
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F2FD1456BE6B11F1A80B93237111F970.roa
File: F2FD1456BE6B11F1A80B93237111F970.roa (raw, json)
Hash identifier: 6jDH5u1/r6fEBrX5BWmuPdKWnH17ouYWf0OFDhkyOd8=
Subject key identifier: 1E:D3:B4:F0:06:43:E4:67:45:3F:05:F9:19:21:BF:19:9F:2C:55:32
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0EEF
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F2FD1456BE6B11F1A80B93237111F970.roa
Signing time: Fri 02 Oct 2026 14:17:07 +0000
ROA not before: Fri 02 Oct 2026 14:17:07 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 218910
IP address blocks: 61.18.217.0/24 maxlen: 24
61.18.219.0/24 maxlen: 24
61.18.221.0/24 maxlen: 24
61.18.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 19:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3823 (0xeef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Oct 2 14:17:07 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6abfbce3-e147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:3a:2a:0b:c3:10:96:be:d0:be:c2:7e:0c:
b5:29:bb:df:d9:b0:65:fd:cc:dd:2c:cd:6d:cc:36:
b6:15:70:57:a2:30:7d:0c:f1:10:4b:bb:9c:48:ae:
5b:a1:6d:e7:94:9a:df:cc:69:f5:32:e7:c4:b6:6b:
ac:8c:22:cc:e7:bc:ef:53:f4:95:fd:09:29:a8:0b:
b2:f7:c6:e4:6c:5b:bb:03:59:c1:22:13:77:26:04:
eb:e4:bc:35:19:50:a4:e2:e8:06:1d:07:2a:e5:36:
9a:3e:de:fa:6d:fc:1d:61:7f:64:0d:3a:2f:88:0a:
94:78:21:a3:b1:9a:32:6b:98:8c:99:cb:ba:a1:0e:
b9:52:af:44:94:0c:6e:c1:2e:e9:ce:29:6c:2d:de:
80:0a:16:27:5c:df:39:d2:68:2f:47:81:f3:bd:21:
93:27:3a:a9:fc:62:57:7d:e2:b0:df:07:c8:31:ce:
68:5f:1b:50:67:15:45:13:7d:cd:99:0e:9c:b2:61:
c3:a5:35:c1:4c:2d:88:14:a3:ad:07:5e:f6:73:d1:
7b:ad:b9:df:51:fc:7d:4f:72:c4:42:f3:51:8e:cd:
4f:06:8f:79:a7:dd:d2:8b:91:51:75:9c:39:0f:9e:
8c:f3:b8:d6:5e:e7:e0:2e:2b:c6:00:ff:fc:26:af:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D3:B4:F0:06:43:E4:67:45:3F:05:F9:19:21:BF:19:9F:2C:55:32
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F2FD1456BE6B11F1A80B93237111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.18.217.0/24
61.18.219.0/24
61.18.221.0/24
61.18.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:21:f5:8c:44:d8:63:b2:da:b8:47:fa:22:ed:5e:3c:03:69:
27:ff:9d:68:b2:91:66:19:5b:60:4f:a4:bb:4b:30:70:4b:82:
ff:43:d2:2b:44:ca:62:42:9c:6d:2a:cf:0a:70:e0:f2:c1:36:
3e:5b:bd:7c:6c:9a:9b:18:e4:29:c8:76:1d:1c:cd:6c:36:29:
90:0d:69:15:36:f2:f5:34:1e:ee:92:a1:3b:cd:91:d4:a2:33:
7c:e0:b3:70:c4:db:65:4c:09:ad:e2:d8:e2:4a:98:ee:02:f1:
c0:e6:47:f6:29:0e:45:0d:2d:8f:6e:33:70:c3:35:f0:f9:64:
c1:58:da:88:4f:e3:38:bd:a4:69:df:17:45:18:4f:2f:ec:41:
53:63:1a:76:27:03:04:b7:0a:1f:f5:09:94:d6:7c:68:0f:d5:
d2:1e:81:20:82:f4:aa:75:2e:61:29:9e:f4:33:2f:50:e2:fe:
81:ba:ca:d8:5b:bd:bb:e7:eb:19:52:ba:c6:b2:db:fb:76:59:
51:24:9a:f6:05:9e:54:77:dd:86:30:60:34:66:2f:bc:c3:50:
ea:1f:8e:21:44:9e:8e:b6:ee:e8:82:29:5e:da:d7:a3:60:6c:
c6:db:cd:0b:a4:70:6b:b6:72:8d:74:ff:9b:6c:4c:d1:de:99:
a9:28:af:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:32:16 2026 by rpki-client