
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/E86962E47E9A11F1BA87E1CE61A30FBC.roa
File: E86962E47E9A11F1BA87E1CE61A30FBC.roa (raw, json)
Hash identifier: r053k+9BngwOs8liZ7NrLuZJcmmTygGFd/pGOUQXUUY=
Subject key identifier: BE:B3:A9:3F:6F:9F:30:D4:50:EA:14:F6:7F:37:4E:F9:02:5C:4A:DC
Certificate issuer: /CN=A9136BEA/serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
Certificate serial: 3D
Authority key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/E86962E47E9A11F1BA87E1CE61A30FBC.roa
Signing time: Mon 13 Jul 2026 09:12:01 +0000
ROA not before: Mon 13 Jul 2026 09:12:01 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 137967
IP address blocks: 151.158.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl
rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
Validity
Not Before: Jul 13 09:12:01 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a54abe1-cc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:ee:04:85:3b:80:a9:e1:63:09:c2:2d:0a:
fa:aa:1e:ac:9f:91:7b:b2:43:19:ae:11:74:e6:c8:
67:d4:6a:1d:b7:2b:44:5e:c4:42:a0:04:de:e3:fc:
bd:9f:03:92:e1:83:85:f1:bc:4d:16:53:74:99:e9:
87:7c:3a:67:b2:b7:f8:e8:02:4d:91:4f:10:6c:1a:
9a:92:98:f5:90:96:47:9f:0a:7a:24:ee:2a:b7:1d:
cb:ec:8a:af:fb:b3:f9:01:47:ed:2f:c1:b9:ce:4e:
0d:a0:94:e4:b5:e2:b7:d4:6c:65:45:36:40:7b:56:
ac:af:53:23:24:1f:c9:2c:5e:56:af:b5:f3:e9:47:
27:ad:cd:9b:94:b1:b7:78:13:59:a3:b8:b3:53:b7:
77:36:a8:6b:89:d5:e2:d8:fc:dd:cf:b6:da:79:14:
0f:dc:e1:c4:54:99:b3:45:26:e9:1d:f6:a8:7d:53:
b5:83:b5:17:f9:67:cf:a2:4c:68:99:c4:0f:54:b1:
45:59:a3:1c:ac:eb:05:46:54:bf:08:ce:90:1a:94:
73:ac:71:d9:f7:a7:92:6f:31:70:99:4a:28:86:1f:
8c:81:8a:2f:11:0e:ba:24:e1:60:de:c5:cd:d5:6f:
d3:7b:53:a6:7e:9b:4c:f2:11:1c:42:c2:e9:19:40:
3e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B3:A9:3F:6F:9F:30:D4:50:EA:14:F6:7F:37:4E:F9:02:5C:4A:DC
X509v3 Authority Key Identifier:
keyid:48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/E86962E47E9A11F1BA87E1CE61A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.111.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a5:d4:82:ba:74:cf:c1:cd:97:1a:5d:32:27:33:78:eb:30:
00:22:65:27:16:25:c3:42:69:c1:ca:e3:bc:4a:41:c0:94:cd:
1a:a4:fe:93:40:8e:64:e3:29:d8:1e:01:75:ec:1d:63:e7:ce:
c4:13:fe:3d:4e:e1:9a:98:ac:b9:eb:7e:24:7e:d4:ad:7e:3f:
94:ab:5b:34:ab:74:34:00:1a:17:02:d6:0e:bf:2c:bd:09:82:
b1:b1:0e:f9:d6:b1:22:14:d2:ed:a7:7b:0f:d3:e7:ce:a3:59:
23:e8:c6:48:2b:d0:e0:3f:05:e1:78:ab:1e:c9:7f:80:59:bd:
c2:60:e3:7b:3e:6e:ac:b4:04:88:cc:f7:2a:18:c7:59:8c:f4:
40:93:b5:bf:b7:31:69:ab:ce:8a:c7:be:44:0e:a7:12:15:20:
0b:e6:97:43:ff:84:18:a3:7a:44:01:b2:12:0a:b4:5f:1a:4e:
66:c3:d9:77:6b:ec:4d:9e:51:a0:64:20:9b:d8:b2:d3:76:fd:
4f:ce:78:18:f1:a1:95:ad:d9:e2:56:26:9b:cf:26:44:dc:e1:
95:ef:e1:75:e8:ae:4e:34:58:a6:3e:01:10:94:fe:ac:e4:f9:
aa:49:0d:0c:ea:df:9e:79:57:e5:46:ca:d0:3e:0d:23:93:f7:
80:df:db:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:19:36 2026 by rpki-client