
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa
File: 27C8A978636311EEB35FEF77C4F9AE02.roa (raw, json)
Hash identifier: +myCZKwQi+vxdBerc9z5NWGlvU5VaAs7PnbX2VdkDYs=
Subject key identifier: 2A:5F:88:ED:14:49:F9:9A:32:31:A7:01:75:FE:F4:73:D0:16:CF:4C
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3BF8
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:11:38 +0000
ROA not before: Mon 06 Jul 2026 15:11:38 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 151825
IP address blocks: 171.102.216.0/24 maxlen: 24
171.102.217.0/24 maxlen: 24
2001:fb0:10bb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15352 (0x3bf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:11:38 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc5aa-53ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:8d:43:8b:78:76:86:46:61:ef:1c:a7:cc:
96:89:76:88:ee:1d:e8:d0:7d:92:e2:e0:4c:e3:bd:
9f:c6:a1:f9:d1:f9:c0:6a:d7:11:51:9b:f0:fe:b9:
5a:fd:6e:66:47:24:7e:b2:87:45:ea:dd:51:65:71:
33:fa:63:1b:f7:04:b0:62:4f:4a:34:bc:fb:97:af:
cc:2d:19:ce:76:33:62:94:d7:51:58:91:a3:63:5f:
e7:04:9c:c1:01:ce:31:43:f8:23:e3:60:70:54:d4:
05:9e:7f:22:1c:fd:92:c9:9d:c6:df:eb:6f:72:82:
4f:d7:59:eb:54:f0:46:1a:b8:08:ef:d3:69:52:f5:
81:98:f9:10:ac:72:bf:a3:82:4f:0c:0b:e2:88:8a:
8c:ca:05:0c:4f:f1:2a:49:87:2d:69:11:e0:7a:1a:
d4:ad:6c:92:25:b2:d0:c2:42:a2:be:9e:8e:05:92:
b4:e7:2c:7f:70:73:23:79:27:33:d8:53:23:98:cc:
d9:dc:1e:7b:2f:c9:98:7d:75:48:14:00:73:db:55:
c6:bc:c0:e1:b8:23:7c:90:be:a7:15:85:61:2f:f3:
69:11:e9:cd:1b:53:e9:13:42:db:c4:2d:95:51:b1:
34:5f:47:7c:e8:47:6a:83:d9:ff:f0:57:fe:f8:ab:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5F:88:ED:14:49:F9:9A:32:31:A7:01:75:FE:F4:73:D0:16:CF:4C
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
171.102.216.0/23
IPv6:
2001:fb0:10bb::/48
Signature Algorithm: sha256WithRSAEncryption
b8:9f:b8:1e:67:5b:1c:40:90:ff:8d:d6:74:2f:b9:8c:25:90:
2f:dd:74:c9:78:5e:a8:98:78:78:95:36:fb:f3:98:eb:3d:d3:
00:35:c4:18:a2:e5:7a:5f:12:ec:25:28:ee:05:87:f6:cf:38:
33:8e:3f:6f:c1:04:ef:64:e1:c9:3e:9e:6b:34:ba:c6:6c:e6:
86:de:ac:58:f5:aa:81:06:52:ce:30:14:30:5d:9e:50:96:d1:
67:d0:bc:ea:77:bb:90:57:7e:03:e1:4b:f6:96:7e:d8:52:40:
83:f2:20:91:6d:67:0f:8b:46:bd:40:67:16:60:9a:16:68:5e:
5d:b9:9b:f9:c3:5a:43:fe:71:5d:6e:2e:cb:87:46:fa:46:75:
06:bb:f8:94:d2:56:38:73:6a:29:d9:78:12:2c:f9:5f:58:12:
eb:69:93:ae:6d:10:e1:b6:17:4f:d6:ec:65:7b:25:94:c6:da:
e3:fb:c0:6d:e6:ed:ae:f1:19:c0:ba:69:83:94:e9:7a:39:6a:
ca:86:da:8f:79:a4:c6:2b:68:75:b2:df:2d:ac:17:4c:74:1b:
0d:28:63:64:f8:d6:e9:57:63:b3:4f:c5:71:6e:7f:f9:a8:38:
ce:c0:e4:93:22:0e:a8:4f:d8:73:b4:cc:b1:0e:04:b5:33:c1:
bc:79:16:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:14 2026 by rpki-client