
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BE33BE16031B11F192FC7DBE1A3D8C67.roa
File: BE33BE16031B11F192FC7DBE1A3D8C67.roa (raw, json)
Hash identifier: zv+G4QmqLCYpRDzXSCr3QIsMzDkTwP1PDAKJThji7xg=
Subject key identifier: 5C:A0:94:CD:82:D6:27:43:90:E3:59:35:49:A6:70:5B:31:66:48:D3
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 04E5
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BE33BE16031B11F192FC7DBE1A3D8C67.roa
Signing time: Sat 07 Feb 2026 02:30:49 +0000
ROA not before: Sat 07 Feb 2026 02:30:49 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 36530
IP address blocks: 202.155.144.0/24 maxlen: 24
202.155.145.0/24 maxlen: 24
202.155.146.0/24 maxlen: 24
202.155.147.0/24 maxlen: 24
202.155.149.0/24 maxlen: 24
202.155.151.0/24 maxlen: 24
202.155.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Feb 7 02:30:49 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6986a3d9-33a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:f5:78:d6:fd:05:72:65:1f:4b:31:61:ba:
84:b9:d9:98:b3:95:0f:85:f3:2f:79:22:b0:47:15:
8a:e5:22:93:64:d0:4f:f4:3d:e6:d7:6a:3b:9d:71:
da:03:eb:fb:af:e8:7f:12:9b:70:20:f9:7e:91:f4:
54:96:2b:b2:03:11:28:ab:79:37:03:f3:e3:d4:25:
4d:90:fd:4e:53:c3:9a:d1:52:b7:75:4d:7a:d4:3c:
df:63:92:b7:74:8e:3e:b4:46:40:06:31:63:75:9f:
a6:4e:7d:88:51:39:37:08:10:37:0c:0d:a3:44:b4:
58:a9:a1:67:ec:5f:d0:ab:86:8b:74:b8:d4:5f:c6:
ab:26:51:a5:23:1a:eb:2e:5c:1d:4d:7f:64:4b:86:
1c:45:b0:ba:c6:89:95:2b:c5:e9:ba:98:b7:56:d0:
34:dc:e3:94:5a:28:80:ba:e9:09:70:83:60:aa:cb:
b6:b8:c7:21:f8:ba:7c:55:03:13:d6:13:e3:b6:e7:
85:e4:9e:b7:a7:28:d1:64:21:6d:30:1b:33:ec:44:
ea:05:6f:39:ef:18:ef:b1:e4:79:d0:98:9a:3b:da:
7f:45:9a:e8:ad:e2:03:54:7d:b3:ff:16:e6:19:c4:
85:d1:c3:38:44:95:e2:f0:bb:87:95:bf:ad:8e:31:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:94:CD:82:D6:27:43:90:E3:59:35:49:A6:70:5B:31:66:48:D3
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BE33BE16031B11F192FC7DBE1A3D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.144.0/22
202.155.149.0/24
202.155.151.0-202.155.155.255
Signature Algorithm: sha256WithRSAEncryption
ae:64:e0:bf:d8:da:46:35:1a:cd:6d:2e:77:70:48:69:c9:e5:
9f:4c:31:d8:0c:fe:ad:94:f6:9a:fe:28:22:2c:8a:b7:46:cf:
1b:ef:d9:05:79:9b:44:e6:f0:87:60:18:f1:ca:5c:d3:3a:8b:
25:75:f7:23:18:cc:3f:74:25:79:56:ad:9f:50:49:12:f1:16:
23:7e:3d:1d:70:47:d1:fc:0b:08:72:41:ce:74:99:ba:ff:67:
56:31:77:f8:0e:fd:02:73:c1:10:37:e1:c3:6a:0a:81:d0:6b:
27:f5:f1:67:47:3b:cc:ae:10:80:81:2c:43:55:18:be:c7:06:
46:fe:5c:18:24:55:88:0f:13:eb:d3:2e:30:08:dc:fd:58:0d:
0b:6e:9a:2f:26:1a:bc:a6:55:01:0d:7b:87:ac:51:1b:80:f1:
63:b5:cb:ac:f2:ab:5e:cc:e6:ae:0e:c6:db:6b:ec:df:12:55:
0a:2e:ac:31:a0:2c:f3:1d:d8:5d:20:4e:10:25:09:0e:d3:e2:
5c:e2:d7:16:19:70:03:5a:d0:c5:cc:3b:00:47:7f:8d:48:29:
58:f2:12:5c:97:d7:65:c0:ff:47:cb:39:16:24:f2:11:7c:6d:
ac:e4:89:36:49:1d:d2:20:80:58:8a:92:a1:4f:d8:71:45:bf:
b9:0a:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:18 2026 by rpki-client