
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/86787BDC52C911EA93D1814FC4F9AE02.roa
File: 86787BDC52C911EA93D1814FC4F9AE02.roa (raw, json)
Hash identifier: gmBE2ERUmEZv3A31bz0jWcpDPUir7y4Fppva/Td9osg=
Subject key identifier: 4A:F8:13:4B:DD:1D:7A:F8:62:62:04:02:6A:03:A0:B6:F6:8A:A5:6E
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3C08
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/86787BDC52C911EA93D1814FC4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:12:08 +0000
ROA not before: Mon 06 Jul 2026 15:12:08 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 24060
IP address blocks: 210.86.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15368 (0x3c08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:12:08 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc5c8-0da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:e5:10:e1:01:e4:0b:05:f4:d4:fb:b1:62:
d0:cd:95:3f:80:39:cd:4e:91:d1:97:79:a7:82:9f:
c8:9c:02:1c:b3:b6:a6:f1:78:6c:82:dd:b0:78:6b:
40:c9:05:fa:8d:f9:96:db:1d:00:b7:17:c0:da:b5:
d0:9b:8c:d5:8a:df:2c:82:e7:65:5f:01:71:0f:6b:
f6:ee:93:a7:06:0d:75:81:71:35:46:89:8a:7c:bb:
70:79:4f:ea:05:41:7d:f9:d9:da:de:ad:27:ab:21:
96:db:b6:63:68:2c:45:c1:65:fa:50:85:63:d2:ef:
ed:01:b0:d2:c8:fe:cb:32:40:86:1d:ec:5c:c8:75:
c3:3c:5d:0a:80:ed:5a:63:78:0d:2e:13:c3:a7:e6:
5a:7e:4b:bd:b7:59:2b:32:6c:2a:3c:a5:e9:83:48:
0f:60:4d:bd:c7:df:7c:42:54:ff:02:3e:c4:b4:a8:
2f:74:6c:e0:7d:4c:94:a6:be:dc:90:e5:95:7b:fd:
c4:be:30:a7:52:b0:19:9a:34:35:4f:6c:7a:7c:e2:
4b:95:4d:d5:0c:c5:61:c7:fd:70:28:9b:eb:81:07:
99:1b:cb:1d:52:f1:a3:91:5a:1b:df:45:b7:5a:a6:
6b:91:0d:6a:9c:7a:57:37:b0:5e:79:00:2c:c9:4f:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:13:4B:DD:1D:7A:F8:62:62:04:02:6A:03:A0:B6:F6:8A:A5:6E
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/86787BDC52C911EA93D1814FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.86.197.0/24
Signature Algorithm: sha256WithRSAEncryption
99:98:a3:22:e5:a0:57:2a:61:31:93:39:6a:06:39:ad:03:36:
a9:95:4d:76:01:61:d1:50:a0:95:dd:63:7e:a4:41:88:3f:71:
4e:8e:c7:6c:fd:b7:09:f1:91:ea:7d:16:22:20:06:4e:0c:01:
01:9a:b1:87:f0:5d:4b:5d:85:ad:52:47:16:69:36:8d:e4:6f:
9d:ab:8f:8f:7a:7d:b6:e0:a9:1f:58:a4:86:21:d4:fd:13:8a:
3d:5d:f0:96:70:1c:34:1d:b9:e2:e7:0c:29:e5:a8:4c:e9:76:
cd:af:fe:9a:1f:74:4b:2e:82:f7:92:cf:14:69:c8:2b:16:94:
1b:36:0c:eb:35:37:e5:c4:1a:48:dd:d0:a3:48:73:cd:73:65:
9f:bf:c5:97:c4:3f:b2:d1:9a:25:6f:90:65:58:0e:64:2f:1b:
e6:14:f7:df:1d:de:5d:cb:c4:78:b2:29:f9:1b:a1:c6:75:e6:
75:fb:26:6c:dd:cf:c9:ba:3c:9b:75:9c:94:5a:90:fa:f7:a9:
b1:ce:10:59:6e:01:36:ea:fb:5c:c2:35:df:db:79:35:86:4b:
2f:01:de:d6:cd:b5:a6:69:8b:3c:3f:b8:2b:07:e7:15:a6:38:
ad:e2:0f:2a:17:16:84:df:5a:28:d0:e2:61:70:8f:89:f9:91:
6d:92:0e:20
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICPAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYwNzA2MTUxMjA4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiYzVjOC0wZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt/zlEOEB5AsF9NT7sWLQzZU/gDnNTpHRl3mngp/InAIcs7am8Xhsgt2weGtA
yQX6jfmW2x0AtxfA2rXQm4zVit8sgudlXwFxD2v27pOnBg11gXE1RomKfLtweU/q
BUF9+dna3q0nqyGW27ZjaCxFwWX6UIVj0u/tAbDSyP7LMkCGHexcyHXDPF0KgO1a
Y3gNLhPDp+Zafku9t1krMmwqPKXpg0gPYE29x998QlT/Aj7EtKgvdGzgfUyUpr7c
kOWVe/3EvjCnUrAZmjQ1T2x6fOJLlU3VDMVhx/1wKJvrgQeZG8sdUvGjkVob30W3
WqZrkQ1qnHpXN7BeeQAsyU+WVQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEr4E0vd
HXr4YmIEAmoDoLb2iqVuMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvODY3ODdCREM1
MkM5MTFFQTkzRDE4MTRGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0lbFMA0GCSqGSIb3DQEBCwUAA4IBAQCZmKMi5aBXKmExkzlqBjmt
AzaplU12AWHRUKCV3WN+pEGIP3FOjsds/bcJ8ZHqfRYiIAZODAEBmrGH8F1LXYWt
UkcWaTaN5G+dq4+Pen224KkfWKSGIdT9E4o9XfCWcBw0Hbni5wwp5ahM6XbNr/6a
H3RLLoL3ks8UacgrFpQbNgzrNTflxBpI3dCjSHPNc2Wfv8WXxD+y0Zolb5BlWA5k
LxvmFPffHd5dy8R4sin5G6HGdeZ1+yZs3c/JujybdZyUWpD696mxzhBZbgE26vtc
wjXf23k1hksvAd7WzbWmaYs8P7grB+cVpjit4g8qFxaE31oo0OJhcI+J+ZFtkg4g
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:25 2026 by rpki-client