
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A5FFFE0A03BF11F1B4CA9307053D8C67.roa
File: A5FFFE0A03BF11F1B4CA9307053D8C67.roa (raw, json)
Hash identifier: yUVrUXOWpwpFimbnbhmVusTaU46En7ZS9EeZX1bbEV0=
Subject key identifier: B6:D3:A8:FF:33:B5:28:BC:18:1B:6F:28:DB:75:C8:98:AC:16:74:B5
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0554
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A5FFFE0A03BF11F1B4CA9307053D8C67.roa
Signing time: Sun 01 Mar 2026 20:06:45 +0000
ROA not before: Sat 07 Feb 2026 02:30:50 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 401776
IP address blocks: 202.155.144.0/24 maxlen: 24
202.155.145.0/24 maxlen: 24
202.155.146.0/24 maxlen: 24
202.155.147.0/24 maxlen: 24
202.155.149.0/24 maxlen: 24
202.155.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364 (0x554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Feb 7 02:30:50 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a49c55-fb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:ec:79:e6:40:b0:e2:91:5a:cd:1b:6b:a5:
77:58:2c:70:95:09:0b:97:de:ed:30:bd:3f:c4:cc:
28:e1:49:be:a8:e0:84:59:0b:e6:fa:ba:0a:47:00:
01:9d:5a:fd:ab:bb:5c:9b:57:ab:d3:0d:de:ed:89:
38:10:7c:86:b4:11:65:38:31:19:84:c0:c1:59:a2:
bb:bd:d9:5f:61:cf:b8:6b:f7:d9:2e:2c:33:3a:f0:
ee:5f:68:3b:d7:93:3e:ec:2f:68:41:a5:ee:27:62:
79:fd:83:0e:a7:fb:8d:67:77:c5:67:98:a0:00:01:
e8:e5:c9:36:ea:ab:50:d2:09:62:2e:c6:ed:b9:77:
7f:3d:cf:8b:c9:de:a4:c1:e1:65:42:cf:b8:69:7a:
c8:e2:ed:86:b5:00:a0:6e:b9:9a:52:4e:7b:03:90:
2c:51:cb:77:d8:aa:f1:5b:cd:a7:ab:81:34:15:da:
49:32:52:9b:5b:7b:4d:62:1b:2b:6c:24:dc:c5:c2:
63:ef:53:d1:72:26:be:c1:22:66:4d:98:a6:98:fa:
ed:5b:5f:93:c1:06:c6:5a:34:ce:d1:a8:3e:4d:cb:
e3:b3:1b:d8:2b:42:a6:51:3f:e3:a9:bf:c4:56:d7:
49:b5:8f:f1:63:a3:e6:05:88:e8:f2:db:01:75:0f:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D3:A8:FF:33:B5:28:BC:18:1B:6F:28:DB:75:C8:98:AC:16:74:B5
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A5FFFE0A03BF11F1B4CA9307053D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
202.155.144.0/22
202.155.149.0/24
202.155.151.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:e5:ee:f3:7e:60:d1:8d:3a:b4:02:43:18:0d:29:d3:af:f2:
3f:c5:fd:2f:1b:e0:2c:57:3d:83:12:c4:ce:d5:26:08:d2:b5:
ca:15:08:7d:95:a5:8b:f9:22:a4:52:d2:b7:4a:d5:11:72:ef:
84:5f:f9:ac:6f:50:a3:d1:c8:42:d9:cf:bb:3f:1b:e5:64:6c:
ce:3d:f2:50:55:0f:00:27:ab:6c:fa:f9:b1:e0:28:c9:1f:7e:
b6:c5:66:f0:ac:70:4d:0d:13:2a:6c:97:94:0d:d3:d7:77:8b:
dc:3c:f4:a3:cc:d3:f1:fe:54:54:c4:48:04:0d:39:ea:fb:c1:
31:94:ee:14:74:f8:c6:20:08:7b:31:8d:15:e7:43:2e:8d:15:
aa:dd:40:3a:f4:b6:fa:b9:27:2b:08:7f:ee:4f:db:34:c7:5a:
8a:1a:6d:3e:c2:f2:2d:f3:5a:1c:c9:51:9d:cc:e7:82:c5:83:
29:fa:9e:b1:39:22:61:e0:e4:07:a2:a4:95:85:9d:1a:37:83:
38:9f:e7:c4:7a:eb:ff:a5:48:81:40:04:f5:d9:fa:9f:31:ed:
14:8e:c7:27:e7:b4:2b:45:a6:75:56:fd:43:14:bd:ee:fc:54:
d5:33:7f:6a:00:84:e8:86:71:b2:79:bd:44:3f:f2:40:80:de:
be:46:09:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:05:51 2026 by rpki-client