
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3FBCC4581E0111E9A590C837C4F9AE02.roa
File: 3FBCC4581E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: VeGM+tEUgEwEtYQ/eYfSdxXXAzilxl63et5As2eNYtQ=
Subject key identifier: 62:BB:92:F1:C1:DA:B5:53:93:2D:9F:32:85:93:F7:0D:C8:1A:00:7D
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3C04
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3FBCC4581E0111E9A590C837C4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:12:00 +0000
ROA not before: Mon 06 Jul 2026 15:12:00 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 21859
IP address blocks: 61.91.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15364 (0x3c04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:12:00 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc5c0-e587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:f2:85:09:23:27:ff:69:f4:a3:14:1c:9f:
dc:27:16:da:29:2d:3b:20:ae:fc:33:89:fa:31:e7:
b2:bf:91:65:27:d1:e6:de:98:08:6a:c9:6b:1a:72:
a4:44:5a:7d:af:ed:5d:03:80:42:94:5d:71:57:6f:
c6:75:a9:0b:2e:29:2d:5d:b7:82:ae:92:b9:e9:9d:
a7:da:0f:33:f5:88:30:19:7f:63:04:c2:48:20:81:
0d:7f:09:c4:c9:e6:45:7a:97:d5:a2:16:3c:ed:75:
b2:9d:17:da:ac:c4:6c:bf:51:41:46:2d:20:3f:1f:
5b:bb:8c:e5:f5:51:80:6c:ad:d6:4d:31:19:8e:59:
73:8a:6c:1e:8e:77:19:ca:c0:b4:7e:6d:af:f6:01:
98:bf:2c:cf:a8:2c:0f:9d:7b:a3:2c:04:3d:5a:b9:
00:a8:2c:64:e8:ae:c4:f4:51:ae:55:3d:f4:3d:48:
4b:8b:ae:49:4b:4c:43:a7:ea:d2:35:13:5d:5c:b2:
c1:77:c2:54:d3:9f:ba:29:b2:c0:66:94:a9:3c:19:
71:e9:9c:fa:c4:b2:74:4f:09:bb:c1:34:50:40:c8:
d0:09:fd:02:49:6d:36:ec:6e:e4:d1:5f:45:9d:79:
1d:7b:05:3a:83:51:4d:64:fb:2a:32:24:38:15:70:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BB:92:F1:C1:DA:B5:53:93:2D:9F:32:85:93:F7:0D:C8:1A:00:7D
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3FBCC4581E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.91.194.0/24
Signature Algorithm: sha256WithRSAEncryption
02:07:18:22:c6:e9:59:d6:c2:41:1b:3c:21:db:59:6e:98:e3:
ba:4b:86:73:ef:1c:4b:46:b2:f0:4c:82:6e:73:cc:41:64:a2:
0b:04:05:01:54:78:ae:da:bf:d9:45:b3:1c:59:d5:6a:b6:7a:
73:ee:4a:b3:c8:da:24:1c:db:55:88:cc:1f:6f:a3:fa:cc:4e:
61:c6:82:c6:75:95:f8:0d:2a:c7:01:4a:d7:d9:0d:e6:53:79:
d9:e8:b2:0a:88:cf:1d:fc:2d:8e:b7:ed:71:4a:c4:81:90:dd:
d4:a5:7e:5e:2b:73:50:00:61:7e:78:37:ea:9b:65:20:13:e6:
0e:9f:1a:f2:28:86:38:32:04:6b:94:7d:22:02:27:3c:18:2c:
93:52:0d:8f:a4:f8:c5:57:4a:76:09:73:1a:d8:0b:e8:09:24:
17:8c:85:f4:4d:62:49:f2:5f:1d:6c:4a:ff:c9:92:47:b9:05:
fc:2f:e9:33:09:5e:ac:c3:b3:17:07:a4:6b:c8:6d:bd:9e:18:
b0:48:69:0d:7e:a5:02:9a:61:bb:d5:a6:02:8c:14:b6:5f:07:
26:9a:6b:23:57:7f:0d:f8:1e:34:40:e9:81:51:ca:8d:92:1d:
cc:ea:6c:d2:ec:69:9d:4d:9a:c7:97:74:01:89:fe:11:d9:11:
18:57:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:39 2026 by rpki-client