
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/3B0846F0C5D611F1B29708F63511F970.roa
File: 3B0846F0C5D611F1B29708F63511F970.roa (raw, json)
Hash identifier: VE5uF6QGy6N2FYwuX/EEEPet8loY0bQFu6ZCLSfP2s8=
Subject key identifier: 17:9E:41:10:FB:47:65:43:59:E7:80:56:2B:C9:2E:14:B3:A7:FB:F0
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0F08
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/3B0846F0C5D611F1B29708F63511F970.roa
Signing time: Mon 12 Oct 2026 00:47:34 +0000
ROA not before: Mon 12 Oct 2026 00:47:34 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 218780
IP address blocks: 61.15.195.0/24 maxlen: 24
61.15.197.0/24 maxlen: 24
61.15.199.0/24 maxlen: 24
61.15.202.0/24 maxlen: 24
61.15.204.0/24 maxlen: 24
61.18.160.0/24 maxlen: 24
61.18.162.0/24 maxlen: 24
61.18.164.0/24 maxlen: 24
61.18.172.0/24 maxlen: 24
61.18.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 06:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3848 (0xf08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Oct 12 00:47:34 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6acc2e26-0769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:62:f5:ab:d7:a6:5e:3a:1d:fc:af:e7:92:
b9:23:76:6f:a3:9a:f2:3b:be:e6:14:fd:f8:b0:55:
ed:d1:d9:b6:cf:59:19:ce:d5:e9:33:ae:8f:17:ea:
6f:02:56:aa:f8:98:d0:87:93:73:b1:8a:ac:2d:a4:
f8:dc:24:54:89:6c:e0:ee:1a:2d:d3:08:a2:cf:21:
40:97:ba:e1:ff:d8:db:32:1e:c3:85:13:29:34:cc:
74:18:e9:e3:14:72:29:c9:b8:23:6e:b7:14:4e:5e:
0d:b0:19:82:7b:ed:ec:93:0b:e1:ba:70:39:b2:80:
cd:51:71:88:dc:ed:71:f2:22:92:52:42:94:65:4a:
f0:e2:40:84:2c:1e:d1:ab:df:8f:ad:fc:80:23:4a:
22:4d:6c:3a:4c:ae:c3:d4:52:a8:0e:f9:71:09:15:
70:69:1d:d2:9a:8b:b7:dc:ce:b2:e0:ec:55:03:b1:
87:14:16:4b:75:0d:8a:f8:ab:93:ef:30:99:7d:a8:
31:e7:b6:70:94:9e:e3:4d:fd:f9:9a:a7:bc:01:9f:
bb:38:42:47:b9:15:75:7e:20:90:16:e7:8b:f9:c2:
1b:b4:fe:6d:c7:9f:51:cc:3e:f4:24:d4:6d:54:6d:
39:18:c8:da:44:a6:ae:94:b3:c2:68:31:ea:1d:7b:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9E:41:10:FB:47:65:43:59:E7:80:56:2B:C9:2E:14:B3:A7:FB:F0
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/3B0846F0C5D611F1B29708F63511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.15.195.0/24
61.15.197.0/24
61.15.199.0/24
61.15.202.0/24
61.15.204.0/24
61.18.160.0/24
61.18.162.0/24
61.18.164.0/24
61.18.172.0/24
61.18.174.0/24
Signature Algorithm: sha256WithRSAEncryption
73:84:e9:ad:35:18:79:36:ae:ea:6d:43:bf:81:15:91:91:19:
42:53:a9:41:05:fc:4c:e6:b9:47:70:ba:31:93:98:8e:3d:73:
4d:47:c5:49:94:38:20:a0:0d:f0:d5:19:36:07:1a:fe:24:c8:
9b:0e:8d:af:30:f1:3e:d6:74:1b:1a:28:bb:22:1b:92:9e:4b:
6f:44:e8:9a:d3:b2:18:1a:10:cd:c4:9e:9a:f5:dd:34:72:4a:
22:5e:d9:06:fe:8e:cc:f0:08:39:89:8c:dd:b0:55:10:05:ed:
eb:4c:e1:c7:ef:d2:16:fe:ed:90:6d:9e:6f:28:41:47:1c:b9:
38:df:50:aa:41:7a:43:b9:18:31:56:3c:41:c4:a5:fd:81:78:
14:86:8d:57:cd:c8:7e:4c:8a:45:ff:a7:e7:bf:85:d9:f5:1d:
81:35:d7:ee:73:60:12:1d:99:9e:be:1c:7e:e6:d3:ab:41:51:
a6:71:da:37:4b:48:fb:e8:29:f9:ae:6e:8b:f7:fc:8a:c9:94:
77:91:ac:73:fb:6a:0a:a7:ea:56:28:1a:ca:a5:4c:b3:7a:a9:
a4:86:a0:2c:9b:d6:8c:de:94:fc:ee:3b:e7:bb:ab:d1:89:f2:
c1:c8:9d:35:5a:cc:24:61:43:eb:c2:f1:5f:fd:2c:78:0d:9b:
77:27:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:32:43 2026 by rpki-client