
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/72217E6ABE6D11F18AFCE8F63111F970.roa
File: 72217E6ABE6D11F18AFCE8F63111F970.roa (raw, json)
Hash identifier: WevM6WINVENuhs0s/UZf0yrKeC4r+qElRKc+QHqSlpE=
Subject key identifier: 3A:30:81:67:A9:87:9E:E6:11:8D:14:9B:8B:EF:A9:03:CD:4B:3C:C0
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0EF6
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/72217E6ABE6D11F18AFCE8F63111F970.roa
Signing time: Fri 02 Oct 2026 14:27:50 +0000
ROA not before: Fri 02 Oct 2026 14:27:50 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 218955
IP address blocks: 61.18.151.0/24 maxlen: 24
61.18.154.0/24 maxlen: 24
61.18.156.0/24 maxlen: 24
61.18.158.0/24 maxlen: 24
61.18.217.0/24 maxlen: 24
61.18.219.0/24 maxlen: 24
61.18.221.0/24 maxlen: 24
61.18.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 19:46:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3830 (0xef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Oct 2 14:27:50 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6abfbf66-651f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:ea:ed:44:2c:d1:74:e7:c9:5a:44:d7:68:
7f:91:ed:99:4b:27:05:14:06:14:94:b4:dd:9d:81:
96:0a:cb:32:f5:17:2d:80:a8:ce:37:15:1c:7d:b6:
71:47:3b:79:71:e6:7a:dc:09:6f:02:27:47:31:76:
d9:50:df:16:79:e0:c1:8c:92:d2:ea:b7:af:fa:b7:
aa:59:ba:eb:0f:b7:5f:b4:83:50:54:07:9f:15:bd:
b3:06:cc:c4:c8:da:ac:3f:9f:25:0e:d1:68:0a:73:
54:6e:af:24:48:b4:33:58:98:e1:28:f6:7a:49:cd:
bd:79:11:12:e1:df:42:fd:44:76:dc:66:e0:ae:24:
5e:6b:65:5a:8a:42:ee:2a:cc:84:9a:35:66:6e:6f:
90:0e:cf:96:cd:a8:f4:e0:7e:53:6c:90:a8:8c:3d:
29:e9:aa:67:fb:ed:6d:ac:7d:13:55:40:3a:c3:7d:
cc:f8:83:1f:73:cf:ef:e4:1d:53:e5:20:9b:eb:ec:
ca:63:0c:d2:33:a1:0e:38:eb:35:58:89:60:8b:41:
2a:7e:fd:ac:db:9c:e3:4f:2c:a3:4f:05:2b:d2:81:
2c:04:14:9e:e7:d8:b3:34:d1:56:b2:fb:8f:83:9b:
89:06:31:1d:7b:f0:81:d9:92:06:ee:ff:53:d9:0f:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:30:81:67:A9:87:9E:E6:11:8D:14:9B:8B:EF:A9:03:CD:4B:3C:C0
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/72217E6ABE6D11F18AFCE8F63111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.18.151.0/24
61.18.154.0/24
61.18.156.0/24
61.18.158.0/24
61.18.217.0/24
61.18.219.0/24
61.18.221.0/24
61.18.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1d:fe:6a:ce:17:d2:7d:84:3c:6d:84:0a:10:d2:5e:42:f1:
1e:2e:70:57:7a:77:ed:23:59:c5:d4:08:90:c4:05:f8:91:52:
cf:03:28:0e:8f:30:58:29:e1:83:5a:55:e4:4b:95:bb:f9:71:
6b:f6:e0:88:d4:23:89:41:cb:63:ce:79:64:92:ca:e3:05:fc:
10:c7:9e:c4:22:c0:d7:94:6c:c2:e8:c9:bf:17:56:91:af:c0:
8a:6e:ee:da:23:ef:e8:ef:5f:53:47:75:57:b5:3e:75:f2:1b:
9e:b1:e9:5b:7a:81:70:4c:27:7d:f8:ca:6b:00:de:2b:b3:bd:
c6:17:47:54:55:8e:dd:37:2a:52:98:85:7a:2d:9c:84:71:57:
64:5b:fd:4b:0b:c5:d6:60:fa:8c:3b:39:d0:d8:17:76:da:62:
21:97:50:d4:42:84:fe:a2:92:07:73:c9:90:28:e6:c0:d1:39:
df:6c:37:05:8d:70:16:a7:b1:46:02:43:e9:fc:ca:9d:f0:66:
70:6c:ac:3f:6e:57:99:32:57:a5:36:61:63:9a:20:85:8e:1c:
5a:86:6b:49:77:18:bd:e0:78:d9:e6:66:fa:7b:79:89:40:e5:
2f:e3:fa:c1:77:84:6f:a7:82:15:33:f2:7b:1a:7b:bc:9e:a6:
ed:91:46:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:18:15 2026 by rpki-client