
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BA7491AAE0FE11EF9196F463C4F9AE02.roa
File: BA7491AAE0FE11EF9196F463C4F9AE02.roa (raw, json)
Hash identifier: GxjIC/dRCQuJIUTBPE/mwK6JhE0IKNRA6yKGhdkLnAU=
Subject key identifier: AC:1F:0B:83:CD:FA:5E:6D:81:E8:27:F0:92:51:58:6B:7B:58:58:F7
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0654
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BA7491AAE0FE11EF9196F463C4F9AE02.roa
Signing time: Wed 09 Sep 2026 01:52:00 +0000
ROA not before: Wed 09 Sep 2026 01:52:00 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 20473
IP address blocks: 202.155.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1620 (0x654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Sep 9 01:52:00 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa0bbc0-6e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:a0:92:52:85:71:72:63:9c:1d:c9:78:73:
ab:ce:be:a9:af:7a:ff:57:98:79:0c:72:55:0f:50:
61:78:8f:ea:38:ad:ea:7b:1c:4e:ab:be:0a:c2:33:
a1:d2:4a:09:61:7f:0a:df:3e:a7:a7:26:a4:a6:bc:
97:f1:d3:62:1b:92:57:fa:d8:46:6d:62:01:1a:c0:
9a:f1:24:9d:55:db:f7:86:6a:62:a8:a8:62:e4:1d:
25:42:c8:53:01:b9:c6:06:87:af:ee:18:41:f4:eb:
56:0b:2f:bd:0b:7a:f4:9a:ac:0a:2c:3c:ed:4c:ef:
06:81:f8:10:8c:54:45:38:16:49:50:ab:34:72:3a:
36:cc:6e:16:5c:88:9e:9b:89:83:a3:98:23:7c:4f:
b9:c9:4d:31:38:9e:15:62:dd:eb:8c:34:81:c6:d3:
6b:e7:72:2b:46:af:1a:85:c8:fe:a2:53:78:0b:e9:
79:e9:c0:b9:41:2e:36:30:b6:6f:02:ed:a3:fa:70:
8b:52:eb:72:ec:f4:25:23:0c:98:b8:a5:69:9b:1e:
59:9e:28:25:f6:fa:4e:06:54:64:7d:38:20:66:8e:
a3:03:49:9f:c7:b6:7a:a5:e0:6c:70:6a:8b:1c:30:
8e:49:ff:ce:b8:05:8b:03:80:96:09:c8:56:40:a0:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:0B:83:CD:FA:5E:6D:81:E8:27:F0:92:51:58:6B:7B:58:58:F7
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BA7491AAE0FE11EF9196F463C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.155.133.0/24
Signature Algorithm: sha256WithRSAEncryption
70:53:97:cd:94:19:7a:56:b1:9a:22:dd:f6:1f:72:35:79:25:
44:ca:d0:d4:b5:64:2c:db:a6:89:50:f5:e9:47:81:7f:0c:71:
b5:b6:43:2c:99:4e:b4:ce:52:98:fe:c4:02:00:d7:9d:44:4f:
96:fa:b9:e3:e7:10:f4:84:79:45:29:27:98:09:7b:6e:79:b8:
ef:87:5d:d6:1b:d4:63:16:57:04:b1:4d:ce:7d:fd:0d:d4:19:
c0:81:08:96:48:90:b7:d7:27:8b:f8:e9:88:7a:88:c7:e0:f2:
8c:de:d8:c9:be:74:5d:ac:c7:60:93:e5:0a:12:c1:69:23:26:
68:5b:72:5e:f8:b2:e8:d4:41:0c:10:5c:b5:0d:84:ec:b3:66:
33:46:1a:eb:bc:80:8d:0b:8a:8d:17:a0:0f:34:c9:c2:80:f8:
d4:4f:c5:cb:c6:c3:9b:91:87:7a:63:08:fd:2f:45:f7:73:95:
64:a6:17:5a:2d:56:25:17:0a:a3:4e:b5:a9:5a:8b:e9:d9:89:
b3:4a:16:ac:8b:c8:25:d4:1d:d9:3a:cf:4b:00:27:67:a5:6c:
25:7c:d9:2d:cd:63:da:77:6a:6c:e2:9a:92:21:17:a7:0e:c7:
d2:f5:4a:9b:77:af:cd:eb:a4:be:96:41:56:43:2d:fd:b5:47:
98:b3:55:7b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjYwOTA5MDE1MjAwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwYmJjMC02ZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxSKgklKFcXJjnB3JeHOrzr6pr3r/V5h5DHJVD1BheI/qOK3qexxOq74KwjOh
0koJYX8K3z6npyakpryX8dNiG5JX+thGbWIBGsCa8SSdVdv3hmpiqKhi5B0lQshT
AbnGBoev7hhB9OtWCy+9C3r0mqwKLDztTO8GgfgQjFRFOBZJUKs0cjo2zG4WXIie
m4mDo5gjfE+5yU0xOJ4VYt3rjDSBxtNr53IrRq8ahcj+olN4C+l56cC5QS42MLZv
Au2j+nCLUuty7PQlIwyYuKVpmx5Znigl9vpOBlRkfTggZo6jA0mfx7Z6peBscGqL
HDCOSf/OuAWLA4CWCchWQKC2gQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKwfC4PN
+l5tgegn8JJRWGt7WFj3MB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvQkE3NDkxQUFF
MEZFMTFFRjkxOTZGNDYzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAypuFMA0GCSqGSIb3DQEBCwUAA4IBAQBwU5fNlBl6VrGaIt32H3I1
eSVEytDUtWQs26aJUPXpR4F/DHG1tkMsmU60zlKY/sQCANedRE+W+rnj5xD0hHlF
KSeYCXtuebjvh13WG9RjFlcEsU3Off0N1BnAgQiWSJC31yeL+OmIeojH4PKM3tjJ
vnRdrMdgk+UKEsFpIyZoW3Je+LLo1EEMEFy1DYTss2YzRhrrvICNC4qNF6APNMnC
gPjUT8XLxsObkYd6Ywj9L0X3c5VkphdaLVYlFwqjTrWpWovp2YmzShasi8gl1B3Z
Os9LACdnpWwlfNktzWPad2ps4pqSIRenDsfS9Uqbd6/N66S+lkFWQy39tUeYs1V7
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:23:08 2026 by rpki-client