
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BD5D1956031B11F192FC7DBE1A3D8C67.roa
File: BD5D1956031B11F192FC7DBE1A3D8C67.roa (raw, json)
Hash identifier: cZhTsq4k8LsewrNsGBBXO6N4jDMgq79S5zKL/gIf1X4=
Subject key identifier: E7:EC:68:C3:CE:6C:78:60:40:9B:26:1C:3A:71:56:41:30:28:47:A2
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 04D3
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BD5D1956031B11F192FC7DBE1A3D8C67.roa
Signing time: Fri 06 Feb 2026 05:21:50 +0000
ROA not before: Fri 06 Feb 2026 05:21:50 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 215304
IP address blocks: 202.155.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1235 (0x4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Feb 6 05:21:50 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69857a6e-13e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:12:e2:4d:9f:9e:f1:c2:74:2a:18:ab:6f:
83:85:8c:de:6d:b4:20:10:1c:a6:9a:eb:78:12:7a:
99:0b:6a:02:43:fa:4a:32:fe:86:60:39:c8:41:f6:
cc:33:05:8c:89:e4:87:c8:ef:1d:d8:3d:f1:40:3e:
79:a7:8d:95:6d:08:b9:a9:3c:e9:05:48:56:d4:cd:
c0:6a:fd:1f:18:d7:8e:4f:9e:ee:cf:a2:41:2d:1a:
3d:cc:7c:24:57:0b:bd:56:bf:d6:1b:04:b1:36:3c:
fd:63:17:94:01:29:ce:2c:ae:57:5c:a1:3f:99:50:
31:e7:49:fb:33:27:bc:06:a4:b6:6f:ef:1d:3a:59:
93:6d:ff:c3:65:2d:fa:b5:93:84:e0:10:f0:f2:4a:
b6:83:23:5d:cc:1f:a3:96:7f:f1:99:60:27:45:b7:
7e:72:c1:33:83:8f:ba:d3:f8:eb:f7:f8:dd:e9:af:
2a:e1:a2:81:c9:a3:d3:14:8c:b8:09:fa:9f:df:c8:
00:44:6b:88:22:28:70:62:a1:53:25:22:dc:eb:ef:
98:3b:b7:60:83:37:be:db:20:10:28:ce:05:19:da:
77:8d:e0:b2:c2:6c:e9:4f:a2:21:7a:5b:d1:b7:79:
dd:50:3a:e7:45:01:c2:0c:d4:53:b0:82:97:e1:bb:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EC:68:C3:CE:6C:78:60:40:9B:26:1C:3A:71:56:41:30:28:47:A2
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BD5D1956031B11F192FC7DBE1A3D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.152.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:b6:0b:06:9f:6b:27:12:a6:84:fd:d7:a6:cf:83:35:4c:d6:
84:60:ed:a4:56:b2:41:ea:80:35:e2:a7:2e:34:49:fc:be:47:
a3:7f:c4:e7:ef:05:71:ce:e5:24:e5:c8:f3:6c:a8:02:a6:78:
be:b4:a4:91:6f:87:31:9c:1f:11:b3:71:01:c7:0c:43:c1:c5:
8c:fd:b5:38:b3:d0:5d:53:b1:43:95:d0:3e:ea:97:18:18:ae:
85:93:40:67:6e:60:74:40:d6:02:53:35:6b:22:f6:f9:f7:a0:
7e:b1:97:9f:dc:ff:08:b1:b4:ae:8c:48:52:0e:97:3e:bd:ce:
2c:3a:81:75:96:d2:83:41:7f:61:f2:62:c6:f9:12:37:5b:df:
a4:ff:06:f9:f2:ef:41:a4:b9:48:30:07:74:65:bb:ee:cf:7d:
7b:2e:7e:59:55:a1:62:61:36:fc:bb:a7:75:5a:82:7b:56:11:
12:a9:47:9f:33:aa:2d:b9:fd:b2:61:c9:66:22:72:4a:b8:ca:
9d:c5:51:25:8f:ec:2e:f1:15:fe:14:4f:25:4c:bc:f1:40:5b:
44:81:35:f3:94:21:4a:55:f7:a1:25:09:25:29:be:0f:1e:61:
0c:60:02:58:13:8c:1f:d9:a3:92:ab:18:8a:82:82:12:d6:18:
8a:28:fa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:55 2026 by rpki-client