
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/ADD4AC582C9F11F1BC2F15C3C3833773.roa
File: ADD4AC582C9F11F1BC2F15C3C3833773.roa (raw, json)
Hash identifier: APjgNYOczoaqqZv7RK/42rF9QsxyHD/c3wOYaEp15OI=
Subject key identifier: 9D:D4:15:26:0D:7E:EC:09:11:3C:E9:EA:8E:21:2F:56:4C:33:29:86
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 066B
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/ADD4AC582C9F11F1BC2F15C3C3833773.roa
Signing time: Wed 09 Sep 2026 01:52:46 +0000
ROA not before: Wed 09 Sep 2026 01:52:46 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 46559
IP address blocks: 202.155.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 01:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1643 (0x66b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Sep 9 01:52:46 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa0bbed-d1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:af:0b:d3:bb:51:5d:2d:fb:a1:88:35:8d:
29:5f:db:72:7a:43:a2:3c:cb:9c:7f:1c:41:50:7f:
68:c4:aa:ab:4f:4d:c9:93:d2:1f:11:b3:c0:6c:4b:
ee:4c:05:14:f1:38:b0:f9:89:07:f3:a1:dd:c2:86:
1a:94:f2:c7:ac:b1:98:c8:ee:a6:52:e0:4c:80:e8:
b2:a4:98:73:f5:28:b8:df:54:30:af:c9:53:d8:7e:
41:39:2b:e9:52:30:06:60:37:03:12:3d:6b:2c:1a:
94:9b:48:f1:a2:8d:f6:a9:3e:ec:c8:c6:47:60:e0:
eb:fa:c4:30:0a:a3:9e:af:fa:02:50:bd:a7:cb:56:
d2:52:32:e7:9e:4a:a7:92:41:24:2e:a1:4c:9d:51:
89:86:a4:32:46:48:b5:93:d3:ec:7a:07:92:ac:38:
cd:de:3e:5a:d6:c7:0c:39:7d:2e:bc:03:ae:81:a9:
31:f7:dc:64:fd:20:e4:09:b3:d9:0b:9c:13:18:1f:
6d:d0:d5:2f:1d:99:85:c7:fc:ec:cd:77:d6:7e:fd:
45:28:dc:ac:ed:fb:a5:19:3c:02:87:5b:0e:0d:12:
57:c8:bc:a0:65:0a:97:ab:79:50:4c:08:ed:53:90:
08:1e:8a:d2:07:5a:b6:f9:eb:6d:1c:62:51:37:46:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D4:15:26:0D:7E:EC:09:11:3C:E9:EA:8E:21:2F:56:4C:33:29:86
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/ADD4AC582C9F11F1BC2F15C3C3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
202.155.138.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:50:3b:21:72:3b:53:5e:ac:22:48:2e:e8:6f:06:d6:99:d0:
26:09:bc:2f:d7:9d:a6:a4:eb:a9:df:3a:e0:43:1a:0f:15:86:
91:46:52:a4:25:12:fd:39:57:35:77:57:8b:d0:cf:1f:ca:41:
90:f7:a1:1d:41:fb:2e:9f:9d:c2:f1:79:3d:72:3d:70:32:3b:
27:e8:9a:15:f5:7a:bb:51:3e:f5:68:38:a3:26:df:7c:20:18:
12:2d:01:3b:6c:69:c6:a2:6a:68:83:cb:9a:67:27:8b:a6:13:
46:8b:de:1b:c1:82:5a:2b:42:81:f5:e0:61:2d:7b:5d:92:9e:
fe:d7:3d:93:a2:96:db:69:6f:2f:04:9b:86:e8:53:6a:84:41:
42:02:ed:24:ae:11:61:84:14:31:25:e1:64:c3:2c:b1:8f:4a:
2a:07:76:88:ca:3b:5d:48:a4:7a:03:8a:6f:80:80:b2:91:34:
8b:c1:f0:93:f5:7b:d2:8e:1a:c2:33:1d:07:93:f7:c8:cd:d3:
d9:86:50:c8:1d:ea:9b:f9:b8:a7:41:99:eb:cd:e8:9e:23:6d:
c8:2f:3e:84:c3:f4:9f:d6:bd:85:ff:e5:fb:3a:d5:d2:7f:d9:
71:67:b6:a5:a8:c4:ff:eb:47:81:68:44:56:eb:b9:2a:1f:16:
21:89:58:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 01:52:05 2026 by rpki-client