
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/4619B082F15C11F0A6B34B2B5F6F56BC.roa
File: 4619B082F15C11F0A6B34B2B5F6F56BC.roa (raw, json)
Hash identifier: BCkHo8MUaA30OfeXJIiJuxoGQhAqNP4XE2gAPor4DY8=
Subject key identifier: EB:0D:92:E3:9C:0F:4F:94:D6:55:7E:66:50:FC:60:A9:49:47:17:6D
Certificate issuer: /CN=A9192F5B/serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
Certificate serial: 4A
Authority key identifier: C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/4619B082F15C11F0A6B34B2B5F6F56BC.roa
Signing time: Sun 01 Mar 2026 06:12:49 +0000
ROA not before: Wed 14 Jan 2026 15:18:26 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 154327
IP address blocks: 138.252.112.0/23 maxlen: 23
138.252.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl
rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192F5B, serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
Validity
Not Before: Jan 14 15:18:26 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a3d8e1-605d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:e1:4e:b3:e0:a9:30:c1:37:2c:45:34:74:
a1:dd:e3:ff:98:c3:bc:7e:47:ce:3c:a7:74:98:1a:
c1:4c:b9:db:9e:19:cf:e0:02:ec:61:71:ac:91:38:
43:df:15:5e:4a:96:34:a5:d8:c5:05:52:af:2e:3d:
6b:5e:97:65:16:9f:c1:cf:48:1e:97:02:57:60:f9:
37:1c:50:75:99:61:51:85:39:4c:8f:80:cf:d6:b9:
17:90:1d:33:37:83:6f:01:a9:62:61:f7:4e:35:1f:
43:aa:64:4a:1f:83:49:79:e1:73:78:47:ab:8f:8d:
5c:4e:d0:6a:74:2a:39:d7:3c:35:23:a9:0a:74:91:
96:b9:b5:0a:17:66:2c:67:66:b0:b0:7c:3b:6d:50:
be:c7:c8:d7:03:19:51:c7:73:eb:ef:d5:47:5e:5e:
40:f9:81:5d:74:84:02:3b:ac:c8:e7:9c:0b:92:c5:
a9:93:7d:01:12:ba:4c:54:12:f7:7e:20:fa:36:7a:
68:be:0a:8c:63:22:b1:be:be:0b:b0:5c:69:f7:40:
1d:89:67:3c:85:f8:f8:66:5c:3b:5d:ec:72:b8:43:
c4:f3:6b:4c:b8:00:f8:ee:c3:ae:85:af:05:04:29:
08:e0:16:3f:e6:79:ff:fd:54:51:13:41:62:6d:20:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0D:92:E3:9C:0F:4F:94:D6:55:7E:66:50:FC:60:A9:49:47:17:6D
X509v3 Authority Key Identifier:
keyid:C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/4619B082F15C11F0A6B34B2B5F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.112.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:40:ad:84:bb:a2:4e:dd:be:d8:d6:4c:b5:a1:29:97:8c:f5:
db:b3:7c:c2:67:32:40:7c:11:ca:f7:6c:d1:23:0f:0d:7c:85:
7b:cf:10:b4:b6:64:7d:39:70:89:80:63:fc:92:1d:8c:fe:85:
22:4a:ba:af:f7:61:64:50:97:ae:a3:52:ee:02:27:27:45:42:
af:49:37:91:99:f9:88:37:ea:07:c1:fc:5a:85:d9:80:8c:46:
97:41:cb:c7:10:23:f7:d7:2d:6b:9b:4a:78:f6:7c:7b:1c:a2:
0c:a7:42:b5:b7:54:f0:f4:e4:99:08:f5:62:0f:17:2b:ea:e3:
3a:df:f5:fe:b6:f4:e9:ff:70:f3:cf:66:f4:8a:e6:75:f8:cd:
e9:7e:2d:0a:89:d8:7c:71:91:32:36:64:10:7d:e3:86:57:a0:
ff:e3:e0:88:1a:64:7e:7d:f9:26:5f:d8:9c:ef:7c:0c:08:1b:
96:fe:b1:51:4b:f6:63:4e:78:76:fd:af:47:00:2d:56:fe:aa:
73:86:f7:cd:76:46:41:ab:ff:d6:dd:52:08:ab:62:db:f3:8e:
9c:3f:4b:31:aa:dd:3e:77:93:9d:76:e0:bb:c4:dc:f3:26:8c:
16:d8:26:20:40:6e:5c:6b:bf:d1:c4:21:1c:15:bf:9a:cf:42:
9e:25:a5:87
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MkY1QjExMC8GA1UEBRMoQzJENkM3OUE2NzdDOTdFQzcwMDYzMTNCRTkxNjdFMERF
NjZDQTQ1MjAeFw0yNjAxMTQxNTE4MjZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkOGUxLTYwNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDmOOFOs+CpMME3LEU0dKHd4/+Yw7x+R848p3SYGsFMudueGc/gAuxhcayROEPf
FV5KljSl2MUFUq8uPWtel2UWn8HPSB6XAldg+TccUHWZYVGFOUyPgM/WuReQHTM3
g28BqWJh9041H0OqZEofg0l54XN4R6uPjVxO0Gp0KjnXPDUjqQp0kZa5tQoXZixn
ZrCwfDttUL7HyNcDGVHHc+vv1UdeXkD5gV10hAI7rMjnnAuSxamTfQESukxUEvd+
IPo2emi+CoxjIrG+vguwXGn3QB2JZzyF+PhmXDtd7HK4Q8Tza0y4APjuw66FrwUE
KQjgFj/mef/9VFETQWJtIJKxAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU6w2S45wP
T5TWVX5mUPxgqUlHF20wHwYDVR0jBBgwFoAUwtbHmmd8l+xwBjE76RZ+DeZspFIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyRjVCL0NEQUJGMTgyQjRC
MTExRjBBREMyQjExRkM0RjlBRTAyL3d0YkhtbWQ4bC14d0JqRTc2UlotRGVac3BG
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvd3RiSG1tZDhsLXh3QmpFNzZSWi1EZVpzcEZJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkY1Qi9DREFCRjE4MkI0QjExMUYwQURDMkIxMUZDNEY5QUUwMi80NjE5QjA4MkYx
NUMxMUYwQTZCMzRCMkI1RjZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGK/HAwDQYJKoZIhvcNAQELBQADggEBALhArYS7ok7dvtjWTLWhKZeM
9duzfMJnMkB8Ecr3bNEjDw18hXvPELS2ZH05cImAY/ySHYz+hSJKuq/3YWRQl66j
Uu4CJydFQq9JN5GZ+Yg36gfB/FqF2YCMRpdBy8cQI/fXLWubSnj2fHscogynQrW3
VPD05JkI9WIPFyvq4zrf9f629On/cPPPZvSK5nX4zel+LQqJ2HxxkTI2ZBB944ZX
oP/j4IgaZH59+SZf2JzvfAwIG5b+sVFL9mNOeHb9r0cALVb+qnOG9812RkGr/9bd
UgirYtvzjpw/SzGq3T53k5124LvE3PMmjBbYJiBAblxrv9HEIRwVv5rPQp4lpYc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:08 2026 by rpki-client