
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/25A5300C885B11F09F3C8013C4F9AE02.roa
File: 25A5300C885B11F09F3C8013C4F9AE02.roa (raw, json)
Hash identifier: 9v60Ewocp3WplNq+y9yi1OKHE7ZmjsRqtopJxELxc6E=
Subject key identifier: EC:06:7F:46:43:7F:AF:E7:3E:53:BC:E0:59:84:B9:D9:3D:04:6A:AF
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0548
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/25A5300C885B11F09F3C8013C4F9AE02.roa
Signing time: Sun 01 Mar 2026 20:06:34 +0000
ROA not before: Wed 17 Dec 2025 02:44:11 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 401783
IP address blocks: 202.155.24.0/24 maxlen: 24
202.155.25.0/24 maxlen: 24
202.155.26.0/24 maxlen: 24
202.155.27.0/24 maxlen: 24
218.33.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1352 (0x548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Dec 17 02:44:11 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a49c4a-d91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:85:31:83:98:fc:cb:d4:21:ac:4b:17:2f:
21:83:4f:d9:2b:ea:13:65:0b:7c:6f:29:f2:b2:d6:
a6:59:3d:6d:b7:d4:04:bd:e6:16:d3:77:66:7a:2e:
56:b3:cf:8e:0e:75:2e:43:3e:bb:54:6b:ce:75:62:
d4:c2:7c:a4:07:a3:bf:0f:93:c8:df:bb:24:a0:60:
5e:01:67:62:48:0c:48:b0:8d:92:48:55:2f:7a:0b:
66:f0:f5:28:a1:54:31:da:6d:13:0c:27:17:b2:9f:
0a:4b:19:0e:14:69:78:a9:14:f2:cb:b2:07:c1:a6:
8c:f8:07:9e:b1:7d:67:29:8b:35:e9:36:8c:73:90:
23:52:e1:56:62:de:94:a5:e8:44:bc:91:fe:05:e9:
7d:90:14:3c:51:c4:07:d7:7c:e8:6a:be:81:8e:78:
a8:d6:3d:74:4d:06:59:fd:46:d4:0f:34:91:c4:af:
e9:e8:8b:6b:2e:a4:bc:c9:16:7d:9b:8b:ff:0c:92:
64:a9:af:48:f2:bc:b1:38:35:68:8a:98:74:27:88:
5e:44:2c:9c:9c:47:34:17:d9:09:8e:db:f5:b1:16:
c5:d6:79:66:62:37:bb:e6:54:2e:4f:f3:43:50:d1:
f9:99:27:09:04:0a:24:3b:0d:1f:6d:15:c7:4d:a0:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:06:7F:46:43:7F:AF:E7:3E:53:BC:E0:59:84:B9:D9:3D:04:6A:AF
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/25A5300C885B11F09F3C8013C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.155.24.0/22
218.33.96.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:81:67:78:ae:a7:d7:9d:5f:f1:40:f9:48:cd:83:9c:e9:ac:
60:0e:47:e9:b5:2e:e6:ff:ea:39:b4:94:20:69:1d:bd:40:94:
d4:05:6f:f4:05:6a:c1:ff:1d:26:77:4c:6a:bf:56:16:1b:37:
b5:95:79:f0:8b:60:81:9f:05:ab:80:61:6a:3e:37:f0:e3:b0:
0b:8e:1d:27:85:6e:14:61:83:1f:1e:e8:a4:15:b1:15:0d:96:
ea:e7:c6:5a:68:ec:1b:89:88:05:59:e4:70:a4:70:9b:69:95:
35:8c:bb:71:aa:e5:87:0b:36:f3:65:ff:b1:a5:74:c8:93:85:
8c:b8:58:04:f9:5a:1e:54:45:35:3a:2f:d1:d7:e0:a8:ae:58:
86:bc:af:2b:b5:f9:fe:01:15:f9:4a:91:93:52:5e:46:52:ff:
b5:fa:be:b1:66:86:cb:b7:f2:77:22:41:a6:a1:fb:9d:68:61:
02:b1:58:71:c8:45:fe:05:41:e7:f2:ca:8c:b2:5b:9c:ed:76:
90:5a:b8:e0:34:25:33:31:2b:a6:70:af:8f:e9:e5:90:07:be:
e3:b9:64:d9:a2:96:03:2f:c3:9b:ea:07:59:30:e8:93:48:78:
40:01:5e:1c:fa:04:db:bd:3c:77:ad:3e:da:69:8b:6b:95:2a:
a4:84:7c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:06:45 2026 by rpki-client