
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BD5D1956031B11F192FC7DBE1A3D8C67.roa
File: BD5D1956031B11F192FC7DBE1A3D8C67.roa (raw, json)
Hash identifier: 2a4dhAiYry9DZmEhVvqvrlAr7R+cBwAZFIrA9EZzeao=
Subject key identifier: 65:D8:CA:EA:AD:45:66:90:36:5F:C4:C9:B7:7B:08:84:3B:67:ED:F9
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 054F
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BD5D1956031B11F192FC7DBE1A3D8C67.roa
Signing time: Sun 01 Mar 2026 20:06:40 +0000
ROA not before: Fri 06 Feb 2026 05:21:50 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 215304
IP address blocks: 202.155.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1359 (0x54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Feb 6 05:21:50 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a49c50-6d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5d:63:c2:3e:0b:a3:7a:52:c4:64:cc:aa:99:
dc:fb:06:83:c2:0d:06:bb:bb:ce:99:c0:3a:e1:df:
c6:f6:88:01:da:d8:f3:bd:5d:bd:9e:34:b7:f6:2d:
e7:99:95:64:23:2d:4f:dd:4a:3c:d4:b1:c0:32:80:
01:f1:3f:f5:c0:e9:7b:3d:7c:ba:69:c3:e1:6d:33:
11:9a:dc:99:4a:f8:f6:42:0c:cc:59:b9:66:9f:03:
47:e0:be:0c:b0:2c:01:3b:7a:3b:46:8f:d7:69:01:
d6:63:7a:41:3f:e3:ba:da:a5:ef:65:12:87:cc:06:
c2:74:2c:73:7e:f6:e3:df:26:99:d8:30:8e:a6:8a:
ce:07:78:5a:11:c3:88:18:f6:23:b6:15:5d:c2:c8:
99:d4:40:c5:b1:b5:7e:c2:0f:b5:6c:d8:a6:6e:08:
ad:99:17:9a:4f:7d:26:f6:13:09:63:9a:30:66:1a:
a3:46:51:01:ef:52:19:2d:d8:a0:dd:a7:af:ba:5c:
a2:a3:ce:d3:af:51:f6:5b:36:6d:98:61:33:8d:a4:
87:57:4a:d0:04:ca:84:b5:e1:e5:36:b2:6a:5b:f9:
08:ea:f5:ec:59:c4:bc:e6:97:ec:52:94:e0:8f:df:
fd:25:65:94:8d:c5:c9:da:17:4f:1d:0d:94:03:2f:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D8:CA:EA:AD:45:66:90:36:5F:C4:C9:B7:7B:08:84:3B:67:ED:F9
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BD5D1956031B11F192FC7DBE1A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
202.155.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:b2:84:f7:3f:0a:7a:94:72:5d:06:fe:00:5b:fb:5a:e4:4c:
6b:4a:ba:e6:71:69:9e:1f:27:3c:5d:bb:7d:10:a5:83:29:57:
6a:76:21:25:52:64:0d:ea:65:99:b2:95:06:31:c9:ee:17:f2:
db:ec:cb:89:73:1e:ee:a1:62:dc:91:d8:44:10:fe:14:2a:7d:
6f:fb:10:0b:a8:ff:90:e7:57:b6:51:e1:7c:ea:14:3f:3d:b5:
61:12:52:5d:e6:bf:bf:f8:f3:e8:d5:a4:fe:71:5b:d3:b0:4b:
0f:70:0d:7f:ba:70:4b:67:b1:65:3e:81:ba:2e:f9:88:29:91:
6d:f2:57:9a:91:60:97:37:2e:dd:83:1a:21:f5:15:a6:ec:d1:
ca:bc:1d:10:d9:ab:06:2a:8d:1c:94:d6:c9:33:0f:bb:2b:c1:
ea:f5:ac:bc:9f:fa:78:69:4a:9a:73:5e:ee:6c:f4:0f:57:f6:
7e:b4:8d:4c:65:a8:85:49:9e:79:b7:37:ac:f5:81:07:bc:84:
d1:18:9e:15:3d:74:dc:94:71:36:e7:f5:c1:1f:3f:a3:94:70:
04:90:42:be:b8:48:bb:4b:51:fe:21:a7:2d:17:54:55:a6:e0:
8a:2f:94:bd:90:52:d3:5d:b9:a1:58:3a:b1:24:71:eb:0e:89:
6c:bd:ed:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:33:24 2026 by rpki-client