
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa
File: FC968EB81E0311E991EB9A44C4F9AE02.roa (raw, json)
Hash identifier: OE3f95hIAkOebtXudd4P6/nr304eNbr+PWwRyKJS+Sg=
Subject key identifier: D6:FF:54:1A:F3:36:B8:CB:C6:D7:5E:DB:C0:3B:73:E7:62:7C:39:AE
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3C37
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:13:43 +0000
ROA not before: Mon 06 Jul 2026 15:13:43 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 7630
IP address blocks: 110.170.223.0/24 maxlen: 24
210.86.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15415 (0x3c37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:13:43 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc627-b1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:89:c4:26:99:1d:d0:eb:1d:9e:6f:76:13:
70:09:8b:b4:a2:b4:fe:08:a0:a4:95:1d:50:f8:f2:
db:7d:30:f9:c6:6e:63:93:b7:33:89:dd:b6:ca:45:
0d:d5:24:8d:34:8b:54:9b:6d:fb:4d:c6:77:16:95:
12:34:21:e6:54:2b:6e:e9:9a:a4:85:f1:cc:46:99:
f3:b6:f6:33:a8:8b:3c:a9:ff:d1:4a:44:3e:e5:1b:
88:5d:fc:71:c9:dd:86:69:6c:01:be:02:b3:d9:36:
f6:bf:51:bc:65:e8:16:f8:c8:8e:97:1c:2a:9a:17:
6f:a5:2c:fd:7c:bf:6e:a7:60:9a:0d:21:44:98:67:
9e:a5:bc:36:31:64:8e:9b:d8:91:04:6f:d5:75:93:
9b:8b:6b:e8:c0:4b:8c:ac:96:13:b2:6f:b7:24:d6:
7f:03:c3:36:30:67:69:7f:87:d6:2d:28:eb:69:28:
c2:9d:86:50:b8:60:61:f9:4f:bb:b6:28:a3:64:cd:
3d:94:df:e1:0b:62:f4:f7:db:93:9b:3d:4e:59:fc:
ff:73:23:98:50:5d:f1:92:ab:05:75:aa:6a:11:64:
1b:2a:42:47:d6:b5:df:5b:ba:ba:43:6d:45:ae:67:
c2:b4:bc:ed:b6:6b:d9:d8:57:b9:d9:74:11:76:ac:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FF:54:1A:F3:36:B8:CB:C6:D7:5E:DB:C0:3B:73:E7:62:7C:39:AE
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.170.223.0/24
210.86.192.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ea:6f:ec:67:73:5c:f1:6f:fe:d0:8c:41:98:51:78:2d:df:
cd:6c:32:04:ce:f5:cf:17:b5:68:fb:13:9f:95:14:34:28:99:
df:c3:e6:57:80:dc:c6:d2:2f:35:c9:5c:b6:10:b5:b1:a8:1d:
21:0e:4e:c6:5e:ab:5e:33:2f:e4:d7:a2:0f:16:b9:00:da:6e:
03:3f:35:ea:17:e2:6d:87:90:a9:9f:fe:da:58:0c:75:27:6f:
2e:cf:b3:3a:d0:65:2b:a0:a2:19:5b:e1:98:55:60:7a:12:8a:
d8:71:4e:6f:2d:93:10:a1:ef:30:be:50:0e:28:1d:30:21:f5:
35:4c:42:ff:18:59:8e:ba:3c:91:63:80:ed:78:28:dc:a4:00:
fa:ae:39:a5:cd:b3:9a:f4:83:20:86:e4:33:66:07:dc:c6:15:
ed:bc:2d:64:e1:df:72:fe:7f:aa:ac:87:d8:b0:36:3f:a0:df:
b6:47:5e:d5:1b:6d:0f:af:04:73:8d:00:13:40:2e:0a:c5:4d:
14:21:4c:7f:53:5d:db:68:6c:9c:01:62:d3:20:4d:78:fe:35:
0f:7b:13:62:2e:cc:41:25:a4:73:60:79:fb:0f:d7:2a:07:2d:
f6:e0:99:e6:b3:25:4b:f0:c8:1b:ce:5c:80:dc:48:8b:86:ef:
bc:e8:42:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:16 2026 by rpki-client