
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/2FD3CFC6951011F1B505A4EF4F11F970.roa
File: 2FD3CFC6951011F1B505A4EF4F11F970.roa (raw, json)
Hash identifier: QbwmEW+T8gZqG7m2R4URJZs/daNpDxiJksaLTU+zfcc=
Subject key identifier: 0A:A6:AF:D2:2D:58:42:73:CB:51:07:C5:F3:E3:76:4D:5A:C5:35:F4
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0619
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/2FD3CFC6951011F1B505A4EF4F11F970.roa
Signing time: Mon 10 Aug 2026 23:06:58 +0000
ROA not before: Mon 10 Aug 2026 23:06:58 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 214432
IP address blocks: 202.155.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1561 (0x619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Aug 10 23:06:58 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a7a5992-7821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:68:65:34:8c:13:4e:d2:39:5c:17:31:99:
eb:7a:80:18:9d:1a:36:ec:85:d2:73:7e:bb:40:6e:
d0:40:c7:cf:50:6b:61:74:d8:0a:d8:fd:61:fc:fa:
ff:6c:72:bc:b1:cc:4d:f1:5f:2c:33:16:d2:68:50:
cc:44:b1:9d:e6:43:98:f9:62:f5:66:9e:1f:46:a9:
ee:45:87:56:f0:c1:a4:61:92:63:a7:21:85:2b:d7:
c6:62:57:94:23:f6:9f:82:24:08:4c:77:79:16:9d:
69:e8:7d:66:ee:58:2d:d7:93:7b:eb:83:c2:4d:a3:
6b:a4:d8:78:f1:7d:30:f0:50:16:3e:3f:c8:33:92:
84:a4:e2:f3:e6:11:e4:62:f3:95:6f:ae:f2:1b:2b:
81:1b:a3:1f:8d:91:57:5e:7f:ab:4b:4d:d6:7f:4a:
0e:04:26:2a:b8:44:cc:24:4c:e9:f2:7c:85:71:28:
91:4b:d6:29:a4:2e:15:df:35:93:69:ff:d2:f5:ca:
7a:7b:a5:38:30:70:83:1d:24:7c:56:d1:b3:dc:f6:
64:f2:26:9f:83:4b:18:df:34:96:f9:18:40:2b:b4:
9a:fd:b4:d0:37:14:12:f4:46:e7:c2:8c:c5:44:79:
7d:62:64:fe:59:27:f1:01:ba:ff:e4:1d:7d:7d:8b:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A6:AF:D2:2D:58:42:73:CB:51:07:C5:F3:E3:76:4D:5A:C5:35:F4
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/2FD3CFC6951011F1B505A4EF4F11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
202.155.149.0/24
Signature Algorithm: sha256WithRSAEncryption
79:86:61:b0:da:9a:60:2c:c5:85:fa:5e:68:0a:4b:bd:38:55:
c0:08:c0:eb:9a:22:b5:ce:2c:13:64:32:e0:a8:42:72:7c:83:
0f:bb:c4:e6:10:f1:85:d3:8a:76:ce:db:4b:a8:53:99:6f:73:
ac:d4:c8:b8:a4:a7:d7:69:50:63:6b:61:d9:01:7e:11:e6:2e:
de:73:22:c9:6b:4f:22:49:48:4e:4a:44:01:24:1d:a9:b9:33:
fd:a2:35:78:4f:91:bd:fb:7e:93:fe:80:20:4c:9c:7c:67:5d:
ce:02:65:81:c4:d8:e2:19:b4:80:4d:79:c9:96:f9:0f:4e:f3:
ec:66:f7:90:ef:38:e2:3a:d4:c0:f6:e8:6b:bf:39:0f:cc:24:
0e:8d:63:1e:52:1d:7f:aa:80:33:5a:85:e4:6d:7c:3e:ed:99:
24:7e:e5:ad:c8:1d:c8:52:b5:a1:25:1a:7b:24:d0:8b:d0:cd:
3e:61:e2:f6:00:67:2f:09:38:81:e4:c8:f9:45:ee:73:3a:57:
1e:aa:9a:8b:f4:26:a3:c0:28:70:88:10:c8:21:48:07:1b:b4:
91:df:e2:69:a1:30:c7:20:9b:87:2e:70:31:01:42:19:53:69:
1f:63:c2:2b:58:49:71:ef:8e:68:b5:ae:aa:56:68:5e:96:c4:
f3:11:d1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:06:06 2026 by rpki-client