
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/AA872C46B89711F0A8B6AF18C4F9AE02.roa
File: AA872C46B89711F0A8B6AF18C4F9AE02.roa (raw, json)
Hash identifier: YROj3OoZBVLjO+vEF17+O/KA5vsP91fPrurkwlRLek4=
Subject key identifier: 5C:36:24:F6:48:33:E0:DF:87:2E:99:83:FF:FB:A6:8A:51:80:FF:76
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0CF0
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/AA872C46B89711F0A8B6AF18C4F9AE02.roa
Signing time: Wed 30 Sep 2026 09:37:13 +0000
ROA not before: Wed 30 Sep 2026 09:37:13 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 9304
IP address blocks: 61.15.92.0/23 maxlen: 24
61.15.98.0/23 maxlen: 24
61.15.100.0/22 maxlen: 24
61.15.110.0/23 maxlen: 24
61.15.200.0/24 maxlen: 24
61.15.201.0/24 maxlen: 24
61.15.210.0/24 maxlen: 24
61.15.225.0/24 maxlen: 24
61.15.237.0/24 maxlen: 24
61.15.239.0/24 maxlen: 24
61.15.242.0/24 maxlen: 24
61.15.243.0/24 maxlen: 24
61.15.246.0/24 maxlen: 24
61.15.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3312 (0xcf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Sep 30 09:37:13 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6abcd848-7c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:8d:23:3f:85:4b:5c:52:b8:b9:b6:ea:68:
29:00:49:f2:3c:9c:16:c2:96:85:ce:eb:f4:5e:78:
12:40:fa:ea:c7:36:bd:c1:60:2c:f0:69:2d:2b:fa:
0e:21:d1:16:6e:ff:8a:dc:ef:04:c9:b8:ba:1c:b9:
0b:81:ee:4d:fd:dc:87:01:b1:04:ec:7f:00:f5:eb:
36:1c:8a:41:46:e0:35:35:fa:ca:df:63:de:b4:22:
57:4d:5e:bd:94:94:9f:59:57:55:12:ca:9d:1c:12:
77:a5:03:31:27:5a:7b:fd:3c:17:87:29:00:71:38:
ae:90:e3:70:f3:8b:b9:a4:d0:e6:14:fa:fe:04:f2:
9c:c0:0f:20:62:20:84:8c:3d:69:44:73:f1:7f:62:
a3:17:1b:65:e6:c6:a3:35:5e:d3:51:1e:d4:4f:7a:
e7:c2:40:0a:30:b8:2a:66:ec:99:e3:a6:0e:a7:c4:
08:57:e9:85:c1:c0:41:3f:22:e3:d3:78:16:c5:3d:
6f:9d:b0:68:c1:59:97:e7:94:2f:c0:6f:7f:27:9a:
43:4f:f1:41:66:91:b1:3a:77:16:8c:69:2c:8e:22:
a7:a0:09:b9:24:30:8d:02:f9:bb:1f:c4:51:37:3e:
5b:dd:c5:03:98:7f:31:6a:23:6d:a5:b9:da:7e:26:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:36:24:F6:48:33:E0:DF:87:2E:99:83:FF:FB:A6:8A:51:80:FF:76
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/AA872C46B89711F0A8B6AF18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.15.92.0/23
61.15.98.0-61.15.103.255
61.15.110.0/23
61.15.200.0/23
61.15.210.0/24
61.15.225.0/24
61.15.237.0/24
61.15.239.0/24
61.15.242.0/23
61.15.246.0/23
Signature Algorithm: sha256WithRSAEncryption
33:a8:58:a2:0a:a6:89:32:90:16:5c:60:6a:54:d2:66:ca:3a:
07:ab:00:b5:9f:b8:e3:17:bb:7a:0d:fb:c4:3c:b8:b6:cd:66:
94:3f:0f:de:1c:ac:8b:cb:e6:d9:cb:55:18:ce:62:c2:15:e2:
f8:bb:2e:d1:44:f2:66:6c:9f:35:d6:23:4f:41:96:28:83:4b:
44:20:47:1f:98:6c:02:14:91:f6:60:e1:44:5a:e6:3f:0c:59:
76:9e:e8:48:3b:49:57:d7:10:69:e9:e2:9e:52:cd:72:b5:f2:
f8:6c:b2:71:4f:e6:be:65:fc:f3:3f:e0:b2:38:b2:82:95:23:
9b:e9:84:bd:00:70:6d:cb:86:28:dc:88:7e:b3:2b:a1:6a:34:
05:79:be:d2:c2:37:03:0f:5d:87:7d:52:30:e3:93:03:65:4d:
83:ff:13:f5:a8:b7:da:37:62:f0:3c:b8:07:95:d1:e2:76:3f:
d4:39:f2:96:31:29:a3:2a:60:d4:93:09:c4:dc:4f:61:b6:71:
c0:08:69:83:f5:56:de:2c:0a:21:59:5b:ec:cf:5b:c4:0c:e5:
e3:ab:3b:4b:56:42:54:2e:76:22:7d:b2:6e:ae:91:e7:7f:59:
4c:0a:a5:3d:90:a8:2f:27:01:3b:e8:9c:b2:96:18:08:9c:00:
62:57:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:24:07 2026 by rpki-client