
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C68EA896D18011EFA738B84AC4F9AE02.roa
File: C68EA896D18011EFA738B84AC4F9AE02.roa (raw, json)
Hash identifier: 4+7sus0OzYlXI0lFmBMzYULeNWaG++0mOSDHK/VO9vs=
Subject key identifier: AF:88:BB:A1:42:E5:0B:90:10:B5:38:2F:D1:06:25:38:E3:BE:8B:DE
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0660
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C68EA896D18011EFA738B84AC4F9AE02.roa
Signing time: Wed 09 Sep 2026 01:52:25 +0000
ROA not before: Wed 09 Sep 2026 01:52:25 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 23679
IP address blocks: 202.155.138.0/24 maxlen: 24
202.155.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1632 (0x660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Sep 9 01:52:25 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa0bbd9-0f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:79:12:0b:7a:58:38:29:de:31:fb:02:d7:
49:7c:81:9c:f8:59:f9:53:ad:43:8f:3c:65:32:53:
51:0d:ba:69:a2:95:f9:48:e0:f3:ca:5d:d4:61:99:
29:d0:23:3c:a4:4a:cc:29:11:f0:5d:39:1d:a1:71:
4b:0d:54:b5:dc:b1:8a:10:f2:62:14:c6:dc:21:66:
7d:ff:9f:ee:0d:f1:5f:b1:66:5a:b2:d7:85:f3:d1:
18:7c:bd:af:67:5a:1b:53:9c:3e:d0:85:d9:53:0d:
42:5a:83:5e:6e:c6:30:21:37:f9:87:02:e6:01:9f:
1a:3e:e9:85:c0:13:e1:a8:57:a8:55:50:ab:19:22:
a2:5d:d9:8c:e5:cd:de:a6:00:b8:b8:7b:21:f6:f7:
b5:de:e8:d5:0e:c3:f1:67:29:11:ec:58:00:98:c1:
8c:d6:1a:a5:e6:77:d6:92:3c:f3:5c:be:2b:50:4a:
4f:0f:dd:49:f8:e8:ae:81:f3:ca:16:54:31:8d:e7:
4b:ac:94:31:1e:a5:8b:ec:34:1e:07:95:7e:ea:54:
a3:d0:e0:75:a5:46:89:4e:ec:8b:2c:d8:85:84:e7:
43:77:79:81:55:9b:67:63:1b:fe:8d:49:a0:ff:86:
77:d4:0d:e9:d9:c0:1a:f0:64:b2:09:ea:7e:c6:27:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:88:BB:A1:42:E5:0B:90:10:B5:38:2F:D1:06:25:38:E3:BE:8B:DE
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C68EA896D18011EFA738B84AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.155.138.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:71:87:ce:63:b6:e3:76:c5:c9:21:59:17:9f:33:00:a3:d0:
79:e9:76:e8:09:70:ce:ed:28:2d:25:f9:fa:e8:dd:22:09:1c:
49:70:cc:30:a1:f8:12:fb:a4:cd:04:62:b4:dd:aa:49:48:4e:
1a:ce:53:96:02:e4:c3:c5:c9:2f:80:1e:0b:e1:f9:14:de:c5:
f4:13:ca:4d:95:bc:da:02:e8:9e:04:3b:b1:38:f4:dd:2e:d3:
00:c9:ab:b9:bb:a5:b1:78:92:88:57:e0:1c:b1:78:f2:df:5a:
6d:22:dd:be:c5:ad:7f:ee:9f:25:53:98:e4:b8:3c:7b:36:ca:
fc:00:72:4f:2d:cb:45:27:d0:f5:3a:56:8a:f2:02:99:31:df:
4d:41:b3:a5:42:00:0f:60:bd:c4:57:ed:2e:75:a6:09:9c:71:
cc:99:cb:1d:c4:91:e3:d9:6b:29:45:d0:66:41:26:c0:b5:51:
b6:a8:a0:55:84:ec:28:b2:90:a6:8e:38:da:31:bd:e2:25:86:
24:c3:32:f0:a2:93:e7:ee:77:a0:4c:c3:cb:cb:df:49:68:fc:
c5:62:82:6b:4a:ad:b8:80:d2:cf:61:5d:69:44:18:c4:3d:c9:
e1:fb:4d:c9:1d:41:77:8b:62:63:79:ad:2c:6a:c8:31:cf:98:
c2:70:58:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:11:43 2026 by rpki-client