
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BF1C45C8031B11F192FC7DBE1A3D8C67.roa
File: BF1C45C8031B11F192FC7DBE1A3D8C67.roa (raw, json)
Hash identifier: C2xcXZ8/rFnuXxhYT8hovC6BvlnbvKLAj8Zgjdl5amc=
Subject key identifier: 75:CF:BC:B8:26:34:F0:E4:E4:E7:A8:25:86:F5:5A:8E:82:97:BB:B8
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 04D5
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BF1C45C8031B11F192FC7DBE1A3D8C67.roa
Signing time: Fri 06 Feb 2026 05:21:53 +0000
ROA not before: Fri 06 Feb 2026 05:21:53 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 47741
IP address blocks: 202.155.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1237 (0x4d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Feb 6 05:21:53 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69857a71-9e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:30:0d:87:40:99:64:f3:5f:3e:18:01:0b:
cb:3e:b8:31:18:39:e4:5f:24:c8:87:63:4e:52:25:
9b:c2:ec:81:b5:46:5d:e1:1e:ed:68:87:ec:ca:9b:
67:1a:2c:cd:88:33:31:4a:66:f9:67:9e:07:ee:ae:
76:78:f8:b2:11:27:f7:af:67:39:f4:1e:d2:61:de:
73:c0:be:9e:8b:80:33:3b:ba:e6:2a:58:73:c3:9f:
58:d9:13:1d:df:c3:60:d7:8e:23:ae:d2:06:58:9c:
bd:22:a4:00:bd:3e:d9:0f:80:3c:bb:ba:45:47:3c:
c0:ff:6f:d3:da:83:8c:52:88:e2:da:de:60:79:e7:
f8:ef:1d:53:27:0f:c7:03:7b:b8:14:b3:2b:93:7a:
19:3d:6f:f9:08:1e:f4:5c:b9:4f:05:d0:f6:10:e5:
f0:83:98:14:0e:89:fd:98:3d:fd:91:47:67:93:f1:
ae:3c:2d:3a:c2:60:a0:07:9d:0b:c7:3a:20:c9:71:
d5:7f:72:2a:31:ad:b3:2a:13:8e:d7:76:4e:93:1e:
aa:a7:27:09:ed:47:24:01:df:33:3d:4f:01:93:df:
a9:ad:c7:f6:4a:45:6c:6d:2d:2c:df:68:43:ed:bd:
94:29:7b:38:ba:09:d9:a7:a4:11:98:23:f7:01:ba:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CF:BC:B8:26:34:F0:E4:E4:E7:A8:25:86:F5:5A:8E:82:97:BB:B8
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BF1C45C8031B11F192FC7DBE1A3D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.152.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:2c:eb:c6:57:36:fb:73:67:d7:31:47:a4:fa:88:85:de:73:
3f:de:36:1e:2e:5c:50:3f:cb:fe:db:99:fc:43:d1:eb:56:dd:
45:74:8c:ce:2a:a6:0f:42:ca:0c:3c:68:e5:60:c8:0a:5a:f2:
8d:30:73:31:24:5e:fa:8c:35:05:d1:51:78:24:82:33:2e:12:
15:7b:75:f3:8c:08:18:ed:f3:e9:ec:b9:72:86:90:d3:3f:7c:
67:cb:dd:15:e3:65:c2:f9:0a:9a:58:76:9c:08:3d:64:1f:51:
e4:ac:ec:c2:6c:7e:c4:d2:92:eb:39:a0:72:10:a6:05:a1:c1:
6f:48:63:82:c7:2c:59:38:84:e8:ec:7c:57:de:91:7a:8e:53:
f1:2f:5a:b4:c2:4d:7b:5b:52:45:d9:91:f4:6f:98:2b:cb:52:
d1:43:3a:fa:af:04:63:c2:b7:0b:fc:9e:92:5f:66:43:8c:21:
80:29:cc:22:5c:a6:17:6e:af:08:86:17:59:fd:32:80:b4:02:
60:d8:ae:54:cd:ae:4b:d1:6c:a6:05:a5:91:ad:b1:44:6d:6d:
71:ef:ba:ab:33:d9:b2:3c:9b:9a:df:85:26:32:c2:0f:9c:97:
8e:4f:fa:4d:e2:17:6a:50:14:e8:b6:cd:7e:69:4f:f8:00:44:
9e:cc:20:af
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjYwMjA2MDUyMTUzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTg1N2E3MS05ZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq2YwDYdAmWTzXz4YAQvLPrgxGDnkXyTIh2NOUiWbwuyBtUZd4R7taIfsyptn
GizNiDMxSmb5Z54H7q52ePiyESf3r2c59B7SYd5zwL6ei4AzO7rmKlhzw59Y2RMd
38Ng144jrtIGWJy9IqQAvT7ZD4A8u7pFRzzA/2/T2oOMUoji2t5geef47x1TJw/H
A3u4FLMrk3oZPW/5CB70XLlPBdD2EOXwg5gUDon9mD39kUdnk/GuPC06wmCgB50L
xzogyXHVf3IqMa2zKhOO13ZOkx6qpycJ7UckAd8zPU8Bk9+prcf2SkVsbS0s32hD
7b2UKXs4ugnZp6QRmCP3Abrv6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHXPvLgm
NPDk5OeoJYb1Wo6Cl7u4MB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvQkYxQzQ1Qzgw
MzFCMTFGMTkyRkM3REJFMUEzRDhDNjcucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALKm5gwDQYJKoZIhvcNAQELBQADggEBANAs68ZXNvtzZ9cx
R6T6iIXecz/eNh4uXFA/y/7bmfxD0etW3UV0jM4qpg9Cygw8aOVgyApa8o0wczEk
XvqMNQXRUXgkgjMuEhV7dfOMCBjt8+nsuXKGkNM/fGfL3RXjZcL5CppYdpwIPWQf
UeSs7MJsfsTSkus5oHIQpgWhwW9IY4LHLFk4hOjsfFfekXqOU/EvWrTCTXtbUkXZ
kfRvmCvLUtFDOvqvBGPCtwv8npJfZkOMIYApzCJcphdurwiGF1n9MoC0AmDYrlTN
rkvRbKYFpZGtsURtbXHvuqsz2bI8m5rfhSYywg+cl45P+k3iF2pQFOi2zX5pT/gA
RJ7MIK8=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:38 2026 by rpki-client