
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/44FC3A9C712E11F1B0457ED471A30FBC.roa
File: 44FC3A9C712E11F1B0457ED471A30FBC.roa (raw, json)
Hash identifier: vwRilIht6Mpow8PGErSyWU+CRC2ZMeHei4DyPp5qX1E=
Subject key identifier: 4A:A2:E4:65:00:32:4D:12:F0:70:C8:96:CF:72:D1:68:F3:3A:48:19
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3BFC
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/44FC3A9C712E11F1B0457ED471A30FBC.roa
Signing time: Mon 06 Jul 2026 15:11:45 +0000
ROA not before: Mon 06 Jul 2026 15:11:45 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 154731
IP address blocks: 58.97.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15356 (0x3bfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:11:45 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc5b1-8cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:18:eb:07:48:0d:b8:76:dd:0d:1c:dc:2f:
f3:71:f9:d0:14:29:20:36:14:54:64:2b:f8:38:65:
c9:e2:4c:1d:4f:44:71:8a:8d:d2:0d:07:e2:1f:b6:
f0:83:57:e5:d6:eb:64:80:ce:75:8c:72:58:2a:bd:
62:f2:40:79:ee:96:09:70:86:8d:db:7c:b1:26:c7:
85:5f:dd:b0:9d:79:7e:77:c9:d9:53:de:af:d4:c5:
3e:59:47:a9:df:98:61:b0:a7:92:7b:5a:d2:de:9e:
68:8d:39:da:b9:f4:ad:b3:49:34:a9:a4:49:3f:72:
ee:c3:58:1f:d5:f7:a0:0a:38:f9:41:66:ec:61:8d:
e5:37:54:da:17:60:05:56:a4:0b:a3:e5:2b:7f:ec:
a5:9e:21:b9:db:9f:d4:3b:90:0d:45:56:f4:97:a9:
c3:4e:4c:50:a8:c0:d3:3a:4d:27:f0:d8:09:35:00:
69:bb:f7:20:4e:48:fc:6d:07:cf:bc:42:10:ca:f0:
78:fb:d6:74:17:ba:d2:2b:83:83:c5:69:f3:56:e7:
9b:91:4a:a3:7f:3b:5e:ba:c2:f4:a6:52:e2:44:42:
cf:48:8a:b2:25:99:04:98:41:ca:f9:16:07:e7:a9:
bb:b6:0c:05:c9:e7:0e:96:2f:94:29:b6:45:b1:5c:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A2:E4:65:00:32:4D:12:F0:70:C8:96:CF:72:D1:68:F3:3A:48:19
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/44FC3A9C712E11F1B0457ED471A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
58.97.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d7:48:cc:9e:28:d0:d9:1a:68:c7:6d:25:ba:bc:0d:8f:bc:
7d:53:0b:c8:3e:e4:10:1b:97:0c:4e:8d:0a:83:7f:7b:a6:d9:
e9:2c:d1:d9:fe:c2:4f:9c:ff:7b:5f:82:7f:09:f5:59:f6:94:
c4:b9:1f:f3:d9:5a:21:b6:03:26:02:22:5c:91:8f:ae:07:d3:
e6:ed:1e:76:71:90:7f:e3:41:a0:1a:57:00:68:54:cd:c8:71:
7b:f0:f3:93:e0:64:67:c7:2c:96:8a:3f:ca:d5:b4:3a:72:9f:
8f:4f:d3:b2:4e:b3:df:b0:b0:72:ea:34:f8:fe:89:cb:82:98:
aa:03:b2:a5:45:4f:b2:d0:39:24:8a:dc:9f:be:ba:d5:b7:98:
1f:71:d7:fa:f0:03:ac:6e:e6:3d:c1:82:8b:4a:32:ae:f3:34:
9a:ae:eb:3d:31:b9:82:a5:a5:76:39:20:35:bd:b5:57:97:45:
b3:9a:5d:9e:95:ed:26:ec:98:8d:e3:61:06:89:2d:15:72:8f:
3f:f8:91:5c:96:a1:ec:7e:7f:47:e7:14:59:3a:99:89:cc:5e:
81:63:9a:c5:c0:a3:26:c9:87:46:4b:5b:a4:b6:a0:d0:0b:b8:
65:51:37:4b:65:65:7a:c1:4e:68:4b:72:17:4f:73:15:75:42:
82:1c:2c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:36:26 2026 by rpki-client