
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3426848A1E0111E9A590C837C4F9AE02.roa
File: 3426848A1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: oedgOOjHLqBreY4NdwMU0DTucRqCdnGVASckQSXD/WI=
Subject key identifier: 3C:D1:DD:54:EA:0F:7A:B8:17:83:36:66:23:9D:C2:7D:B4:53:7F:B5
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3BD3
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3426848A1E0111E9A590C837C4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:10:23 +0000
ROA not before: Mon 06 Jul 2026 15:10:22 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 132009
IP address blocks: 58.97.77.0/24 maxlen: 24
171.102.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15315 (0x3bd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:10:22 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc55e-291c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8a:61:a2:7c:be:73:5e:41:86:94:e7:6e:d6:
12:60:b2:7a:39:61:87:6d:c0:ae:38:ad:bd:94:ba:
4f:f8:71:c6:e2:da:36:e0:51:92:1e:b4:59:f5:ba:
6a:4d:e5:f4:29:ea:49:5c:b3:a6:ea:43:f6:2a:56:
b4:68:54:52:ef:98:8c:58:64:51:1d:b9:13:41:23:
4a:81:24:cb:a8:f2:48:7b:7a:61:24:f5:32:43:e0:
fc:6e:fa:cb:cf:60:5a:be:51:73:7e:4d:7b:97:5b:
83:29:47:d6:61:7e:a7:5c:a7:4b:ce:67:61:b5:8c:
ed:b6:b7:d7:27:de:d4:cd:19:cf:e9:15:13:b7:63:
4a:fd:9d:37:ae:00:f8:c8:fa:17:4d:b3:d2:73:ea:
ac:ee:7e:6a:e3:da:24:bf:bc:51:7b:48:bc:e1:6a:
47:54:e6:81:0f:de:fb:79:04:f9:de:ed:3c:cd:85:
66:4c:bb:ab:94:8a:f6:35:d0:03:57:ca:49:79:c8:
32:8f:b1:e9:ce:a7:5a:d1:e8:e3:4b:43:d3:8a:8e:
75:17:22:ea:e3:f6:f5:e9:9b:4a:f5:0d:e2:c3:ec:
7c:a4:ee:fe:51:e7:cd:12:c4:17:a1:db:32:bd:62:
23:78:3c:f0:61:bf:9d:1f:cf:bb:70:a9:4c:5d:ce:
bb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D1:DD:54:EA:0F:7A:B8:17:83:36:66:23:9D:C2:7D:B4:53:7F:B5
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3426848A1E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.97.77.0/24
171.102.204.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c0:11:90:c4:30:5e:4f:b1:89:e8:b3:4f:72:0a:af:ac:ba:
99:8e:3d:f9:14:e6:09:6d:dd:dc:4b:74:9b:fa:1b:6b:43:ba:
c9:a4:8e:c4:ae:df:2d:48:e7:3d:b5:4d:2b:23:7a:53:65:36:
5e:ee:e0:b9:9a:0a:ec:5e:cf:e8:df:49:62:00:ca:d9:43:d6:
0d:8f:4c:3b:a1:e2:3a:fd:dd:9e:03:4e:7c:79:85:d8:c4:b7:
41:64:e2:f3:9c:00:05:e4:2b:53:90:23:53:5a:4a:bc:8f:15:
75:03:c1:46:41:92:31:fb:b0:f0:51:bd:02:93:94:f4:6d:a9:
9c:bb:be:53:fb:07:29:a2:c7:f1:52:40:e2:c8:7e:4d:21:29:
30:a4:80:2b:9c:ba:75:d5:a3:3d:a7:95:e7:ec:39:c9:79:70:
38:9d:48:eb:84:c9:c6:31:ba:84:f9:16:ad:4c:22:64:53:f4:
a0:37:fd:6c:c1:72:3a:3c:b6:27:07:0d:ab:c3:10:1a:91:ae:
6d:47:14:89:92:e7:ec:36:88:50:c8:0a:30:6d:ba:87:d2:51:
db:4b:fb:6f:b1:6e:7e:ea:8f:ee:e1:f3:f8:28:3f:b1:10:bc:
79:0e:de:d0:6b:28:48:84:99:25:08:39:51:97:a4:94:17:f2:
71:2a:f2:cb
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICO9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYwNzA2MTUxMDIyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiYzU1ZS0yOTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Yphony+c15BhpTnbtYSYLJ6OWGHbcCuOK29lLpP+HHG4to24FGSHrRZ9bpq
TeX0KepJXLOm6kP2Kla0aFRS75iMWGRRHbkTQSNKgSTLqPJIe3phJPUyQ+D8bvrL
z2BavlFzfk17l1uDKUfWYX6nXKdLzmdhtYzttrfXJ97UzRnP6RUTt2NK/Z03rgD4
yPoXTbPSc+qs7n5q49okv7xRe0i84WpHVOaBD977eQT53u08zYVmTLurlIr2NdAD
V8pJecgyj7Hpzqda0ejjS0PTio51FyLq4/b16ZtK9Q3iw+x8pO7+UefNEsQXodsy
vWIjeDzwYb+dH8+7cKlMXc67awIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDzR3VTq
D3q4F4M2ZiOdwn20U3+1MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMzQyNjg0OEEx
RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAOmFNAwQAq2bMMA0GCSqGSIb3DQEBCwUAA4IBAQAJwBGQxDBeT7GJ
6LNPcgqvrLqZjj35FOYJbd3cS3Sb+htrQ7rJpI7Ert8tSOc9tU0rI3pTZTZe7uC5
mgrsXs/o30liAMrZQ9YNj0w7oeI6/d2eA058eYXYxLdBZOLznAAF5CtTkCNTWkq8
jxV1A8FGQZIx+7DwUb0Ck5T0bamcu75T+wcposfxUkDiyH5NISkwpIArnLp11aM9
p5Xn7DnJeXA4nUjrhMnGMbqE+RatTCJkU/SgN/1swXI6PLYnBw2rwxAaka5tRxSJ
kufsNohQyAowbbqH0lHbS/tvsW5+6o/u4fP4KD+xELx5Dt7QayhIhJklCDlRl6SU
F/JxKvLL
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:07 2026 by rpki-client