
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9D7043441E0211E9862ECE3FC4F9AE02.roa
File: 9D7043441E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier: VET/tXlOjg26lNGNbOCBuKFgIr/V/trZ694zfl0I9eU=
Subject key identifier: 36:95:4B:60:F4:88:8B:9D:A4:C6:EC:22:D3:9F:20:61:82:A8:FB:D2
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 39BA
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9D7043441E0211E9862ECE3FC4F9AE02.roa
Signing time: Mon 14 Jul 2025 14:50:18 +0000
ROA not before: Mon 14 Jul 2025 14:50:18 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132605
IP address blocks: 110.170.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 14:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14778 (0x39ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:50:18 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6875192a-0cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:7f:04:b0:14:5e:91:86:b4:3f:04:ac:d5:
2e:e6:0e:be:14:37:06:d1:bb:23:04:f9:ca:06:3f:
ed:0b:37:ce:00:5d:f1:61:42:2b:09:f4:3c:87:68:
29:e5:38:d3:4e:6b:28:fb:91:c1:2d:82:f5:aa:3c:
7c:e2:1a:dd:95:64:ea:47:a5:7d:11:bc:45:4a:b2:
d6:d6:74:29:b5:9b:54:9d:dc:0e:17:7c:16:5e:a4:
9d:78:a3:52:5b:86:b9:4b:95:5c:eb:8f:ac:8c:fb:
06:25:18:21:75:96:08:52:aa:b4:b4:48:b7:4a:88:
fc:34:4f:c5:85:3a:cd:7e:d7:78:70:b3:f5:64:23:
c5:61:4c:da:a8:9c:9a:21:dd:9c:99:07:35:ac:a2:
b7:f6:b3:96:ae:ec:75:22:36:fe:42:42:b9:ef:b8:
3e:f2:17:47:10:87:a1:a0:38:e2:21:5a:00:b3:59:
22:a5:01:1d:46:05:8b:d6:02:e9:52:d6:6a:7c:4c:
1c:c1:ce:e6:dc:4a:f7:83:5d:bf:a6:6a:de:13:b3:
f9:ba:ab:76:eb:cd:81:5e:02:a7:bb:d7:ee:3e:f4:
fc:59:48:64:64:41:4f:74:2b:7c:5c:23:d2:f3:43:
ab:16:aa:7d:26:4f:52:07:cc:c4:5c:19:db:3a:ca:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:95:4B:60:F4:88:8B:9D:A4:C6:EC:22:D3:9F:20:61:82:A8:FB:D2
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9D7043441E0211E9862ECE3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.170.135.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2d:ce:b1:19:84:91:05:2e:99:2c:da:79:91:f4:0e:6b:09:
9d:ca:cd:90:3d:38:96:36:6f:92:c4:fa:fb:86:b6:8b:e2:c0:
aa:a8:38:4d:a8:a3:76:d6:d8:cd:80:e7:61:50:c2:50:0b:83:
a1:bf:15:af:3c:89:4b:22:4a:87:f3:ad:b0:1e:35:de:bf:30:
d3:be:97:46:76:de:26:1b:df:7e:aa:9d:eb:a3:89:61:87:1b:
a7:b4:b2:b2:2b:44:6c:cf:5c:f5:82:bd:c9:02:2d:ed:cb:08:
1a:28:38:a4:5d:86:18:bd:00:48:1f:99:70:b9:ee:92:d1:f6:
99:b6:f3:bc:a0:9d:83:b4:83:8d:f9:c0:32:36:15:2c:90:4b:
f6:ba:31:1a:53:8a:59:84:2f:50:a2:2c:ac:b0:a5:84:b3:a6:
0c:94:db:df:19:3c:02:02:31:4d:79:24:54:c8:b4:2f:9c:2b:
ae:34:50:13:16:06:19:18:94:83:61:0c:0d:01:8a:dd:e2:91:
f1:af:80:e8:aa:19:82:ea:95:a8:62:d9:25:de:92:b5:cf:0b:
c8:68:bd:80:7f:b6:10:cb:ba:54:68:73:b7:e8:1a:f2:2f:f1:
04:23:41:b8:7e:ac:0f:10:6e:56:fe:7a:b5:74:87:d5:17:57:
20:49:e3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 07:02:53 2025 by rpki-client