
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa
File: 7BF6BA42E91A11EF804C4B57C4F9AE02.roa (raw, json)
Hash identifier: LzFnSgF5fJeJl/6hW+un70CZDkl9rjX22N/j2ZoEE/Q=
Subject key identifier: 23:2B:8B:D4:8F:33:F0:78:F6:C2:EB:EB:40:8D:DB:7E:9A:30:74:28
Certificate issuer: /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
Certificate serial: 014E
Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa
Signing time: Sat 03 Oct 2026 06:54:15 +0000
ROA not before: Sat 03 Oct 2026 06:54:15 +0000
ROA not after: Mon 01 Feb 2027 00:00:00 +0000
asID: 153557
IP address blocks: 163.61.14.0/24 maxlen: 24
163.61.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl
rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 05:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
Validity
Not Before: Oct 3 06:54:15 2026 GMT
Not After : Feb 1 00:00:00 2027 GMT
Subject: CN=6ac0a697-ca98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:e6:b6:f5:ff:18:a8:5a:54:a4:67:70:be:
4a:9f:d1:a9:56:1a:36:c6:ee:aa:fe:73:b4:92:f4:
a7:59:62:d3:8a:e6:55:57:25:d0:58:d4:57:a6:3c:
03:84:2f:62:ab:97:46:2c:e0:c0:6f:fc:95:be:65:
bd:4a:8a:99:b2:fc:d6:44:57:52:09:8c:91:5f:63:
64:5e:fe:53:9b:b9:aa:79:54:3a:41:b9:00:fe:76:
17:cf:6a:ed:10:be:58:e5:73:f0:02:28:89:14:72:
e1:eb:de:5e:21:80:84:b5:97:f5:22:c9:8c:71:e6:
d0:77:3a:30:20:ae:13:7f:56:2c:fe:2b:94:94:c5:
ef:b0:34:4a:dd:40:27:d2:f1:09:88:bb:86:cc:ca:
64:26:f8:da:fb:a6:50:5d:91:52:cf:3d:8e:cf:d6:
32:99:d0:2f:2b:d8:46:49:41:3e:ae:1e:0a:33:38:
72:37:31:e7:ed:3d:69:89:e1:9b:0e:0c:60:e1:ca:
ed:b8:f2:6c:53:65:f3:43:ec:ee:7b:b3:4a:50:04:
1d:35:36:21:42:f8:6a:3c:fb:16:0e:3d:65:5f:12:
c3:73:d3:9e:4e:d2:7f:f8:b9:1d:b3:34:0d:1f:c0:
17:80:3d:0a:46:81:b0:d1:3d:33:21:e4:d0:b5:55:
1e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2B:8B:D4:8F:33:F0:78:F6:C2:EB:EB:40:8D:DB:7E:9A:30:74:28
X509v3 Authority Key Identifier:
keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.14.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:c1:99:ad:21:98:27:a8:ec:40:19:12:57:0b:a4:37:9c:1c:
6c:f9:f7:fc:60:2d:b4:18:d8:9f:fd:bb:61:56:22:09:0b:ef:
50:ef:3e:67:3d:21:f2:08:e0:84:4e:2a:8f:16:01:8f:98:5b:
4f:b1:f6:f2:aa:42:20:bc:75:ee:6b:b4:af:c2:73:38:ef:c8:
14:5a:8b:c5:d7:40:ea:82:01:78:ce:d0:29:1f:9b:d7:d0:e6:
47:1a:b6:fd:f9:b0:98:60:64:4d:09:a8:22:97:9e:3d:c3:d3:
64:93:ee:44:69:55:22:1f:1e:b7:03:f4:79:af:26:4c:19:ad:
a6:2d:88:c4:ac:a5:cb:c5:cb:9c:45:16:58:98:e7:6e:53:b3:
fa:47:e0:f4:f8:d5:21:b1:6c:c8:a6:43:c1:26:4d:9b:20:6b:
71:86:65:94:cc:68:83:ea:aa:f9:74:7c:67:97:30:6e:a4:32:
01:15:ab:00:f7:01:d5:1a:38:1f:a9:a2:40:b3:07:d9:e6:3a:
04:2b:7e:bb:b4:92:1f:d9:7c:26:6f:22:5a:3f:50:30:66:65:
c3:73:25:3c:03:26:f6:00:5c:70:12:33:70:e6:c4:7b:3c:ff:
45:23:b5:7f:fe:d6:49:72:d4:78:4f:11:78:13:a9:6b:fb:4c:
f6:ed:0b:66
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFGRkQxMTAvBgNVBAUTKDEwNENGODcwNjNCNUVBQkYzNERFNEUyNUZFQ0U5QUI1
QUY3MzZDMTQwHhcNMjYxMDAzMDY1NDE1WhcNMjcwMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMwYTY5Ny1jYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArbjmtvX/GKhaVKRncL5Kn9GpVho2xu6q/nO0kvSnWWLTiuZVVyXQWNRXpjwD
hC9iq5dGLODAb/yVvmW9SoqZsvzWRFdSCYyRX2NkXv5Tm7mqeVQ6QbkA/nYXz2rt
EL5Y5XPwAiiJFHLh695eIYCEtZf1IsmMcebQdzowIK4Tf1Ys/iuUlMXvsDRK3UAn
0vEJiLuGzMpkJvja+6ZQXZFSzz2Oz9YymdAvK9hGSUE+rh4KMzhyNzHn7T1pieGb
Dgxg4crtuPJsU2XzQ+zue7NKUAQdNTYhQvhqPPsWDj1lXxLDc9OeTtJ/+LkdszQN
H8AXgD0KRoGw0T0zIeTQtVUe5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCMri9SP
M/B49sLr60CN236aMHQoMB8GA1UdIwQYMBaAFBBM+HBjteq/NN5OJf7OmrWvc2wU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUZGRC80MkVCMDUzNERE
MzgxMUVGOUMzNDY3NDVDNEY5QUUwMi9FRXo0Y0dPMTZyODAzazRsX3M2YXRhOXpi
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VFejRjR08xNnI4MDNrNGxfczZhdGE5emJCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTFGRkQvNDJFQjA1MzRERDM4MTFFRjlDMzQ2NzQ1QzRGOUFFMDIvN0JGNkJBNDJF
OTFBMTFFRjgwNEM0QjU3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoz0OMA0GCSqGSIb3DQEBCwUAA4IBAQCKwZmtIZgnqOxAGRJXC6Q3
nBxs+ff8YC20GNif/bthViIJC+9Q7z5nPSHyCOCETiqPFgGPmFtPsfbyqkIgvHXu
a7SvwnM478gUWovF10DqggF4ztApH5vX0OZHGrb9+bCYYGRNCagil549w9Nkk+5E
aVUiHx63A/R5ryZMGa2mLYjErKXLxcucRRZYmOduU7P6R+D0+NUhsWzIpkPBJk2b
IGtxhmWUzGiD6qr5dHxnlzBupDIBFasA9wHVGjgfqaJAswfZ5joEK367tJIf2Xwm
byJaP1AwZmXDcyU8Ayb2AFxwEjNw5sR7PP9FI7V//tZJctR4TxF4E6lr+0z27Qtm
-----END CERTIFICATE-----
Generated at Tue Oct 6 15:59:59 2026 by rpki-client