
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa
File: 296C70368D0A11EE89E31163C4F9AE02.roa (raw, json)
Hash identifier: 6ZEsybRe0oLgQAcKOKtbN/fBWgK+tAXl0P9QdZGnk9M=
Subject key identifier: 9C:C2:F6:8F:A7:6E:71:3A:A1:CE:45:B5:73:D9:90:7A:34:A0:9E:8B
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3BF9
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:11:40 +0000
ROA not before: Mon 06 Jul 2026 15:11:39 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 152130
IP address blocks: 110.170.136.0/24 maxlen: 24
2001:fb0:1081::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15353 (0x3bf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:11:39 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc5ab-9f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:ea:8a:bc:f5:30:be:c4:50:27:6d:31:70:
72:d6:07:7e:4e:26:af:c1:1f:f6:51:44:12:dd:82:
64:0e:e4:49:e9:e1:f9:ea:31:38:67:87:5c:34:56:
8a:90:82:5c:9e:a9:6a:50:f0:c6:17:13:4d:5e:d5:
28:16:42:67:e0:70:f3:16:84:6d:51:e6:49:c8:b6:
a9:0e:5c:b8:09:71:1c:e0:de:74:d0:fb:04:b5:db:
49:d0:ba:cd:d8:85:bd:e9:fb:71:2f:da:5e:94:2b:
2b:58:69:2d:e5:b3:c1:b4:73:f9:fc:87:1a:47:4e:
a5:41:dd:36:80:65:0b:14:76:e2:de:3c:97:86:75:
6c:2e:7d:85:41:5b:3b:57:f0:08:86:b3:4b:ad:2e:
d8:76:8a:58:6e:fc:88:5f:cf:60:31:88:5e:0f:fe:
4a:4d:31:e8:37:a2:5b:ee:e6:b4:a5:6e:1f:e8:c4:
78:07:76:c1:5f:82:2e:21:48:f4:37:3c:a2:7d:77:
34:60:3b:cf:c2:66:c4:9f:4f:6e:a5:a6:73:41:12:
9b:13:30:3d:75:99:3f:19:b8:72:47:32:cd:84:e9:
c2:5d:47:f2:6f:8c:ec:26:6a:85:24:2a:90:96:ea:
b2:f7:cf:ad:b8:25:89:bb:96:a6:dc:23:43:e6:46:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C2:F6:8F:A7:6E:71:3A:A1:CE:45:B5:73:D9:90:7A:34:A0:9E:8B
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.170.136.0/24
IPv6:
2001:fb0:1081::/48
Signature Algorithm: sha256WithRSAEncryption
71:02:2d:4b:c7:08:04:56:60:b2:06:d1:ca:dd:b5:5b:74:8d:
52:8e:0d:02:38:2f:e0:92:d3:7a:28:59:c7:d4:23:49:39:4e:
98:e3:01:6e:25:4d:0e:b1:c5:09:06:5f:73:8c:6f:38:2f:21:
53:ae:44:61:a3:17:7e:6f:6f:b1:a1:80:46:1f:d5:76:74:d9:
58:ea:c5:aa:0a:dd:09:8a:6d:09:fc:b1:94:f5:f3:e1:86:f3:
2e:fb:66:9e:41:2e:d7:7d:0d:ad:33:da:a4:d6:c4:ea:6e:ce:
51:9f:bb:8e:8f:2d:36:1f:c3:aa:c0:db:df:4a:b1:23:86:2a:
af:9e:f2:73:62:cf:31:83:58:e8:21:71:94:20:38:95:bc:76:
b9:f2:d4:ee:e7:3b:86:60:d9:e9:b9:c7:4e:22:84:73:52:6b:
29:e4:0e:e6:75:bf:b4:57:62:87:64:c4:40:7c:a6:9a:98:78:
7c:5a:1e:de:a1:11:44:99:27:1f:3b:9c:bb:6b:08:7a:fe:c6:
6e:46:da:fd:4f:f3:74:d6:1f:03:23:4f:c5:96:b2:fb:8e:74:
31:f6:f0:a3:02:35:85:8f:12:80:5e:7c:22:77:2a:26:4a:e5:
9a:87:82:4a:2f:82:46:ae:4f:9f:d8:6c:01:54:c7:09:80:0a:
ba:a2:6b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:04 2026 by rpki-client