
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa
File: F3425EF0684D11F0B2D5FA37C4F9AE02.roa (raw, json)
Hash identifier: j3wvdVZdlkttK5LQzYWRv8MyzczrZzv4IowyLYxZ5Ak=
Subject key identifier: 97:AB:17:77:63:BA:96:7E:A9:63:42:82:1A:4D:82:EB:91:CC:70:2F
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0BC8
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:01:01 +0000
ROA not before: Wed 03 Dec 2025 02:20:44 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 213607
IP address blocks: 61.15.96.0/24 maxlen: 24
61.15.108.0/24 maxlen: 24
203.168.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3016 (0xbc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Dec 3 02:20:44 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a48ced-06dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:63:d5:b0:fc:c7:de:a5:12:a8:c4:e9:e8:
cd:17:b6:28:34:36:c5:21:96:44:cc:09:af:31:14:
02:46:26:d7:68:fe:61:69:07:fa:a1:c6:48:ba:50:
51:2c:fb:a6:38:8c:7b:24:2a:57:8f:a3:af:71:56:
e4:c3:05:c7:52:c4:d8:17:23:21:50:14:fa:32:d2:
84:08:03:0d:e1:a8:a2:36:a7:48:dc:e8:4d:9d:6c:
28:b9:68:7b:81:ab:bd:05:6e:85:e7:95:f1:dc:29:
76:09:90:05:d8:28:3b:61:31:55:52:28:ff:1b:87:
2e:2f:83:49:8f:73:4f:9e:2b:04:97:5a:40:7f:1c:
c0:c2:ce:a9:43:ff:74:3c:19:c3:c7:3f:e0:cc:95:
54:28:7a:0c:12:9c:48:b7:8f:28:cc:ab:be:66:4c:
d1:bf:05:cc:46:2e:da:f2:cf:7f:f5:da:a1:5d:e9:
f9:b6:db:eb:99:0c:73:ad:a4:2c:3c:d5:3f:d8:7c:
bf:40:37:fc:7f:d4:ba:a9:d9:36:c2:56:a0:5b:2e:
3f:59:a5:f0:a4:f7:8d:14:f2:a9:23:fc:c7:5a:22:
8e:c4:24:c7:3a:3e:00:b3:a3:eb:ec:13:58:76:d2:
db:f7:69:db:cb:f2:8d:72:2c:b4:47:77:7b:ca:d3:
a1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AB:17:77:63:BA:96:7E:A9:63:42:82:1A:4D:82:EB:91:CC:70:2F
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.15.96.0/24
61.15.108.0/24
203.168.239.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f1:55:e2:d6:5d:e4:9d:83:c0:c1:27:30:01:ad:d7:87:3d:
56:7b:c7:3d:08:74:32:c7:dc:21:42:31:24:a3:89:d6:91:f3:
f5:d8:a3:e1:78:41:75:06:b3:e5:b4:72:47:e5:f6:c0:31:1b:
24:25:54:db:a7:59:11:99:c9:d0:8e:f7:c3:44:8a:cc:6a:1a:
59:52:9c:d4:8c:dd:b0:19:b1:94:93:12:71:24:b3:66:ad:03:
02:5a:b7:11:46:4c:8b:1c:9d:14:70:bc:84:96:34:21:79:05:
e2:c4:12:76:f9:cc:c4:fe:f4:c9:2e:6f:f4:e4:78:f8:7d:00:
69:ae:60:85:cb:55:04:96:fb:84:c0:85:db:fa:f9:19:84:ce:
e5:5c:f2:d9:6d:7b:0f:32:fc:3f:08:b3:fe:70:a8:af:78:d6:
08:17:af:ee:c8:ba:80:f1:fc:a5:40:87:cf:c8:1e:7b:bf:46:
b6:0a:a9:9a:e4:09:0d:34:6d:de:2c:d7:24:7d:15:f0:12:c0:
7d:b3:d1:fd:f1:a8:3c:7d:7d:52:09:5c:a4:e6:0d:1e:9b:ff:
21:e6:dd:b2:1a:7b:a8:3d:81:13:a3:ea:6b:cc:4f:18:44:a4:
dc:e2:7b:56:2b:4a:4b:80:6b:9e:72:89:4c:df:c1:e7:bf:40:
53:3c:5e:46
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICC8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw
MzQ4QzQ2QTcwHhcNMjUxMjAzMDIyMDQ0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGNlZC0wNmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtrRj1bD8x96lEqjE6ejNF7YoNDbFIZZEzAmvMRQCRibXaP5haQf6ocZIulBR
LPumOIx7JCpXj6OvcVbkwwXHUsTYFyMhUBT6MtKECAMN4aiiNqdI3OhNnWwouWh7
gau9BW6F55Xx3Cl2CZAF2Cg7YTFVUij/G4cuL4NJj3NPnisEl1pAfxzAws6pQ/90
PBnDxz/gzJVUKHoMEpxIt48ozKu+ZkzRvwXMRi7a8s9/9dqhXen5ttvrmQxzraQs
PNU/2Hy/QDf8f9S6qdk2wlagWy4/WaXwpPeNFPKpI/zHWiKOxCTHOj4As6Pr7BNY
dtLb92nby/KNciy0R3d7ytOh3wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJerF3dj
upZ+qWNCghpNguuRzHAvMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF
NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvRjM0MjVFRjA2
ODREMTFGMEIyRDVGQTM3QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAPQ9gAwQAPQ9sAwQAy6jvMA0GCSqGSIb3DQEBCwUAA4IBAQAE8VXi
1l3knYPAwScwAa3Xhz1We8c9CHQyx9whQjEko4nWkfP12KPheEF1BrPltHJH5fbA
MRskJVTbp1kRmcnQjvfDRIrMahpZUpzUjN2wGbGUkxJxJLNmrQMCWrcRRkyLHJ0U
cLyEljQheQXixBJ2+czE/vTJLm/05Hj4fQBprmCFy1UElvuEwIXb+vkZhM7lXPLZ
bXsPMvw/CLP+cKiveNYIF6/uyLqA8fylQIfPyB57v0a2Cqma5AkNNG3eLNckfRXw
EsB9s9H98ag8fX1SCVyk5g0em/8h5t2yGnuoPYETo+przE8YRKTc4ntWK0pLgGue
colM38Hnv0BTPF5G
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:43 2026 by rpki-client