
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa
File: 3EF600FC1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: NKp4Eq1P/STRsVzvJ1uUVPHS9b79oR7pngBgJ8rRAcA=
Subject key identifier: 2E:E7:1A:99:9C:42:8C:9F:AA:E5:4E:00:7F:AE:56:2C:98:60:65:5A
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3C01
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:11:54 +0000
ROA not before: Mon 06 Jul 2026 15:11:54 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 18197
IP address blocks: 58.97.37.0/24 maxlen: 24
110.170.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15361 (0x3c01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:11:54 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc5ba-b446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:6a:ad:2a:df:ad:f3:e8:01:09:47:bb:ad:
e3:66:9b:bd:d1:be:ee:6f:ee:62:5b:6d:b9:ce:f4:
b5:3c:5a:af:0a:32:57:0c:ab:c8:6a:93:76:64:97:
c0:1b:cc:70:59:f5:07:7a:71:99:b9:5a:55:e1:96:
50:35:ff:e6:40:57:08:0f:40:7d:aa:10:fc:dd:ae:
b8:f8:0f:51:ec:66:ad:4c:60:85:4f:f8:f3:64:af:
d2:2f:7d:84:00:fb:58:e0:1d:e8:8c:37:7e:2c:01:
5e:0d:ff:49:8f:0d:3e:cd:36:1e:54:f5:ea:5e:77:
0b:a9:e5:f2:98:09:8d:d5:a1:aa:d6:fc:65:38:50:
d2:ad:98:cd:d9:f5:99:d9:e9:e0:af:6e:af:e1:ee:
df:8a:e5:dd:76:74:a7:40:10:62:ff:3c:36:f1:0f:
a9:84:4e:e2:63:59:de:58:6d:24:cf:59:4f:3d:22:
a3:9a:ac:5d:c0:38:41:e6:11:94:d8:7e:83:26:9b:
65:46:03:18:c0:20:d7:fe:40:7e:7b:a3:95:29:94:
2b:4c:43:4b:b9:a8:01:b9:36:e4:a8:c5:1c:3d:ec:
51:a6:1d:36:de:4e:82:21:31:5e:61:8f:c5:b6:aa:
cd:a4:8f:ec:c4:53:27:cd:ba:c1:7b:80:bb:40:26:
33:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E7:1A:99:9C:42:8C:9F:AA:E5:4E:00:7F:AE:56:2C:98:60:65:5A
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.97.37.0/24
110.170.149.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a3:5c:ac:4b:bb:5d:39:99:aa:52:bf:d1:8c:7c:a2:17:e7:
fa:22:3f:16:ea:41:25:03:68:40:82:cb:57:38:2d:33:b9:d0:
0b:61:40:fb:02:f7:16:e1:e0:8e:8d:6d:15:26:3c:23:14:97:
98:28:d8:e2:44:6f:90:2d:a8:a7:dd:c1:00:9a:f3:31:52:99:
4f:fc:04:26:52:4a:73:94:d7:4f:c2:01:cb:91:88:d3:bd:e6:
aa:dc:29:2e:03:0e:36:7b:ed:c8:40:67:f1:56:65:dc:23:c4:
51:ac:78:8a:25:42:66:53:1d:39:8a:29:f4:dd:09:82:b3:51:
64:18:d2:08:0d:1a:f5:a2:98:4e:65:d2:33:c2:6c:f3:7c:2d:
2f:a2:3e:49:04:d8:83:60:6f:c6:fd:de:93:e5:b6:df:2a:8c:
c8:f2:35:48:58:26:74:09:21:7e:a6:d0:26:0a:37:93:74:b4:
e1:ac:34:5e:09:43:17:c5:ab:8e:7c:0f:c1:c6:6d:37:ec:af:
35:4a:ce:fa:8d:79:4c:79:12:0f:90:c5:ff:27:43:ce:e0:7d:
6d:a5:c9:aa:4a:6a:3d:e4:25:d9:9b:e7:75:fd:9d:26:16:d6:
a3:b5:5b:72:4a:f1:1b:93:11:cc:74:89:16:1c:6d:bc:7a:9e:
53:55:1c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:39 2026 by rpki-client