
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BEF9E93E3E6A11EDB58A2B41C4F9AE02.roa
File: BEF9E93E3E6A11EDB58A2B41C4F9AE02.roa (raw, json)
Hash identifier: +UjcPL4LTKH91nNYVP8bv6jJTyOAQ7EI0wbAQj7CLp8=
Subject key identifier: 31:B0:FE:C6:8B:2C:CD:50:D9:B6:2F:29:C4:EB:44:8A:E2:C5:21:FA
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 064D
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BEF9E93E3E6A11EDB58A2B41C4F9AE02.roa
Signing time: Wed 09 Sep 2026 01:51:48 +0000
ROA not before: Wed 09 Sep 2026 01:51:48 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 14618
IP address blocks: 218.33.0.0/18 maxlen: 24
218.33.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1613 (0x64d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Sep 9 01:51:48 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa0bbb3-94cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:04:44:05:51:e4:2f:23:1f:c2:62:03:ef:
74:6a:a4:8c:8b:e4:17:55:48:71:32:0a:d2:e9:37:
3e:11:6c:ca:76:a3:40:14:03:55:cd:25:e4:90:4e:
d9:57:21:05:44:f7:b8:cf:58:95:12:f1:15:8e:b7:
73:59:13:fc:7f:8e:31:8f:1f:39:b6:49:3f:b1:12:
ce:18:c1:cb:72:1f:aa:86:7b:fe:26:8b:4f:c3:8c:
9e:96:88:90:1a:47:3d:e8:ea:91:33:0a:51:fa:e2:
53:85:20:3a:04:c7:60:af:00:d6:67:99:41:a1:3b:
aa:f8:0a:6c:81:08:b2:ec:54:e2:02:5a:bd:e7:15:
df:54:83:bb:09:7f:38:97:f4:9d:af:4b:41:7a:9e:
17:52:b9:59:c3:3f:60:04:f4:44:3c:61:e9:1f:a0:
8f:e4:9c:17:28:0b:94:33:0e:18:67:66:52:dc:c3:
29:32:d7:ab:a0:4c:56:ea:f5:62:09:4a:01:21:e0:
c7:b1:d6:06:d6:dd:a0:4f:25:ce:00:29:87:fa:7d:
f1:be:81:75:53:b3:bf:88:bd:69:40:81:cd:74:f1:
47:0f:f6:0d:ef:fb:13:32:9e:34:0b:9e:ef:31:fb:
a0:f3:fa:cf:8a:13:43:c1:24:c1:ab:15:d9:0a:27:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B0:FE:C6:8B:2C:CD:50:D9:B6:2F:29:C4:EB:44:8A:E2:C5:21:FA
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BEF9E93E3E6A11EDB58A2B41C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
218.33.0.0/18
218.33.104.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:4c:ef:57:98:13:dc:e4:8a:ac:f4:07:8c:fa:8f:66:77:93:
8f:b8:8b:8a:fa:1b:5b:be:bd:e9:ca:1f:dd:4f:50:fa:19:f7:
af:76:9d:68:8b:a4:be:2e:78:f1:b7:37:5c:22:c2:08:76:75:
4c:4c:a7:b6:2b:81:dd:52:da:a8:42:d8:fb:9f:e5:34:a3:87:
61:ff:1c:00:6c:0e:71:c4:8f:51:00:8d:80:fd:3e:c4:b0:35:
08:1f:bf:09:34:f3:af:43:2f:62:29:f3:03:14:ed:c8:9e:db:
0a:95:b6:ea:6a:d9:6d:c0:1f:06:fd:16:5a:80:3a:61:56:cd:
96:80:e7:66:49:eb:4a:d4:7a:11:d4:bb:22:f0:1e:3e:cf:2d:
13:ba:bf:64:33:13:19:92:8c:ed:79:5a:2c:14:89:3d:b0:1c:
c4:74:3d:da:69:66:b7:12:be:44:b7:af:fb:5f:ac:92:9a:7a:
bf:90:a0:73:6f:15:db:77:2d:0b:96:b8:fb:dc:f5:cb:78:3a:
8b:a9:54:ff:d6:38:14:e6:20:0b:2f:12:16:25:c6:8a:83:b1:
32:31:64:3d:82:19:17:ce:5a:40:14:e4:70:60:6c:ba:11:eb:
4f:6a:9d:ed:67:bb:52:ed:9c:77:4d:41:69:29:6f:4f:4a:0b:
c8:7b:07:70
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjYwOTA5MDE1MTQ4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwYmJiMy05NGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqzMERAVR5C8jH8JiA+90aqSMi+QXVUhxMgrS6Tc+EWzKdqNAFANVzSXkkE7Z
VyEFRPe4z1iVEvEVjrdzWRP8f44xjx85tkk/sRLOGMHLch+qhnv+JotPw4yeloiQ
Gkc96OqRMwpR+uJThSA6BMdgrwDWZ5lBoTuq+ApsgQiy7FTiAlq95xXfVIO7CX84
l/Sdr0tBep4XUrlZwz9gBPREPGHpH6CP5JwXKAuUMw4YZ2ZS3MMpMteroExW6vVi
CUoBIeDHsdYG1t2gTyXOACmH+n3xvoF1U7O/iL1pQIHNdPFHD/YN7/sTMp40C57v
Mfug8/rPihNDwSTBqxXZCieJEQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDGw/saL
LM1Q2bYvKcTrRIrixSH6MB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvQkVGOUU5M0Uz
RTZBMTFFREI1OEEyQjQxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQG2iEAAwQC2iFoMA0GCSqGSIb3DQEBCwUAA4IBAQCaTO9XmBPc5Iqs
9AeM+o9md5OPuIuK+htbvr3pyh/dT1D6Gfevdp1oi6S+LnjxtzdcIsIIdnVMTKe2
K4HdUtqoQtj7n+U0o4dh/xwAbA5xxI9RAI2A/T7EsDUIH78JNPOvQy9iKfMDFO3I
ntsKlbbqatltwB8G/RZagDphVs2WgOdmSetK1HoR1Lsi8B4+zy0Tur9kMxMZkozt
eVosFIk9sBzEdD3aaWa3Er5Et6/7X6ySmnq/kKBzbxXbdy0Llrj73PXLeDqLqVT/
1jgU5iALLxIWJcaKg7EyMWQ9ghkXzlpAFORwYGy6EetPap3tZ7tS7Zx3TUFpKW9P
SgvIewdw
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:31:47 2026 by rpki-client