
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4D541B161E0111E9A590C837C4F9AE02.roa
File: 4D541B161E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: rgBpUBNwsnxnqsvs0+ajKx25x8eYR5Lw3b/g5UJkjDk=
Subject key identifier: 23:A8:99:37:7A:09:92:28:41:B3:B9:BA:F7:85:31:E6:3D:B4:FE:3D
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 39FC
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4D541B161E0111E9A590C837C4F9AE02.roa
Signing time: Mon 14 Jul 2025 14:51:15 +0000
ROA not before: Mon 14 Jul 2025 14:51:15 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 45200
IP address blocks: 61.91.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 14:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14844 (0x39fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:51:15 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68751963-0599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:6a:d6:50:d7:4a:22:4f:ea:1e:07:09:9f:
1a:b4:47:84:e2:16:49:d6:96:ca:17:af:20:17:3e:
1a:49:34:7d:c6:bc:71:2a:41:51:d9:b1:35:99:15:
ef:84:cd:83:39:ca:a9:8e:73:cd:f4:4a:98:99:58:
f2:a2:26:cd:f7:22:b7:24:c0:2b:ca:1b:3e:29:9a:
b3:ee:4a:35:26:5e:63:6a:91:d1:59:bd:28:79:9c:
23:5d:e3:a6:c9:5d:e4:b9:74:42:68:78:82:28:ee:
aa:3b:ab:3d:c7:6c:4f:2d:f5:a8:45:8b:26:e9:0f:
06:7f:e1:2c:19:a0:51:a6:ff:c7:71:71:75:7c:1e:
0c:47:59:d3:0e:17:b2:41:51:1a:2c:ff:9c:58:22:
39:4e:c3:5a:2e:96:5c:d6:8e:cf:62:b0:6c:94:0b:
6d:05:9b:f7:10:ff:39:61:c7:ed:56:01:3a:6c:52:
a6:cc:28:6c:1f:ad:0b:80:0b:76:c5:1a:47:11:ad:
69:34:05:87:01:73:44:df:c9:50:e9:f0:a4:4a:fd:
85:26:55:05:58:4c:4f:89:a7:c3:13:47:7b:f1:76:
8e:e7:fa:26:c5:7f:74:b1:f9:cc:11:ff:13:8a:93:
8d:10:d2:d4:b6:e4:e1:06:62:2a:df:48:be:c9:5c:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A8:99:37:7A:09:92:28:41:B3:B9:BA:F7:85:31:E6:3D:B4:FE:3D
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4D541B161E0111E9A590C837C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.91.73.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ca:0f:ea:79:a2:da:6d:49:61:8b:b0:25:33:07:fe:2d:d5:
90:91:fa:80:5d:88:07:34:99:b9:d4:08:86:c7:ab:49:8d:93:
0d:8a:12:c4:8d:88:39:68:62:27:9a:94:43:75:1a:11:c0:ef:
07:93:1b:02:ae:d8:a3:76:98:c5:76:62:b9:72:fe:14:a9:82:
a5:61:07:e9:86:57:f6:41:b0:7f:b2:8e:54:21:74:c8:3e:59:
9b:8c:65:3a:a4:59:79:7c:de:2d:9b:08:e8:f1:5f:3c:0a:75:
4d:a7:cd:fe:a8:60:55:e2:9e:c0:a3:02:c0:4f:c5:c4:7c:5b:
0e:87:c8:17:53:b9:ad:a4:e8:b7:22:6d:e8:8e:5f:34:34:74:
c1:28:88:ff:ec:af:10:b0:a2:9b:0f:37:41:74:70:1f:31:1b:
64:ac:8d:78:33:7b:a3:3f:c1:90:ff:55:6e:17:de:58:fc:f2:
5b:b9:25:5d:55:d6:e7:aa:37:7b:7e:59:4d:87:95:0c:3f:8b:
1b:14:96:54:6f:bd:4f:1c:f9:1e:a5:f8:28:6b:5c:5a:d7:a4:
b9:ed:a0:70:1d:6d:4a:7f:6e:6b:c8:25:d0:16:91:c1:5f:4d:
a2:4b:f2:46:28:ee:cf:5b:ee:da:a5:25:4c:70:a7:9f:f3:49:
30:38:ee:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 07:02:12 2025 by rpki-client