
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35154B601E0111E9A590C837C4F9AE02.roa
File: 35154B601E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: I4dof4j55Bfcmb/5upAn9BRhP692t0eavkPHZ2d3h+0=
Subject key identifier: D8:67:F1:E6:3A:05:D0:59:E5:A4:54:07:26:73:C2:6C:68:3B:9E:EC
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B25
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35154B601E0111E9A590C837C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:27:51 +0000
ROA not before: Mon 14 Jul 2025 14:50:21 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 133167
IP address blocks: 61.90.249.0/24 maxlen: 24
110.170.151.0/24 maxlen: 24
2001:fb0:1035::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15141 (0x3b25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:50:21 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a49337-5931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:ff:14:22:bf:7a:7f:6c:12:7a:40:7a:6e:
99:f7:0d:f3:52:b7:56:7a:ad:9d:20:6c:17:17:e8:
0b:f3:02:fe:41:94:46:23:54:63:fb:f3:93:42:ca:
f0:98:2f:cd:f3:27:92:4a:3a:11:0f:4c:77:b7:83:
23:ec:1a:6c:ff:23:b0:53:40:ef:c8:22:64:99:4b:
3e:d7:be:f7:66:59:bb:44:f8:8c:32:8f:ae:1a:38:
1f:71:cc:79:36:e9:55:6a:99:f3:66:f0:ec:cc:fe:
68:b5:79:4b:46:4c:69:76:a1:da:d6:72:81:03:6a:
dc:20:4b:ab:87:5f:da:ec:55:81:ce:ec:db:1c:cb:
41:48:86:75:43:9b:4f:7f:d8:78:1b:8a:1f:fe:6b:
18:1f:46:84:74:64:7c:6f:24:28:0f:df:15:a1:37:
a2:f9:c9:b7:c0:2b:60:30:d4:2d:b2:9c:3d:f7:4e:
ae:e4:d7:84:dc:37:60:d8:66:91:85:6b:19:7a:5e:
2d:3a:f1:95:18:4b:08:b5:e0:01:17:9a:37:0c:74:
8b:4a:70:e1:a3:5f:be:2b:16:fc:d1:f1:9f:8f:3b:
38:a4:34:98:c3:b3:f3:bd:47:a0:37:60:c3:41:18:
f4:66:f7:09:53:30:01:dd:12:46:9d:2c:7a:b4:d6:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:67:F1:E6:3A:05:D0:59:E5:A4:54:07:26:73:C2:6C:68:3B:9E:EC
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35154B601E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.90.249.0/24
110.170.151.0/24
IPv6:
2001:fb0:1035::/48
Signature Algorithm: sha256WithRSAEncryption
43:2a:0b:59:92:53:a2:65:15:71:21:46:1a:4e:b4:b8:67:a6:
10:fb:e8:ca:a7:9a:4a:9f:ba:83:3f:b5:87:9e:59:bd:c1:47:
7f:6e:bc:70:b5:7b:23:84:66:f0:dc:81:d9:70:dd:4a:20:bd:
e9:03:32:f0:5c:22:f7:a8:3e:5a:8b:3b:e2:5f:56:f7:ab:12:
b7:d9:d9:23:ec:a6:9e:f4:36:5b:f4:18:27:9f:00:f1:ab:68:
e6:b1:6d:fa:91:70:11:5a:43:80:3a:cc:39:fa:72:e3:ac:10:
0c:31:58:4a:2e:51:d6:23:31:61:1c:01:7b:26:f2:fe:ce:9d:
e1:3e:94:55:1c:0a:8a:78:a6:92:13:a8:71:fd:5c:2e:6f:6d:
46:d8:e8:25:67:d5:56:8c:f6:2a:a3:9e:f2:d9:00:3d:78:d1:
13:2d:8a:8c:1a:5a:3a:41:34:38:3c:f3:28:f6:fa:ba:d7:56:
55:b7:13:b9:b0:c2:15:ee:0d:c9:f0:96:62:40:60:94:67:3d:
7f:31:31:94:32:d6:65:70:c4:1c:82:de:a7:47:7f:42:eb:ef:
a3:72:3d:1e:4b:79:43:06:05:95:02:fd:4c:bd:fc:44:8b:ca:
aa:09:0d:bf:9d:4d:30:b2:46:fa:f1:0f:b7:18:87:95:a5:2f:
23:96:48:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:52 2026 by rpki-client