
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/B0F43CC6B38411F08BDD147BC4F9AE02.roa
File: B0F43CC6B38411F08BDD147BC4F9AE02.roa (raw, json)
Hash identifier: mB+SQw9OrxfEJyOsPymAFsW1vm+SsJO0LDyu3BQmkQA=
Subject key identifier: 8F:EE:63:CC:BA:75:42:A7:25:2B:5D:B8:9C:B1:8C:02:1E:04:C8:03
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 044D
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/B0F43CC6B38411F08BDD147BC4F9AE02.roa
Signing time: Mon 27 Oct 2025 22:31:33 +0000
ROA not before: Mon 27 Oct 2025 22:31:33 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 396356
IP address blocks: 202.155.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 01:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1101 (0x44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Oct 27 22:31:33 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68fff2c5-ed7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:48:96:e1:65:f3:6e:f5:cd:4c:c4:de:94:
0f:bb:cc:22:87:a0:53:26:99:8f:6f:af:c1:d4:0e:
de:9d:d8:06:49:f7:3e:75:e0:57:b0:e9:f3:73:4b:
b9:fa:16:ce:99:45:9a:3d:39:9d:30:30:9e:ec:b6:
7b:d8:55:e8:00:50:be:75:c2:80:0b:0e:2e:b7:d3:
04:60:a0:7d:e2:87:03:14:cd:66:52:76:d9:3f:43:
d3:d1:80:33:61:ce:eb:9b:f0:c7:5d:e4:73:8f:e2:
7f:ba:6e:00:ab:58:80:4b:b7:8f:c3:d5:18:e8:84:
37:e4:56:fe:9f:2d:ec:6b:d9:5a:0b:ed:8a:d7:dc:
0b:d8:28:0f:a5:b9:26:33:88:3f:d7:23:34:7b:c7:
fa:80:40:ee:7b:ee:f6:42:48:ff:70:94:38:cb:5a:
8f:92:9b:82:c5:c8:5b:01:55:92:a7:85:cf:63:41:
ec:23:26:92:c0:8c:9f:5a:35:03:ea:18:8c:f2:62:
ab:f4:00:86:8d:b6:02:c2:35:ac:7f:b9:ae:77:1e:
5e:2a:dc:2b:5b:a7:1a:7d:63:48:95:58:ee:a7:da:
0a:84:3d:62:07:90:36:45:1a:f5:33:61:b0:f8:d8:
bc:2f:6f:71:17:9d:c2:23:07:b8:fb:0f:90:2c:76:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EE:63:CC:BA:75:42:A7:25:2B:5D:B8:9C:B1:8C:02:1E:04:C8:03
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/B0F43CC6B38411F08BDD147BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.9.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:90:e4:a3:7a:cb:56:f4:43:34:c7:31:b3:87:04:ec:c3:e8:
e4:bd:60:3c:e7:de:8f:2c:98:b6:f3:18:2e:6e:b5:bf:e5:0f:
fb:55:cd:16:18:83:bd:ef:21:37:10:7e:fc:a0:6a:e8:f2:f7:
b4:3d:ed:7e:ff:24:49:1f:1d:3c:4e:1d:41:4f:cf:0d:56:90:
43:34:7e:6a:93:59:bf:58:ca:d1:81:ed:8c:42:de:17:f8:34:
9b:24:62:2f:6f:ca:ec:bb:59:a8:09:23:4f:d2:95:11:99:b7:
bf:8f:c5:bf:f3:db:1e:71:1d:6e:95:2c:f4:f5:b9:75:32:a0:
93:ee:0e:5d:3f:67:2c:1b:4c:9b:39:49:0e:3f:3f:41:2b:90:
bc:1c:06:2e:cd:8c:af:ce:f0:84:b3:fb:06:a0:ac:04:ae:3e:
a9:71:21:00:cd:73:48:8e:59:f7:4e:82:fa:96:ba:22:fd:fc:
19:3f:0d:52:ea:2e:9b:1b:ba:e1:f3:65:f6:12:80:9d:84:c5:
74:02:1b:02:ea:63:9c:12:d0:a0:c5:8f:6f:7a:93:f4:88:bd:
bb:6c:42:f5:d0:17:de:1f:00:b7:4e:2c:e7:5c:fe:d7:ce:e2:
17:6f:94:e5:32:cd:b6:b9:89:b5:36:43:77:f9:07:9e:ee:36:
34:0f:d3:77
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjUxMDI3MjIzMTMzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGZmZjJjNS1lZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApVRIluFl8271zUzE3pQPu8wih6BTJpmPb6/B1A7endgGSfc+deBXsOnzc0u5
+hbOmUWaPTmdMDCe7LZ72FXoAFC+dcKACw4ut9MEYKB94ocDFM1mUnbZP0PT0YAz
Yc7rm/DHXeRzj+J/um4Aq1iAS7ePw9UY6IQ35Fb+ny3sa9laC+2K19wL2CgPpbkm
M4g/1yM0e8f6gEDue+72Qkj/cJQ4y1qPkpuCxchbAVWSp4XPY0HsIyaSwIyfWjUD
6hiM8mKr9ACGjbYCwjWsf7mudx5eKtwrW6cafWNIlVjup9oKhD1iB5A2RRr1M2Gw
+Ni8L29xF53CIwe4+w+QLHYHpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI/uY8y6
dUKnJStduJyxjAIeBMgDMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvQjBGNDNDQzZC
Mzg0MTFGMDhCREQxNDdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKmwkwDQYJKoZIhvcNAQELBQADggEBAK6Q5KN6y1b0QzTH
MbOHBOzD6OS9YDzn3o8smLbzGC5utb/lD/tVzRYYg73vITcQfvygaujy97Q97X7/
JEkfHTxOHUFPzw1WkEM0fmqTWb9YytGB7YxC3hf4NJskYi9vyuy7WagJI0/SlRGZ
t7+Pxb/z2x5xHW6VLPT1uXUyoJPuDl0/ZywbTJs5SQ4/P0ErkLwcBi7NjK/O8ISz
+wagrASuPqlxIQDNc0iOWfdOgvqWuiL9/Bk/DVLqLpsbuuHzZfYSgJ2ExXQCGwLq
Y5wS0KDFj296k/SIvbtsQvXQF94fALdOLOdc/tfO4hdvlOUyzba5ibU2Q3f5B57u
NjQP03c=
-----END CERTIFICATE-----
Generated at Wed Oct 29 14:54:56 2025 by rpki-client