
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa
File: FC968EB81E0311E991EB9A44C4F9AE02.roa (raw, json)
Hash identifier: nTcQYga7uuz4eCkVW8G3y+Nsl3xxMVEU8XEwB9thNAM=
Subject key identifier: 14:ED:96:C4:53:5E:36:16:40:97:0E:36:D8:A7:FB:AF:49:EC:A9:EE
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B7B
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:29:06 +0000
ROA not before: Mon 14 Jul 2025 14:51:39 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 7630
IP address blocks: 110.170.223.0/24 maxlen: 24
210.86.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15227 (0x3b7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:51:39 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a49382-9023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:bd:c3:ae:8c:ef:5e:5b:c2:2f:0b:00:69:
28:88:68:5c:1d:be:e6:5f:ce:49:ff:5d:ea:34:27:
61:c7:ab:d5:71:71:22:86:b5:30:c8:5c:65:ca:d2:
5d:a5:7c:5f:19:71:2d:60:5d:e5:1b:47:95:94:3c:
5e:bd:95:69:95:c4:3b:1f:7a:54:77:20:70:72:ac:
ec:fc:a7:23:38:c1:22:f4:29:18:60:9d:f1:19:84:
df:98:ff:eb:25:e7:de:aa:94:7f:f4:54:4e:21:bd:
0a:c8:98:4e:e3:52:81:75:20:d7:3e:73:e5:9e:61:
5d:c4:db:44:44:f7:1e:5b:4d:df:9e:e3:12:74:b9:
a7:25:00:b9:57:c1:95:23:da:a8:7d:1b:ff:78:64:
4a:6a:1f:3d:c4:bc:58:b6:bf:76:89:fd:1e:ad:b5:
5f:fe:06:87:92:30:b7:14:0f:3d:5d:14:3c:0c:a6:
0b:2f:a5:f1:a2:ad:58:df:1c:af:f1:5d:e8:35:78:
d2:f0:b2:6c:22:79:46:40:7d:97:62:95:23:d8:1f:
0d:e7:d6:10:00:88:27:e3:ac:97:3c:d5:f4:c0:61:
d1:2a:15:f9:8a:06:9c:c5:c6:7b:77:db:72:12:b3:
aa:31:ef:a4:9b:20:c1:8e:e5:46:2e:18:46:f7:93:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:ED:96:C4:53:5E:36:16:40:97:0E:36:D8:A7:FB:AF:49:EC:A9:EE
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.170.223.0/24
210.86.192.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:41:c4:03:62:e2:65:60:41:ed:e6:1e:9a:cd:67:f0:5f:8b:
1c:5e:cf:dc:a8:a8:2e:95:09:c5:36:3c:a6:eb:d3:e8:fa:26:
95:5a:d6:36:a5:43:86:f7:18:41:a3:70:eb:38:05:25:56:8b:
ab:cc:7c:15:53:6e:3c:a1:5b:51:60:37:3a:31:bf:87:46:8d:
a0:46:25:68:4d:a4:6e:7e:8c:b4:06:95:9e:c8:b0:95:09:24:
b2:6a:4c:65:60:95:ee:c9:4e:95:89:93:71:17:21:7d:c1:ca:
c2:6c:e7:1b:e7:42:58:55:4e:fc:48:6c:13:12:df:ec:1c:8f:
f1:70:9b:35:18:1f:7f:0a:10:bf:26:3e:1a:3b:51:1e:42:cc:
43:02:da:64:1a:7c:29:14:8b:a1:91:3e:4c:47:52:02:0f:d0:
37:1f:b0:d6:7f:4a:82:1e:af:ae:12:d2:65:42:e0:b9:14:b0:
be:d2:16:62:61:b5:48:bf:2c:30:73:52:12:6b:ee:c4:84:f9:
01:8b:6b:f8:23:70:a5:64:ef:c0:f0:55:78:d8:6b:5d:35:54:
ad:5f:1b:51:20:ca:26:e4:bd:13:06:3b:5e:99:40:b7:03:71:
bc:b1:d6:9d:64:34:43:26:a2:27:2c:e2:a6:17:e6:6e:35:43:
b4:3a:fb:a8
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICO3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTM5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTM4Mi05MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwo69w66M715bwi8LAGkoiGhcHb7mX85J/13qNCdhx6vVcXEihrUwyFxlytJd
pXxfGXEtYF3lG0eVlDxevZVplcQ7H3pUdyBwcqzs/KcjOMEi9CkYYJ3xGYTfmP/r
JefeqpR/9FROIb0KyJhO41KBdSDXPnPlnmFdxNtERPceW03fnuMSdLmnJQC5V8GV
I9qofRv/eGRKah89xLxYtr92if0erbVf/gaHkjC3FA89XRQ8DKYLL6Xxoq1Y3xyv
8V3oNXjS8LJsInlGQH2XYpUj2B8N59YQAIgn46yXPNX0wGHRKhX5igacxcZ7d9ty
ErOqMe+kmyDBjuVGLhhG95OWLwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBTtlsRT
XjYWQJcONtin+69J7KnuMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvRkM5NjhFQjgx
RTAzMTFFOTkxRUI5QTQ0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAbqrfAwQA0lbAMA0GCSqGSIb3DQEBCwUAA4IBAQCdQcQDYuJlYEHt
5h6azWfwX4scXs/cqKgulQnFNjym69Po+iaVWtY2pUOG9xhBo3DrOAUlVourzHwV
U248oVtRYDc6Mb+HRo2gRiVoTaRufoy0BpWeyLCVCSSyakxlYJXuyU6ViZNxFyF9
wcrCbOcb50JYVU78SGwTEt/sHI/xcJs1GB9/ChC/Jj4aO1EeQsxDAtpkGnwpFIuh
kT5MR1ICD9A3H7DWf0qCHq+uEtJlQuC5FLC+0hZiYbVIvywwc1ISa+7EhPkBi2v4
I3ClZO/A8FV42GtdNVStXxtRIMom5L0TBjtemUC3A3G8sdadZDRDJqInLOKmF+Zu
NUO0Ovuo
-----END CERTIFICATE-----
Generated at Sat Mar 7 15:14:28 2026 by rpki-client