
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D8B7D3B6634611EEA3C2FA0BC4F9AE02.roa
File: D8B7D3B6634611EEA3C2FA0BC4F9AE02.roa (raw, json)
Hash identifier: zuh/OgZKDU6nN+LfA0wv1roDLHfCxsrEsSTswUrZ4no=
Subject key identifier: 19:93:DA:BA:BD:81:69:6A:D6:CB:EC:A1:54:89:1C:40:0E:99:1E:12
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3BF7
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D8B7D3B6634611EEA3C2FA0BC4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:11:36 +0000
ROA not before: Mon 06 Jul 2026 15:11:36 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 151808
IP address blocks: 110.170.140.0/24 maxlen: 24
2001:fb0:10ba::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15351 (0x3bf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:11:36 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc5a8-593f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8c:62:49:d1:08:39:11:12:88:9f:5d:99:86:
5f:7f:27:46:f3:6d:63:43:ab:d2:c1:7d:2e:6b:dc:
30:95:d8:0a:2f:c9:4a:2c:21:65:50:8c:30:d5:06:
d4:0d:4a:ea:19:52:9c:81:bd:35:12:33:25:2f:98:
c8:1e:89:ea:4f:18:24:c7:01:e9:2b:87:fc:b4:a8:
63:a3:49:ee:40:0d:71:2e:0c:76:d0:7a:b2:75:80:
37:45:a8:b8:f0:ab:3c:4a:dd:a0:1f:ef:82:4f:d9:
b1:36:00:af:e7:f6:01:2f:bc:d3:65:e1:f3:2e:db:
ab:25:b3:cf:67:2f:98:28:0b:4f:e5:c2:54:37:1c:
20:41:00:39:53:0c:95:fa:0f:ef:20:96:fc:6e:00:
f3:1a:57:96:0b:c6:48:01:a3:f0:ac:60:6c:62:59:
ce:0c:e3:8e:ed:e6:e5:e6:d1:06:26:73:06:a3:57:
04:7e:6c:ce:37:d9:4b:25:2d:c6:b7:aa:98:96:98:
bf:0e:e1:2e:62:18:d8:5c:97:fb:87:2c:6c:69:24:
fd:25:36:32:55:c3:db:50:c1:91:62:ad:1a:66:29:
45:1c:d5:b0:8d:bb:4f:ca:a9:ad:45:a8:f5:97:bb:
d1:79:93:75:10:ed:98:cf:7f:21:28:92:73:c6:d6:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:93:DA:BA:BD:81:69:6A:D6:CB:EC:A1:54:89:1C:40:0E:99:1E:12
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D8B7D3B6634611EEA3C2FA0BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.170.140.0/24
IPv6:
2001:fb0:10ba::/48
Signature Algorithm: sha256WithRSAEncryption
64:97:95:77:d2:bd:d4:0d:ea:bc:a8:07:2f:3a:9b:ed:f5:c1:
f8:98:c6:1f:19:b1:76:a2:92:6d:e0:e6:5e:49:81:ab:04:31:
10:3a:c2:76:17:50:84:db:f7:5f:cf:77:95:84:50:4b:90:2d:
2c:3d:e4:0f:02:c3:a0:7f:48:74:54:76:db:f8:32:f9:fa:51:
73:c6:ea:9d:70:0b:5e:3a:c1:54:41:b6:8f:62:ba:4e:e1:dc:
d1:d5:8a:b3:ad:bc:5c:98:0b:5c:66:87:5c:13:a1:3b:9f:d6:
a3:9a:d0:76:77:cf:56:aa:11:47:5e:ed:1b:95:73:f1:f7:b6:
0f:bb:bf:03:37:74:01:17:d6:1e:c1:cd:ff:01:9e:c6:c8:8e:
31:fd:b2:5e:1e:fe:f0:f3:66:94:4a:d3:aa:ec:30:3a:af:78:
3e:6d:92:b9:df:2e:92:89:9b:f2:20:86:32:4e:2d:0e:f8:57:
46:c4:10:a0:b7:54:96:a6:c2:67:41:52:9b:74:f3:57:75:46:
7d:1c:06:98:18:01:59:97:6b:44:f5:ab:f1:ff:66:21:25:06:
10:87:de:c0:9c:b3:ff:32:be:d4:de:90:bc:2c:7c:4f:6c:3f:
ac:f5:2e:b9:b0:a7:ce:cb:cd:38:03:6f:46:fb:38:b3:75:2b:
a2:ab:35:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:14 2026 by rpki-client