
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa
File: 296C70368D0A11EE89E31163C4F9AE02.roa (raw, json)
Hash identifier: OZ16ozrcBe43MqjV6wXCXW5TxmwDgs2wbRKlJl3IPBg=
Subject key identifier: F2:DB:AC:C1:3D:F7:83:E9:EE:CA:2C:AE:32:15:64:FE:B5:E0:89:13
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 39DA
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa
Signing time: Mon 14 Jul 2025 14:50:45 +0000
ROA not before: Mon 14 Jul 2025 14:50:45 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 152130
IP address blocks: 110.170.136.0/24 maxlen: 24
2001:fb0:1081::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 14:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14810 (0x39da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:50:45 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68751945-34f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:e2:15:1e:77:d4:a8:b8:d9:4c:f5:67:ff:
91:95:33:4b:39:7e:1b:a4:e6:64:07:20:63:0a:e2:
04:21:82:f2:1a:8b:36:4c:f7:74:3c:34:d2:83:16:
23:4d:50:7a:92:bd:97:17:a5:e0:d3:42:16:9e:7a:
57:90:cb:f5:cf:ec:b9:2f:dd:cd:f1:8c:84:a2:31:
17:fc:47:8b:6a:cc:73:b4:a7:92:cd:f2:7a:8b:97:
ce:61:f6:33:84:9b:b0:53:62:12:dc:c3:bc:b3:d3:
4e:a4:14:06:98:9c:9a:b5:5f:29:e9:a1:b0:af:ea:
38:1d:92:5c:d3:e6:95:4c:05:eb:69:75:42:83:57:
a3:46:d5:9c:f5:8b:4d:5e:3c:ee:44:72:7d:c8:e7:
9c:b3:0a:28:f5:f6:52:6f:02:22:76:83:c5:0a:38:
63:da:0a:7e:dd:75:81:af:60:9e:0a:3d:fe:62:61:
a5:b6:21:d5:80:ec:ad:59:a6:5f:f7:e1:bc:be:90:
48:b0:42:aa:0d:22:0d:23:e7:19:43:01:37:9d:ab:
8b:4c:36:eb:ea:6c:f8:24:f3:86:6a:9c:2a:82:49:
a0:c0:a6:d3:40:63:b2:69:b8:05:ae:37:41:6f:b1:
be:8f:d5:11:46:7b:af:60:95:ce:f8:17:f2:8b:ba:
5b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DB:AC:C1:3D:F7:83:E9:EE:CA:2C:AE:32:15:64:FE:B5:E0:89:13
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.170.136.0/24
IPv6:
2001:fb0:1081::/48
Signature Algorithm: sha256WithRSAEncryption
8d:f3:42:c3:89:ae:24:b4:99:34:12:6e:3b:d4:dd:a4:c8:a8:
7a:a7:6a:01:ef:45:c1:5a:37:7f:e0:cd:b1:7f:93:aa:d1:fe:
e2:be:81:52:6a:fd:f2:88:98:1e:ca:7c:85:46:d3:c9:e1:71:
3b:37:6f:c1:d8:cc:9b:0d:5d:f6:32:7f:72:8d:42:45:9d:63:
ca:14:09:20:8a:9e:a1:39:4f:94:7d:64:0c:38:58:fd:dc:07:
a7:e4:ee:79:7c:7e:43:5e:79:54:e4:c2:31:96:73:66:63:65:
8a:1b:24:39:05:01:95:ab:c2:0b:24:84:e0:c9:7c:a6:8a:78:
59:f7:63:9b:0c:da:ad:24:4e:10:b0:b5:d8:f8:b2:75:54:a3:
68:47:28:71:84:7a:4b:0c:d2:6b:7f:89:f6:9f:f0:85:b2:9d:
ce:83:a2:71:e6:55:9b:bf:77:36:87:0a:01:67:80:13:4c:2c:
ee:e4:39:ea:23:3f:96:44:74:16:85:0f:b6:31:54:14:e4:36:
be:6b:3d:74:5c:c2:26:fe:da:95:19:3e:b5:df:37:20:9d:df:
e5:c8:3a:f1:3c:ee:59:fe:13:06:46:21:42:7f:59:f1:24:3a:
73:2d:6b:1d:58:e5:c7:b8:4b:3a:15:ce:37:ba:c6:d8:5a:ed:
61:40:31:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 07:09:09 2025 by rpki-client