
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/881BE2C652C911EA93D1814FC4F9AE02.roa
File: 881BE2C652C911EA93D1814FC4F9AE02.roa (raw, json)
Hash identifier: /f90nydRE4YJkCtUujkVthDc4JrvBobV5C93Jo1E/GM=
Subject key identifier: 5C:45:02:BD:9D:11:08:71:7F:B7:69:5D:7F:40:94:6E:42:E0:0E:3F
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3C4E
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/881BE2C652C911EA93D1814FC4F9AE02.roa
Signing time: Mon 20 Jul 2026 05:50:06 +0000
ROA not before: Mon 20 Jul 2026 05:50:06 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38081
IP address blocks: 116.206.112.0/22 maxlen: 24
122.144.29.0/24 maxlen: 24
122.144.30.0/24 maxlen: 24
122.144.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15438 (0x3c4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 20 05:50:06 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5db70e-9e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:69:fd:f5:58:cd:c5:8c:80:aa:57:13:13:e6:
61:82:f0:54:44:ec:64:1b:74:d5:13:6d:86:6a:17:
ba:66:3e:6e:d5:44:9c:a1:fe:89:c9:ed:ec:18:d8:
37:ab:18:0d:0b:e3:c6:a9:a4:05:cb:b3:1d:d3:69:
8f:c9:47:a8:89:03:3f:f4:51:ae:a9:5e:c6:1e:4d:
87:ff:c6:85:c7:d2:af:05:cb:16:39:6f:e4:65:50:
5f:7b:07:93:3a:8f:dd:29:4c:e8:a5:fe:a6:4a:3b:
60:41:bf:fb:6f:29:80:c7:fe:19:f7:a0:7a:10:52:
ee:04:d0:75:25:6e:cd:86:81:d5:94:b5:21:1e:2f:
6a:69:58:8b:5f:a8:24:67:e7:a4:6d:a1:79:05:e5:
80:9e:4a:c7:48:ed:5b:b1:ff:49:38:3a:7c:37:8f:
d1:9c:8a:74:0e:d5:9d:74:df:af:6a:26:20:25:ab:
da:8b:19:99:f0:01:05:3b:96:e2:db:c5:35:7c:a4:
f7:58:d0:a5:d8:31:26:ef:24:e0:56:18:18:50:04:
60:eb:76:0c:48:f7:fc:ce:5c:9e:39:aa:11:e0:42:
8b:83:6b:16:48:c5:13:cb:92:2f:3b:95:e6:1f:1a:
5d:b1:42:e3:42:ac:0d:27:2c:f2:67:12:74:4c:93:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:45:02:BD:9D:11:08:71:7F:B7:69:5D:7F:40:94:6E:42:E0:0E:3F
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/881BE2C652C911EA93D1814FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.206.112.0/22
122.144.29.0-122.144.31.255
Signature Algorithm: sha256WithRSAEncryption
6b:8a:0a:73:7c:ba:ed:e9:de:95:8d:c0:e0:f7:61:d8:37:fa:
39:10:d8:29:56:af:ab:97:c2:cf:69:1b:e8:f8:49:b8:bd:c0:
39:6d:f3:e6:a0:a2:4f:d7:32:fa:89:a1:20:d9:8e:34:2c:4c:
fc:15:f8:19:04:db:a5:b5:be:e5:9d:72:b0:9c:1c:60:15:9c:
00:25:10:1c:57:3c:df:70:bc:47:85:f4:14:e4:2f:14:7b:2a:
d9:88:3c:e7:a8:47:13:e7:5b:ce:75:f1:2a:df:cf:44:5e:aa:
4b:67:46:59:cc:76:91:30:61:80:0e:b5:66:55:14:06:ff:35:
00:bd:ee:eb:41:ea:85:55:37:80:57:7a:42:bc:83:b5:3a:b2:
c8:f0:34:07:97:be:63:a1:2e:08:ea:75:d0:19:07:75:b8:c8:
ea:48:12:43:4a:86:72:33:47:49:14:fb:cb:5f:b8:9d:05:54:
a9:16:5b:0a:68:22:6d:68:20:1f:47:b0:ca:97:77:2a:12:1e:
b3:0b:41:50:21:86:95:d3:3d:bf:62:b1:d8:6f:4d:f2:50:8f:
37:d2:81:1b:2e:55:cb:7f:b6:43:4a:8d:78:e2:13:9e:17:2b:
f8:5b:e5:bc:72:20:55:57:ad:91:00:68:fc:a0:0c:55:17:3a:
51:e5:cc:41
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICPE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYwNzIwMDU1MDA2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVkYjcwZS05ZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Gn99VjNxYyAqlcTE+ZhgvBUROxkG3TVE22Gahe6Zj5u1UScof6Jye3sGNg3
qxgNC+PGqaQFy7Md02mPyUeoiQM/9FGuqV7GHk2H/8aFx9KvBcsWOW/kZVBfeweT
Oo/dKUzopf6mSjtgQb/7bymAx/4Z96B6EFLuBNB1JW7NhoHVlLUhHi9qaViLX6gk
Z+ekbaF5BeWAnkrHSO1bsf9JODp8N4/RnIp0DtWddN+vaiYgJavaixmZ8AEFO5bi
28U1fKT3WNCl2DEm7yTgVhgYUARg63YMSPf8zlyeOaoR4EKLg2sWSMUTy5IvO5Xm
HxpdsULjQqwNJyzyZxJ0TJNeJwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFFxFAr2d
EQhxf7dpXX9AlG5C4A4/MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvODgxQkUyQzY1
MkM5MTFFQTkzRDE4MTRGQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQCdM5wMAwDBAB6kB0DBAV6kAAwDQYJKoZIhvcNAQELBQADggEBAGuK
CnN8uu3p3pWNwOD3Ydg3+jkQ2ClWr6uXws9pG+j4Sbi9wDlt8+agok/XMvqJoSDZ
jjQsTPwV+BkE26W1vuWdcrCcHGAVnAAlEBxXPN9wvEeF9BTkLxR7KtmIPOeoRxPn
W8518Srfz0ReqktnRlnMdpEwYYAOtWZVFAb/NQC97utB6oVVN4BXekK8g7U6ssjw
NAeXvmOhLgjqddAZB3W4yOpIEkNKhnIzR0kU+8tfuJ0FVKkWWwpoIm1oIB9HsMqX
dyoSHrMLQVAhhpXTPb9isdhvTfJQjzfSgRsuVct/tkNKjXjiE54XK/hb5bxyIFVX
rZEAaPygDFUXOlHlzEE=
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:39 2026 by rpki-client