f9:47:e0:9a:0d:39:
a5:0f:25:03:23:23:da:12:c2:04:f3:52:15:e8:f4:
95:4c:17:7c:09:bc:a4:05:83:0a:74:8f:85:7e:2e:
2b:59:df:19:15:ab:6a:b9:f5:b4:ca:a9:17:40:00:
8b:ec:e5:dc:87:a3:d7:97:a5:41:4e:d3:58:36:f7:
da:4d:7f:ce:d6:fd:00:a9:5b:3c:3c:0b:9d:ee:db:
ab:49:ef:c9:cf:35:49:61:8c:07:10:8d:3d:5f:b1:
76:2f:e9:dc:90:c1:14:0c:f5:b7:7f:3c:c7:6d:f8:
31:97:74:46:e0:ac:cc:a4:9e:0f:93:d8:d5:41:94:
b6:98:af:ea:27:c6:04:94:3e:68:a5:d4:2f:16:f1:
be:56:a2:e3:c1:fa:24:3e:b3:f6:e0:1b:c1:83:e3:
8a:60:15:3f:0d:ab:48:d1:f5:c3:79:33:73:b7:22:
46:64:5a:0b:e7:fe:88:09:03:23:1b:20:46:63:f7:
d4:e3:9a:c0:35:b2:37:85:8d:7b:7c:94:18:00:5a:
3a:56:87:3e:55:d3:e0:4c:a0:46:6e:cb:06:4e:07:
01:7d:50:ef:5d:04:15:a4:bd:a8:89:b0:46:45:c6:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E6:42:01:76:18:60:AE:0A:B3:69:83:DC:2A:F2:34:90:0B:C6:EB
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/49564F2478D611F18E610B8795A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
202.155.149.0/24
202.155.152.0/22
Signature Algorithm: sha256WithRSAEncryption
62:89:99:68:46:0f:0a:f5:91:52:a8:4e:e0:60:29:c9:76:fa:
2e:b9:48:ad:ee:4b:ee:e8:37:36:46:5e:d5:04:38:7d:93:48:
fc:a3:c4:b4:0c:53:8f:e4:96:e5:a5:9f:c7:3a:2a:64:bb:69:
26:a4:85:6a:cd:9d:de:02:d6:74:3e:fb:e9:40:2e:d0:7c:8f:
f4:79:d0:3a:74:4a:07:26:ea:7a:1a:34:d9:d2:79:a2:cf:2c:
68:e0:52:4f:7d:cf:d3:45:f0:b5:6e:da:1c:7a:7f:53:f8:f4:
1f:38:d1:08:a3:6c:d0:15:e7:a4:f0:07:bd:0b:6a:3e:85:09:
58:3f:18:d7:9e:f1:7c:7f:d2:e5:41:c9:9e:6d:80:7b:a1:59:
8d:b5:62:08:3e:22:6c:c7:40:9c:92:23:ff:a3:70:e3:4c:a6:
8f:00:f0:c9:ed:90:ae:c1:12:c9:83:66:01:d7:f8:78:ab:e3:
ca:7b:81:ec:ee:c1:d1:cb:f8:36:28:ac:22:a9:fe:1d:7a:75:
37:88:a6:11:0a:2d:3e:58:13:1c:f9:af:ce:74:9e:e1:02:18:
27:00:95:56:b0:87:02:19:46:28:8e:7b:cc:d6:ac:a4:f9:1e:
29:55:c7:a5:f7:e2:66:6a:f4:88:93:6d:41:2c:76:62:26:37:
98:f1:c1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:25:09 2026 by rpki-client