
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D10AAB5883EF11F19876B2478FA30FBC.roa
File: D10AAB5883EF11F19876B2478FA30FBC.roa (raw, json)
Hash identifier: Db9ekFghEWQb9C6kNsnAZ0KWXWbVbqgEfHgKwGX7lz0=
Subject key identifier: F6:A1:19:FA:A9:1B:85:A0:60:07:AE:AB:19:3B:61:BA:16:7C:64:42
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3C4B
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D10AAB5883EF11F19876B2478FA30FBC.roa
Signing time: Mon 20 Jul 2026 04:02:25 +0000
ROA not before: Mon 20 Jul 2026 04:02:25 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 23891
IP address blocks: 203.144.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15435 (0x3c4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 20 04:02:25 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5d9dd1-3ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:06:d1:1c:d8:5d:b1:2b:c0:8f:13:d9:1a:
c9:2a:3e:cd:d7:4c:ef:b2:f5:71:cd:00:5f:01:fd:
1c:59:0d:3a:70:65:3a:ed:2b:7f:dd:92:92:94:95:
b9:3d:d9:99:99:43:ab:41:0e:6c:f4:6b:8c:9f:42:
ed:c6:45:e1:c9:24:43:17:1f:1b:1d:ea:ec:e8:06:
89:bc:14:5b:ed:be:d9:ea:0f:34:14:c9:57:48:65:
d1:40:43:48:fa:2c:ca:bc:47:4e:0f:f7:fc:cd:4a:
af:8d:d2:19:3e:b5:04:58:fd:24:f0:c5:86:4e:48:
b0:ea:a3:db:c4:56:8c:17:8f:8d:e8:d3:1d:bf:f5:
68:67:7b:93:2e:bf:b6:56:ef:ef:f2:bf:49:e7:a5:
b6:65:c4:18:ad:97:1f:b3:40:2b:dd:ad:b8:13:b1:
d5:a0:5e:76:b7:a0:3a:31:f4:37:24:25:a8:37:d1:
e0:2e:4a:52:7e:48:e5:a5:95:e2:2b:7f:f7:89:f9:
3b:e8:33:28:90:56:4a:7a:ea:ef:b8:47:d8:9c:b6:
3c:09:ed:e3:f9:86:8c:93:ea:d2:29:33:df:85:bf:
5a:dd:20:4e:cd:42:59:a6:c6:ad:30:94:81:04:ed:
4e:a0:fd:eb:91:da:54:3a:1e:25:5d:ba:4a:68:dd:
9c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A1:19:FA:A9:1B:85:A0:60:07:AE:AB:19:3B:61:BA:16:7C:64:42
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D10AAB5883EF11F19876B2478FA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.144.131.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c5:a1:2e:1b:14:15:96:76:a7:f6:ed:a3:ea:32:f0:25:ba:
10:b9:ea:58:ce:14:88:0e:0a:24:2c:82:70:91:28:ab:47:b1:
68:a2:32:a8:2b:b4:59:97:3b:34:84:47:19:37:03:bb:d3:4f:
d3:19:b6:77:38:ec:e3:b2:70:8c:5c:bb:ca:0a:92:51:75:c0:
ec:0e:e9:0d:ab:21:ce:f1:b6:43:f9:4b:0e:7b:7e:4a:ba:84:
a9:65:86:ee:9e:13:fa:c6:28:db:67:dd:a5:55:59:96:e6:bf:
51:fa:fa:f2:97:75:45:f7:75:a3:7e:ae:48:f0:0d:20:17:42:
13:51:3b:a2:36:bd:7a:2e:18:3a:ec:71:5c:b7:e6:07:5f:75:
90:60:5c:9e:52:d1:0a:55:e0:f7:29:6c:5d:a6:bc:82:b2:2b:
09:a3:ac:20:28:78:00:76:cd:17:c6:6b:5d:27:e2:77:5f:23:
21:78:d2:47:60:00:aa:6c:e0:11:29:0f:d9:ce:af:ec:1e:4f:
9e:30:50:36:0e:e4:d5:d1:e1:4a:5c:a9:f3:4f:a2:a6:5f:65:
75:55:63:a0:71:93:a6:a9:74:0e:37:0a:5c:aa:a1:c5:15:7a:
d4:fe:8e:84:87:44:79:f9:0c:46:fd:29:63:7b:05:b5:ff:59:
7c:d3:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:36:21 2026 by rpki-client