
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/73399D50BE6D11F18AFCE8F63111F970.roa
File: 73399D50BE6D11F18AFCE8F63111F970.roa (raw, json)
Hash identifier: iM33Zpf8sj+nvummO+UckwTNPjvbzLmUbeAOaCxN1dw=
Subject key identifier: 2A:29:1A:8A:AC:A8:BC:D8:3A:95:91:E5:84:32:66:15:5B:6C:7C:22
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0EF7
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/73399D50BE6D11F18AFCE8F63111F970.roa
Signing time: Fri 02 Oct 2026 14:27:52 +0000
ROA not before: Fri 02 Oct 2026 14:27:52 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 219075
IP address blocks: 61.18.134.0/24 maxlen: 24
61.18.151.0/24 maxlen: 24
61.18.154.0/24 maxlen: 24
61.18.156.0/24 maxlen: 24
61.18.158.0/24 maxlen: 24
61.18.190.0/24 maxlen: 24
61.18.202.0/24 maxlen: 24
61.18.212.0/24 maxlen: 24
61.18.217.0/24 maxlen: 24
61.18.219.0/24 maxlen: 24
61.18.221.0/24 maxlen: 24
61.18.223.0/24 maxlen: 24
61.18.238.0/24 maxlen: 24
61.18.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 23:39:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3831 (0xef7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Oct 2 14:27:52 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6abfbf68-abdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:88:07:ba:1a:c1:fc:1f:88:df:fc:be:de:
b2:5b:9a:eb:bf:67:8e:8d:34:c2:bf:bf:04:cf:36:
e1:d2:50:56:cc:6d:9f:51:f0:ee:42:70:7b:ff:24:
c3:60:6c:e3:6f:34:e5:f6:7e:e1:5f:e0:7a:92:7a:
9e:bb:75:a2:3a:e9:f4:6d:e5:de:80:2a:a9:44:4d:
38:10:46:ae:c1:ef:b0:8d:1a:d9:e3:5b:1c:43:b0:
ac:51:c1:e6:d8:67:a5:58:93:6a:8b:d9:92:fa:38:
d8:24:83:9f:b1:fa:95:8b:95:34:ca:2d:3d:cc:2b:
cd:19:e6:50:c7:b6:04:ac:d3:69:54:b7:11:2f:f6:
6b:c9:a8:63:46:3c:47:1a:a8:ab:bb:4a:a1:6a:bb:
8d:d5:02:32:6b:f4:78:07:d4:7a:0f:b4:01:68:6f:
b7:81:ee:b2:cb:bb:06:2a:00:b6:d2:49:63:5c:fd:
f8:77:fc:47:5f:04:92:2f:94:0c:45:c3:02:2d:f2:
b6:ea:88:1e:e0:9a:66:90:2c:b4:cb:94:79:89:cf:
86:0b:82:1e:52:4c:5c:01:d6:d1:7c:72:96:4b:03:
a2:4e:ba:5b:ce:d8:8d:e2:7a:55:55:74:f8:0f:15:
b7:9f:35:ea:66:12:26:b9:88:6d:bd:37:e1:1a:77:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:29:1A:8A:AC:A8:BC:D8:3A:95:91:E5:84:32:66:15:5B:6C:7C:22
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/73399D50BE6D11F18AFCE8F63111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.18.134.0/24
61.18.151.0/24
61.18.154.0/24
61.18.156.0/24
61.18.158.0/24
61.18.190.0/24
61.18.202.0/24
61.18.212.0/24
61.18.217.0/24
61.18.219.0/24
61.18.221.0/24
61.18.223.0/24
61.18.238.0/24
61.18.254.0/24
Signature Algorithm: sha256WithRSAEncryption
77:62:08:8c:39:9e:9d:a1:93:e9:65:0f:15:b8:8f:1b:0e:08:
23:03:e8:7c:5d:60:b0:60:58:ce:b4:85:ef:2a:77:de:51:20:
4b:d4:49:b8:9d:31:8c:b7:62:c2:2c:79:13:ff:2b:d6:e4:fb:
8f:40:d9:a9:7c:f0:10:c7:f8:2e:c6:69:74:06:c9:f3:13:ae:
6a:0a:9d:ea:eb:a0:a6:b7:7d:3f:bf:9f:6f:51:f0:82:69:a8:
6c:fd:f4:8f:bc:0f:a7:11:ea:39:97:ec:a6:59:8a:89:79:4e:
c6:de:05:9b:a6:6a:fa:fc:03:4c:a8:93:e0:30:10:a3:f1:bd:
3f:3c:3e:a1:7e:84:84:ee:c6:78:3a:87:31:9a:7e:14:25:ec:
e0:7e:ec:93:8f:a2:d4:6f:aa:d8:16:e0:a5:8d:82:43:1a:34:
8a:49:e0:51:98:b5:15:8c:60:c4:f5:73:33:95:1d:03:1a:c3:
67:5a:f6:ad:6f:c1:a9:bc:c2:17:6a:fb:51:f6:c4:10:52:32:
d7:e0:ef:cc:31:8c:b6:05:01:37:00:15:31:c8:20:ee:fd:0c:
e4:16:39:b2:06:85:37:a3:9d:10:a8:65:23:a0:88:71:7f:ef:
33:0b:0a:ae:79:b6:f0:f5:c1:73:42:97:b8:be:4f:0f:66:7a:
c9:f9:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:42:30 2026 by rpki-client