
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A63A29461AF11EAB55FB65CC4F9AE02.roa
File: 4A63A29461AF11EAB55FB65CC4F9AE02.roa (raw, json)
Hash identifier: O0+DRyyN8YjD8f1dNNAiL6RgZsS5j2P6JQ8ejcC/sL8=
Subject key identifier: 28:89:57:D2:04:5B:4A:E5:4A:49:C7:B8:F3:D3:44:0D:1D:D9:DC:01
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3C0E
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A63A29461AF11EAB55FB65CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:12:21 +0000
ROA not before: Mon 06 Jul 2026 15:12:20 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 36040
IP address blocks: 2001:fb0:109f:12::/64 maxlen: 64
2001:fb0:109f:14::/64 maxlen: 64
2001:fb0:109f:18::/64 maxlen: 64
2001:fb0:109f:19::/64 maxlen: 64
2001:fb0:109f:8007::/64 maxlen: 64
2001:fb0:109f:8009::/64 maxlen: 64
2001:fb0:109f:8010::/64 maxlen: 64
2001:fb0:109f:8013::/64 maxlen: 64
2001:fb0:109f:8014::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15374 (0x3c0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:12:20 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc5d4-8714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:e0:54:bd:8a:b0:7e:60:e0:e8:7b:5c:8d:
3d:54:28:58:73:a8:67:29:0c:10:ae:63:45:03:c8:
85:4a:90:c9:b6:a2:b9:ed:1d:5d:6b:a6:4a:ad:93:
3e:9b:eb:f7:07:c3:48:0b:20:39:ce:65:1c:69:2e:
c8:96:c7:2f:25:05:94:08:b2:31:8a:d0:f0:8c:52:
b4:f2:86:05:86:2f:67:b8:62:26:90:6d:fe:34:b2:
02:bf:60:db:cb:8c:fa:a1:ed:4d:23:78:39:1c:93:
32:14:60:9e:50:df:5d:74:20:91:6a:70:c1:58:ea:
a3:2a:b6:23:60:da:45:12:d1:ae:ac:9f:8d:4b:fa:
92:9e:dc:f5:92:94:6e:1e:14:b6:f7:df:b3:2c:87:
89:ae:ab:67:cf:5d:da:91:ea:a8:99:d0:a7:1c:45:
33:c2:ba:02:44:73:79:e5:43:46:8d:85:db:d1:f7:
8b:da:c8:4d:9e:a2:d0:99:40:00:20:7c:70:0c:99:
9b:9f:3d:cd:c7:55:f3:8f:23:0c:88:6d:ba:1f:25:
74:bf:67:ed:1c:07:c9:47:37:f2:f2:ec:e7:a8:5e:
b3:ec:34:95:a8:16:fc:c9:f1:89:a8:f2:7d:08:4e:
46:93:60:d8:1b:ff:67:d9:b9:ca:0d:24:93:e1:32:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:89:57:D2:04:5B:4A:E5:4A:49:C7:B8:F3:D3:44:0D:1D:D9:DC:01
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A63A29461AF11EAB55FB65CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:fb0:109f:12::/64
2001:fb0:109f:14::/64
2001:fb0:109f:18::/63
2001:fb0:109f:8007::/64
2001:fb0:109f:8009::/64
2001:fb0:109f:8010::/64
2001:fb0:109f:8013::-2001:fb0:109f:8014:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
16:d4:bd:ff:07:61:fe:bd:ae:7b:e3:7e:97:d4:d6:c1:00:8c:
03:dc:9f:bb:4a:1f:7d:dc:01:15:84:4d:dd:a4:51:0e:f8:69:
87:bc:6e:57:46:b3:5a:b3:52:7c:52:4e:8f:02:88:55:9e:07:
b4:8d:87:b9:6c:a0:d1:0f:a7:d8:5f:1d:12:75:0d:31:41:8f:
3c:3d:5b:41:4f:06:f6:50:24:73:04:35:ec:21:5b:f9:ec:54:
27:6c:4e:8c:4e:ba:38:03:15:c4:28:45:ff:d8:41:2d:8e:7d:
c6:f3:bd:a2:86:93:93:1e:b5:98:5e:87:e6:ce:9a:ec:54:6e:
f2:f3:97:d1:fa:5e:76:a7:26:16:93:a9:9f:5e:65:3f:01:4f:
8e:68:2f:c0:5c:81:10:b3:b5:5f:e5:fe:19:57:b4:9d:e9:88:
0e:50:87:e5:92:a7:84:91:6e:28:39:d8:ed:b4:b8:ab:a5:79:
90:b1:f2:ed:f8:33:81:32:50:42:4c:8f:22:fb:97:db:95:ec:
e1:1d:00:91:ae:90:0b:88:69:42:d6:fd:41:8f:2e:a4:11:8e:
91:03:aa:0a:ac:7f:b8:13:b4:ec:8b:1c:24:e4:2d:94:27:4f:
69:9c:37:b1:dd:e1:fe:e5:c4:e0:32:61:81:ca:88:b9:ff:2c:
1d:35:c2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:31 2026 by rpki-client