
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A9CFE2CA1E0211E9862ECE3FC4F9AE02.roa
File: A9CFE2CA1E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier: Fr4jTK9TpU04QaKPO4FJ7ehSO+PYcIYmRkFaaJs9d9Q=
Subject key identifier: 24:ED:7B:88:B5:E3:E4:D0:E8:27:E7:57:7C:57:E7:31:C4:D6:98:0B
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3C11
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A9CFE2CA1E0211E9862ECE3FC4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:12:27 +0000
ROA not before: Mon 06 Jul 2026 15:12:27 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38002
IP address blocks: 61.91.255.0/24 maxlen: 24
171.102.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15377 (0x3c11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:12:27 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc5db-5552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:0e:9b:80:12:51:32:1b:c9:c0:88:19:cb:
a7:0a:a0:b4:9e:c6:d8:4b:3f:e6:36:72:88:21:b6:
e6:9c:3b:51:a9:98:cb:9d:17:9b:11:e2:65:d2:86:
a9:81:87:e1:c3:7c:68:3e:e6:9a:fc:26:e9:02:b4:
69:52:f1:8e:5e:6d:99:1f:d6:35:a0:cb:f1:b4:67:
4b:d0:48:f7:51:fb:7e:53:8f:77:b4:21:49:00:92:
e4:f8:06:88:28:0f:c9:cb:ae:82:e8:e7:63:07:74:
22:e0:b4:45:c8:da:78:88:18:31:14:5a:49:6c:bf:
03:17:79:36:32:95:57:03:be:41:21:3a:d7:bc:95:
f3:8a:99:7d:e5:b0:97:85:7f:de:0b:6a:c3:07:a1:
da:4f:97:0d:6c:49:b4:10:1a:63:99:e8:d9:23:3f:
b4:31:d7:b7:57:d0:80:c5:b8:de:33:cb:33:85:87:
74:66:6c:bd:bc:c8:0f:2b:a6:d1:34:19:d6:d3:40:
75:66:e3:09:cf:73:65:6f:33:d8:f4:0c:e7:84:1c:
2c:ea:d8:6c:b3:6a:f9:80:7d:6a:a6:ca:b8:46:c0:
96:d7:63:72:81:98:11:7d:fa:4c:fe:c4:87:81:61:
a7:53:8e:2c:07:48:65:11:c6:f9:79:a1:9c:5e:91:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:ED:7B:88:B5:E3:E4:D0:E8:27:E7:57:7C:57:E7:31:C4:D6:98:0B
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A9CFE2CA1E0211E9862ECE3FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.91.255.0/24
171.102.36.0/24
Signature Algorithm: sha256WithRSAEncryption
84:02:4e:33:ad:83:ac:61:75:23:f3:ef:bd:64:a2:bd:65:fb:
0e:1d:a4:59:6e:e9:ce:85:e5:77:7d:3c:07:ed:0a:e1:97:5d:
f7:ad:0a:55:e4:ba:68:02:a6:03:ef:ce:f4:84:21:11:1e:74:
75:c1:51:39:35:9c:6d:76:27:a2:72:fb:f9:95:93:ab:ab:be:
4b:99:3b:fe:ec:76:2c:e3:86:1c:18:01:6e:38:08:d8:63:d5:
b4:52:34:42:9f:32:69:05:83:66:05:bd:cb:f1:98:ef:54:2c:
da:7d:88:cd:9f:39:eb:45:82:88:e2:f0:db:56:bb:08:85:b9:
a9:7b:b0:f7:32:36:8a:f0:a3:79:4d:c7:a0:30:ac:e6:e9:32:
48:18:5f:b3:54:b0:36:64:8d:ea:de:c6:7c:c8:01:8c:69:b4:
88:75:77:42:3b:de:0e:73:1c:c6:55:5a:7e:5b:dc:c5:19:05:
7b:4d:11:f7:f7:03:ad:f4:f1:26:de:d9:c7:4f:8d:a7:dc:e0:
e0:c5:b3:13:3b:87:ff:8d:b6:f0:84:c5:1a:4c:67:73:6a:51:
04:4b:d2:80:3b:8e:fc:8d:34:4b:f6:f4:da:69:6d:04:7b:6d:
62:b7:1c:3d:cc:37:fe:2c:9a:56:f0:d1:42:eb:0f:2f:57:05:
d9:66:68:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:03 2026 by rpki-client