
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5724BB281E0111E9A590C837C4F9AE02.roa
File: 5724BB281E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: CWEQLJ03SFryqngi9/YYzZSIwSeheGgdLjwhNbLej30=
Subject key identifier: 58:47:70:FE:F6:BC:34:34:0B:20:A1:C7:7E:F2:EC:A7:22:58:93:79
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3C31
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5724BB281E0111E9A590C837C4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:13:31 +0000
ROA not before: Mon 06 Jul 2026 15:13:31 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 55938
IP address blocks: 61.90.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15409 (0x3c31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:13:31 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc61b-83a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:d1:67:bd:79:f4:2b:48:e2:e6:86:1f:7c:
80:9f:d1:f8:ce:81:dd:90:d9:69:03:4a:ae:3d:8f:
9b:25:6a:52:c8:d4:f4:d7:9e:36:a8:56:39:92:bd:
c7:6a:c6:da:11:e3:ad:96:eb:11:26:7b:53:4d:0e:
c9:02:59:67:f7:7a:e4:ea:5c:e9:af:29:99:67:98:
30:6f:76:dd:58:98:8f:e2:74:e1:d0:f4:e6:97:82:
00:c9:7e:ce:b5:3c:9f:f5:5d:f4:4b:01:bb:72:1d:
86:1a:e5:da:21:9b:08:58:b5:70:9e:29:76:aa:f8:
20:91:51:9f:c2:ff:88:aa:7f:87:c1:2a:4d:75:5f:
10:61:0d:30:09:a0:bd:b4:21:aa:20:bf:e8:ae:d2:
19:a3:f1:3a:db:0f:b0:20:a1:ee:98:9c:26:a3:25:
2e:40:21:e8:42:84:6e:5a:1b:a0:77:cc:5d:8b:1a:
65:ff:47:3f:0d:44:94:d7:df:3e:99:3d:43:4b:99:
69:6d:9d:e6:d0:04:d4:03:82:e0:cf:ac:38:56:62:
f9:02:3b:87:62:db:99:ed:cf:0d:de:35:5f:13:a5:
3a:a5:5a:b1:62:46:3b:9e:90:0c:cc:2f:9a:41:df:
94:88:a8:d8:30:bd:15:aa:f2:ab:9d:d1:6d:d5:8f:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:47:70:FE:F6:BC:34:34:0B:20:A1:C7:7E:F2:EC:A7:22:58:93:79
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5724BB281E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.90.209.0/24
Signature Algorithm: sha256WithRSAEncryption
92:8b:e2:1b:de:7e:fd:36:29:0b:b6:6e:ec:c2:4a:1b:90:58:
28:e5:f9:5d:58:15:e1:20:90:86:11:f7:cc:b9:a3:9b:e8:9f:
0d:22:63:2c:04:fb:b2:9b:4f:b7:e6:02:b3:23:f7:1c:4e:6b:
66:3a:8c:d6:b2:56:4a:c4:ce:37:d9:e4:f3:5f:3f:62:0b:20:
b6:a9:55:97:7a:4b:fc:de:63:c4:9c:dd:33:11:fd:7f:5b:11:
b9:2e:c2:dd:03:cf:b2:96:2b:48:ac:b5:c5:27:bb:de:9f:51:
0b:ac:bf:21:4c:ec:bc:4b:01:6e:b8:91:1d:6e:05:81:03:77:
2c:dd:e8:f3:cc:d5:89:f2:7a:73:46:3d:1e:8f:bf:a5:40:22:
44:0e:14:3a:a5:ad:9f:9c:3e:ad:82:1b:17:9f:c0:0d:46:ca:
21:98:33:4f:7a:ac:13:09:9d:9e:c7:85:c3:c3:d2:b1:c5:73:
7a:82:6b:29:fa:2a:2e:7e:65:a1:f3:a0:ad:ee:73:e6:02:81:
68:7b:07:f6:d8:e2:6d:fa:ad:6f:fb:b4:a0:30:b1:27:16:94:
cd:f1:d3:cd:ae:5b:69:9f:8f:b9:d8:cd:d8:a2:e1:40:aa:ee:
61:3b:23:7a:22:5f:47:2f:7e:6e:06:22:16:6f:4b:e3:bb:5e:
6c:0b:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:04 2026 by rpki-client