
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3898AE761E0111E9A590C837C4F9AE02.roa
File: 3898AE761E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: y7Kw3bmuPB9aP9yRS9DvZpJXzEQzp7X1bvpD0kXX+zM=
Subject key identifier: 01:DE:70:E6:8F:AC:E4:A6:03:1F:56:CF:BC:0A:83:32:56:5A:0C:EA
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3BE9
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3898AE761E0111E9A590C837C4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:11:09 +0000
ROA not before: Mon 06 Jul 2026 15:11:09 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 136182
IP address blocks: 210.86.205.0/24 maxlen: 24
210.86.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15337 (0x3be9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:11:09 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc58d-043e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:fc:29:14:b2:5e:7f:69:16:74:3d:43:04:
d4:4e:a4:03:bc:4a:86:0a:73:eb:82:83:dd:f1:64:
0f:c0:42:a4:3c:94:54:20:1c:cd:01:28:70:b3:c9:
43:a6:a4:28:61:55:a0:a4:15:1c:6d:15:aa:3e:6a:
7d:63:dd:8a:24:1a:0f:92:6e:01:f7:7b:8c:6d:fa:
0a:7a:46:16:be:b9:bd:95:69:be:71:f1:db:32:91:
0f:5f:de:c9:f0:00:4b:8b:00:a5:16:25:8b:14:3e:
09:ef:34:c2:f0:f0:b2:56:0f:9b:01:b8:53:e3:d4:
f3:c8:21:4f:61:0e:1b:c9:66:4e:24:fc:ca:6a:22:
69:66:93:85:d6:9a:dd:c5:d9:e7:28:9f:d8:ed:85:
16:a1:cb:f5:aa:a3:01:1f:ab:07:5a:d7:43:59:28:
86:bf:06:56:75:ea:01:1e:4f:10:94:c9:e2:78:98:
c1:26:cc:2d:5e:a8:d2:e8:55:b2:a3:50:8d:60:52:
ea:5e:11:38:c7:14:0c:80:69:48:83:79:1b:a4:9c:
80:90:25:0e:66:1b:aa:f0:55:c4:6c:24:fb:5a:0c:
a6:a5:34:2c:f2:bc:69:8b:9b:d2:72:9b:19:4b:5c:
f1:f8:7d:16:cf:d7:bc:5d:9c:01:6e:dc:f8:0a:97:
fd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DE:70:E6:8F:AC:E4:A6:03:1F:56:CF:BC:0A:83:32:56:5A:0C:EA
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3898AE761E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.86.205.0/24
210.86.222.0/24
Signature Algorithm: sha256WithRSAEncryption
41:81:e1:79:1f:e8:58:e5:a0:c6:a5:56:c7:35:e6:78:2e:68:
3c:85:cc:5a:54:a7:49:a5:0c:90:5a:c7:ae:e2:54:a6:5c:ff:
f6:43:7e:02:6e:63:b9:8f:59:a9:d8:a8:eb:78:42:1f:7b:d0:
d1:cf:08:3b:d8:7b:27:ba:74:52:58:d4:ad:4b:13:1c:c3:8f:
05:ba:26:8c:03:51:ad:8e:7a:5d:36:0f:a0:0a:e4:28:2b:bd:
c3:0c:41:60:35:2a:94:38:c7:ba:41:dd:7c:18:87:4c:0e:35:
91:9f:90:2d:88:b9:21:50:94:58:43:c2:f0:6d:40:f8:f0:63:
d7:c2:61:dc:fc:0e:f8:9a:28:53:e7:78:01:65:43:d1:b8:ba:
9c:14:3f:48:6c:13:41:70:35:f3:f6:77:62:27:4e:08:1e:df:
be:88:e8:25:47:ce:4e:06:e3:78:01:ef:f1:84:0b:0d:dc:25:
b2:28:d2:ae:4b:d5:cd:9d:45:4a:2f:28:a6:0f:75:10:55:9a:
6c:bb:6e:41:62:90:68:da:14:95:01:08:db:5b:97:c2:af:93:
d1:1c:47:19:24:0d:fd:88:fe:b8:39:72:5f:d9:f6:7d:95:87:
4e:92:d7:63:a3:3e:7e:f7:56:8f:e9:09:d9:23:e9:dd:8e:67:
32:d1:6d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:51 2026 by rpki-client