
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/40660E781E0111E9A590C837C4F9AE02.roa
File: 40660E781E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: JcolN5GDOq4JGmIGZLcsoK2onjpHwh4ppSwklP8oHVg=
Subject key identifier: 8D:02:3E:BD:61:BF:39:30:3F:54:11:E1:3C:74:42:C0:DF:6C:8B:E8
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3C05
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/40660E781E0111E9A590C837C4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:12:02 +0000
ROA not before: Mon 06 Jul 2026 15:12:02 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 23683
IP address blocks: 61.91.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15365 (0x3c05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:12:02 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc5c2-0b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:9d:3f:9a:6e:fe:e6:87:e0:6e:27:96:d3:
b4:c8:87:4d:13:b2:ed:1e:be:fe:22:74:d8:f5:57:
11:a1:76:e9:81:7e:bc:3f:10:37:4b:02:42:97:8e:
09:52:db:69:68:7b:8f:4d:bf:d8:12:8c:70:15:17:
92:6b:16:f2:10:bc:b0:9d:07:d6:b0:6c:cc:5b:96:
de:67:63:bc:73:ab:67:74:cb:bc:07:5c:a1:94:ee:
ec:b3:b0:58:28:d7:ca:3a:de:a8:ea:49:65:4c:ec:
be:01:70:02:b6:f8:ba:71:46:7c:50:26:38:b4:dc:
ca:18:fd:29:9d:f9:1a:27:58:59:13:6b:08:e5:31:
34:42:de:b4:02:75:58:a4:ec:da:b5:97:00:30:6b:
c4:eb:c8:0f:bd:49:81:d5:0d:b7:ef:00:73:f7:d0:
e9:16:20:9a:72:5d:3f:0a:36:18:65:8b:33:fc:76:
10:40:a7:1b:a8:66:5f:46:09:2b:09:58:00:ab:91:
01:47:62:11:74:2f:b7:7d:76:1b:5f:7e:a8:0b:72:
fe:b0:f9:11:59:35:94:54:de:23:b3:f4:15:82:fa:
fd:d3:24:89:f4:f1:ef:f1:be:ad:7a:4c:77:fc:a1:
e1:56:32:bc:c9:89:ba:6b:b7:4e:5e:17:ed:6d:8e:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:3E:BD:61:BF:39:30:3F:54:11:E1:3C:74:42:C0:DF:6C:8B:E8
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/40660E781E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.91.199.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b7:44:60:ac:42:30:73:16:a6:c0:e9:b9:92:1d:fb:33:e3:
45:ce:24:ba:0c:1b:87:59:02:5a:9c:cc:46:d0:e7:15:ec:cd:
b8:23:56:17:77:9f:ba:82:29:31:98:2c:c7:c9:12:af:2e:ba:
d7:f4:e8:02:c5:e6:d6:61:b0:9f:43:eb:73:64:f8:a8:ec:5e:
7f:27:cc:e2:eb:e9:6f:30:e4:91:b5:c4:18:7f:d0:bf:b6:73:
f6:60:4c:b5:ed:56:5e:e7:af:35:30:d3:5e:06:30:6e:38:77:
a9:b6:1e:b7:9f:c8:ec:4e:71:db:86:b8:81:24:dd:1a:00:dd:
a2:f6:5a:62:29:14:82:91:5f:05:ee:54:e0:21:a6:3d:8b:7a:
d5:1d:54:e8:9e:9e:88:57:92:48:09:b4:e8:1c:93:3c:57:23:
d0:8b:cf:12:ef:cd:3d:ac:b7:60:57:ae:ce:8d:c9:34:60:d1:
79:74:8c:15:22:ac:aa:44:2f:db:64:f3:4c:30:37:71:76:a6:
56:c5:75:ed:b1:fc:95:c3:78:00:0a:73:81:c7:32:95:66:be:
25:ed:01:81:89:df:5a:04:6e:3e:6f:91:7a:a0:9a:3e:bb:85:
26:66:0f:a3:33:b4:c7:8a:39:0d:23:d4:a6:35:c3:4d:f8:09:
b0:d9:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:03 2026 by rpki-client