
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8956638252C911EA93D1814FC4F9AE02.roa
File: 8956638252C911EA93D1814FC4F9AE02.roa (raw, json)
Hash identifier: A3h1PjZG631PyIkZutEfWRDMj9zDxTnFtHeLFeIUscY=
Subject key identifier: F6:0A:A0:59:F8:A8:2B:FF:CA:B9:A3:96:A2:AC:B6:1A:A1:EF:1C:54
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3C33
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8956638252C911EA93D1814FC4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:13:35 +0000
ROA not before: Mon 06 Jul 2026 15:13:35 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 58544
IP address blocks: 61.91.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15411 (0x3c33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:13:35 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc61f-0e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:de:50:1f:1f:81:3f:4a:a5:60:37:d6:ca:
5f:41:d1:a1:1f:38:bb:9b:ae:25:f2:b7:04:ea:08:
c3:b5:3a:57:f7:ee:c2:e9:c0:4a:07:23:28:87:5c:
8f:7b:ce:1e:4f:86:9d:ae:58:7d:b0:b5:a3:23:a3:
22:a7:13:e4:fa:20:c3:5b:e2:75:f8:b4:4f:e6:55:
7f:bb:64:a2:3f:c4:9e:6c:ea:8a:5e:b0:24:57:05:
8b:39:3d:17:a2:84:67:47:b6:0e:ea:ff:13:87:10:
e9:ca:ea:22:56:28:54:80:d0:d9:e6:0c:e0:ea:ad:
1c:56:3e:58:aa:16:70:a1:fe:5f:df:b4:2e:ad:d5:
5a:72:91:1b:73:97:60:f4:53:40:37:10:54:4d:b8:
90:1b:b4:58:ea:df:40:0d:7a:b5:70:29:12:fc:e5:
bf:0e:58:37:83:e1:25:dc:ac:8d:c6:a6:d9:7f:44:
cf:e3:e0:65:2e:c4:ac:8d:f0:8b:dd:46:42:22:e9:
de:d7:7e:39:14:85:6c:e3:95:fe:73:c5:d0:b5:59:
be:dd:0c:bc:db:31:a2:a4:3f:04:12:cf:e6:db:7c:
05:e0:15:5e:94:1a:3d:43:e5:94:52:33:e7:4b:48:
53:16:2d:5e:f2:ef:d1:a8:08:49:60:bd:b2:67:9d:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0A:A0:59:F8:A8:2B:FF:CA:B9:A3:96:A2:AC:B6:1A:A1:EF:1C:54
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8956638252C911EA93D1814FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.91.87.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d1:4d:42:22:1c:6f:f4:a6:53:8d:62:f5:3f:28:9d:7d:40:
f8:86:a0:2c:88:12:48:83:55:95:c1:b3:9a:73:fa:3f:ea:0c:
b2:c9:8e:c0:c4:4b:59:69:26:4f:ba:7b:06:52:e2:c1:8a:70:
88:cc:9a:ab:9b:fd:fe:46:cc:2c:e1:26:a8:d5:72:35:c1:06:
63:b6:4a:78:b8:34:4a:fa:63:f1:d4:ca:41:f9:17:6d:19:0d:
d5:20:1d:22:31:ce:5c:60:1d:22:21:08:dc:16:2b:ba:d1:d4:
54:db:29:71:59:98:6a:28:dc:a1:bf:6b:4d:d4:2c:61:e7:c8:
04:05:86:d8:53:2f:c7:18:f6:e1:72:2e:79:99:9f:26:ca:20:
37:06:fe:f7:c2:99:e7:38:12:bd:7d:5a:ee:96:47:51:b9:38:
e2:ac:de:bc:c2:a0:69:e4:54:4e:50:da:27:ef:be:f4:80:8f:
ab:b6:4e:98:ed:29:4f:e5:63:6a:b5:2e:90:cf:42:65:cf:de:
90:94:1d:25:d2:23:29:4b:11:38:c2:9f:41:ff:00:c1:a4:a0:
2b:45:e8:6d:76:d7:95:b5:c4:80:00:b0:bc:fb:e1:0e:bc:a4:
79:01:a5:a3:4d:ea:d2:85:ed:eb:27:10:14:72:fd:a9:2e:c1:
3d:f8:f5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:06 2026 by rpki-client