
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2CE57E8636DD11EC88BBAC6EC4F9AE02.roa
File: 2CE57E8636DD11EC88BBAC6EC4F9AE02.roa (raw, json)
Hash identifier: xH64rdL+NooKT1bDgagSAkVT1j4Y8Z1/lF13tGs7xm4=
Subject key identifier: 5E:27:76:47:CA:7A:07:AD:D4:DC:FE:67:58:3E:4D:84:84:A1:12:EA
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3BEE
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2CE57E8636DD11EC88BBAC6EC4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:11:18 +0000
ROA not before: Mon 06 Jul 2026 15:11:18 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138685
IP address blocks: 110.170.134.0/24 maxlen: 24
2001:fb0:10b5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15342 (0x3bee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:11:18 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc596-6fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:da:4a:5c:e0:60:61:99:d7:7d:f3:43:1c:
77:ed:cf:17:82:ab:42:55:e9:3e:0c:47:3d:ec:a1:
f2:e8:74:3e:7a:81:0b:e7:1f:8d:d2:c8:7a:0b:dd:
85:1c:48:e0:dd:f9:3f:7f:da:70:d6:7a:42:22:b5:
6b:e5:37:53:a7:01:fd:96:98:4d:ed:f8:e2:84:8e:
36:fd:b7:be:39:be:dc:a7:b3:11:9e:19:35:38:8e:
4f:18:5a:63:42:e5:68:9e:9f:81:ec:78:9f:33:ab:
bf:16:ed:e8:c8:4a:96:68:fb:64:8f:cb:c2:18:41:
74:90:12:24:26:b5:2f:65:18:76:f8:b8:a6:db:a0:
16:f0:e9:d3:93:fc:aa:4e:17:b4:02:49:14:5e:b1:
eb:3e:28:61:af:e5:0f:c1:65:3a:86:57:6a:97:54:
5c:24:a0:f7:03:9a:16:78:55:6e:6e:23:78:ba:09:
af:49:e3:22:54:94:a8:32:ac:07:9e:ad:f9:8a:ec:
a7:66:29:26:1d:83:b4:84:8a:20:f2:72:32:42:5b:
29:b9:39:d8:6d:6d:ae:31:2e:d3:3a:94:35:93:78:
90:0c:62:ed:6c:9e:2f:0c:39:a6:46:94:02:e1:da:
90:1a:9f:82:90:18:9f:32:ef:33:c3:c3:fa:53:4b:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:27:76:47:CA:7A:07:AD:D4:DC:FE:67:58:3E:4D:84:84:A1:12:EA
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2CE57E8636DD11EC88BBAC6EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.170.134.0/24
IPv6:
2001:fb0:10b5::/48
Signature Algorithm: sha256WithRSAEncryption
5b:12:f6:b4:e3:4f:56:6a:1a:50:83:94:99:4d:5d:f5:44:2e:
2d:9e:ec:68:f2:3a:3a:91:77:41:1d:9c:e4:61:11:94:8d:9a:
5b:57:09:8f:55:b6:7f:8f:f2:e9:60:d7:f1:83:e8:1c:7c:e3:
7a:7f:5a:74:01:e0:9c:c1:6b:fd:08:81:79:8c:e9:bc:93:48:
a6:23:d1:14:46:9c:0b:13:8f:64:db:b7:5a:38:52:1b:b1:03:
2e:dc:e5:77:5b:a4:fa:18:56:e8:6c:07:ed:0e:30:06:d9:b8:
f1:32:b7:b8:bb:ae:83:c5:e4:ac:30:4a:3f:1c:81:c8:b5:38:
3b:0d:ef:d6:f3:ad:9e:10:be:c9:35:7f:08:b6:20:83:91:0a:
68:04:c9:99:c8:e5:96:ef:23:ab:bc:07:92:f6:9d:3b:62:fc:
7d:06:dc:09:9a:c6:6f:e1:a2:cf:53:a0:ca:c0:ff:d9:08:08:
a1:32:0e:6c:2e:cc:b2:8b:38:7c:ae:68:d1:a9:06:a6:14:15:
be:f9:5e:09:73:c1:41:eb:ca:12:25:27:dc:19:6a:fa:6b:cc:
d3:11:02:79:11:cd:c7:84:25:f1:05:bb:a8:bf:70:c7:c6:5c:
37:f8:a0:67:49:ee:4d:ae:e7:d2:9b:91:b3:fb:8a:72:e3:ce:
f7:0e:6e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:37:31 2026 by rpki-client