
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A63A29461AF11EAB55FB65CC4F9AE02.roa
File: 4A63A29461AF11EAB55FB65CC4F9AE02.roa (raw, json)
Hash identifier: YF+zHUWyYSGIg++qcTmO/wWmDxDUqb6phOM7PCSzhS0=
Subject key identifier: D2:83:10:13:C0:48:CF:E0:EC:AC:71:03:8E:3D:CB:7E:82:1E:00:D1
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B53
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A63A29461AF11EAB55FB65CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:28:32 +0000
ROA not before: Mon 14 Jul 2025 14:51:02 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 36040
IP address blocks: 2001:fb0:109f:12::/64 maxlen: 64
2001:fb0:109f:14::/64 maxlen: 64
2001:fb0:109f:18::/64 maxlen: 64
2001:fb0:109f:19::/64 maxlen: 64
2001:fb0:109f:8007::/64 maxlen: 64
2001:fb0:109f:8009::/64 maxlen: 64
2001:fb0:109f:8010::/64 maxlen: 64
2001:fb0:109f:8013::/64 maxlen: 64
2001:fb0:109f:8014::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15187 (0x3b53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:51:02 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4935f-3de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:1c:13:7f:04:8f:31:61:5f:8c:4b:85:53:
ac:1c:c0:c4:62:ea:04:0e:e8:c1:88:0d:92:d5:63:
65:b4:d8:f6:47:46:b1:0c:d4:aa:fe:12:ed:e2:9a:
5f:d2:25:c7:23:58:1b:57:38:fd:4f:30:92:0f:e2:
9d:ee:7e:c8:60:7f:c5:a2:60:e2:b7:42:68:7c:28:
93:a1:07:db:da:9d:35:a4:70:26:32:c4:ae:f0:ae:
29:15:fa:4a:12:e3:c2:e2:96:d1:71:e5:b3:f7:70:
a6:53:ca:e4:72:1a:28:7d:bb:9c:64:da:d9:bc:4e:
5f:e4:a7:96:5e:47:60:a6:ef:99:40:3d:6a:d3:2a:
3e:ef:81:25:d5:b0:b3:1e:f3:e0:bd:02:af:b1:01:
af:7c:52:a1:04:28:45:ba:34:7d:ec:7b:05:c6:ea:
01:b9:09:8a:8b:61:32:b9:50:dc:2c:e5:15:76:80:
0d:e5:85:c6:27:31:d8:af:85:b2:74:97:80:59:9e:
de:83:be:40:57:ae:b3:bb:52:7e:61:fd:04:97:38:
01:23:ea:56:d4:52:90:d7:cf:cb:bb:4c:f1:c3:47:
c3:a6:a7:18:60:04:44:c7:8d:27:24:d5:82:7d:26:
b8:5e:85:b6:91:62:e3:01:3d:10:55:aa:ec:ae:7b:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:83:10:13:C0:48:CF:E0:EC:AC:71:03:8E:3D:CB:7E:82:1E:00:D1
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A63A29461AF11EAB55FB65CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:fb0:109f:12::/64
2001:fb0:109f:14::/64
2001:fb0:109f:18::/63
2001:fb0:109f:8007::/64
2001:fb0:109f:8009::/64
2001:fb0:109f:8010::/64
2001:fb0:109f:8013::-2001:fb0:109f:8014:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
60:ee:93:da:c0:d6:d5:41:35:dc:93:01:e5:ca:55:ea:86:52:
6c:65:23:30:be:e7:94:82:36:01:ef:e8:fc:18:d0:c3:46:7d:
5e:a4:b4:ae:49:35:9e:23:cb:6a:58:e6:ac:30:6e:8d:2b:69:
65:06:8f:e4:68:68:f4:5d:5c:4a:2b:a3:8e:13:a8:3c:b1:f3:
be:85:15:4c:ff:50:f6:5c:cc:a7:2c:5f:71:11:ac:e8:4d:88:
d1:a1:57:f5:93:21:76:77:0c:79:2d:e1:e8:6e:a9:ab:32:03:
d6:ef:b1:26:8c:77:d3:35:33:31:62:ce:09:b7:b2:ed:1c:ce:
ff:14:d6:e9:a3:5b:e2:14:02:e7:83:50:a5:40:9c:0d:b6:81:
46:db:c7:70:a0:73:c2:c2:86:ab:8d:89:23:cc:1e:8d:74:aa:
70:ed:15:97:81:72:5f:c4:37:08:d4:10:0f:1c:99:73:54:cf:
79:3e:b2:ab:e7:2e:2d:61:1c:58:80:1b:30:60:d3:10:30:1f:
50:69:0a:12:29:77:98:f2:78:39:af:64:b9:9b:f1:1b:93:99:
ef:4b:a8:ae:83:c4:ad:c0:19:c3:ea:9c:3d:a0:39:e5:24:e4:
62:7d:30:1b:01:d2:d5:4a:85:5d:69:b7:3f:cc:d6:4a:c0:7a:
b2:66:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 08:45:18 2026 by rpki-client