
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35D6766E1E0111E9A590C837C4F9AE02.roa
File: 35D6766E1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: 94tlOlwZMbNhyHsRgU60ixtf1e8CknYp0Y9nSe3eVhA=
Subject key identifier: 5C:15:02:A0:12:6C:65:4D:1A:6D:70:33:6A:0A:D3:AF:EF:76:08:CD
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3BE1
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35D6766E1E0111E9A590C837C4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:10:53 +0000
ROA not before: Mon 06 Jul 2026 15:10:53 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 133791
IP address blocks: 110.170.142.0/24 maxlen: 24
203.144.154.0/24 maxlen: 24
2001:fb0:10b6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15329 (0x3be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:10:53 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc57d-b50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:9b:2d:90:bc:5a:3e:f1:3c:78:62:de:e9:
27:05:10:e3:ca:2a:2e:e0:6c:88:0c:34:b6:be:ff:
14:d8:8b:52:b8:17:15:d4:1f:2f:76:59:47:b6:80:
b0:d6:ff:6b:01:db:fc:21:77:36:5e:0f:7a:69:c2:
2f:7d:9d:ae:84:9d:86:e2:ad:a0:e2:3b:55:39:5a:
ef:97:f5:d1:ca:74:4c:fd:7d:c3:50:df:fe:64:3b:
5f:a4:74:51:33:28:2d:8a:e8:c5:1e:ad:21:32:e0:
86:e9:14:de:e3:49:b6:95:7f:41:81:31:c6:c2:12:
4f:01:ac:de:58:0d:eb:48:6c:21:4d:65:df:d1:3b:
82:26:cc:dd:81:66:7f:60:e0:a1:e3:ea:25:e2:a2:
7f:aa:e8:cc:22:75:e8:66:38:be:5f:fe:10:d7:d2:
1a:d3:b5:23:68:02:ae:fa:90:9a:e0:ad:50:37:ab:
2c:0a:cd:19:57:69:f8:b4:c9:0a:a7:33:8e:36:e0:
5f:29:d3:36:d8:74:c4:f5:72:5a:3c:b6:df:49:9e:
b7:c8:1b:d0:64:b6:58:02:d7:08:28:a2:8b:63:79:
6d:6c:da:0b:6c:ed:4a:fb:cf:0c:ab:7d:17:7f:ff:
1e:d4:51:00:79:70:67:de:95:3a:a2:1d:dc:ea:c0:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:15:02:A0:12:6C:65:4D:1A:6D:70:33:6A:0A:D3:AF:EF:76:08:CD
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35D6766E1E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.170.142.0/24
203.144.154.0/24
IPv6:
2001:fb0:10b6::/48
Signature Algorithm: sha256WithRSAEncryption
35:02:2d:64:ef:24:14:53:04:a3:10:5f:52:cb:77:51:22:34:
54:d5:d8:ee:26:dd:ab:29:0e:1a:3f:c9:e3:0c:b0:e3:68:60:
df:57:a9:d7:00:07:88:6c:b8:49:f6:2b:1f:47:be:52:28:99:
59:d3:5e:cc:db:fb:7b:cd:9a:62:93:e5:31:41:9b:b1:3e:fd:
53:83:a3:44:1b:e4:99:04:0b:38:13:95:c4:2e:4f:0d:e5:3c:
ac:79:29:54:82:09:0a:42:4d:7f:7a:ac:fd:cc:c9:60:14:6b:
9b:d8:04:01:b2:a4:02:7e:5a:60:69:d8:8b:0f:64:7d:1c:76:
8a:c7:ba:cc:b0:02:c8:f9:08:df:ac:24:44:04:47:8b:55:06:
36:c4:dc:46:c1:5f:ed:41:d2:74:ca:ad:7c:89:b6:8e:64:17:
5c:58:c0:8a:74:d6:e7:d5:63:a2:73:9e:32:0f:bf:27:70:4a:
84:08:74:46:cf:b4:6f:22:cc:83:08:69:b1:f4:c1:36:47:98:
d2:fb:5f:1e:ec:40:b9:8e:4d:f8:83:2f:f0:d7:84:e5:75:8a:
31:ed:35:18:06:f8:cd:8f:ee:28:2d:04:a1:25:32:d4:bb:f3:
ba:7b:21:e7:a6:77:62:04:76:99:1c:33:17:e1:c3:22:a2:cb:
78:87:90:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:05 2026 by rpki-client