
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3898AE761E0111E9A590C837C4F9AE02.roa
File: 3898AE761E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: nI4kvvOFuKzaY0CiNBCoLHE0VL7LvkLoKjVwiGyUi08=
Subject key identifier: 5D:B6:90:91:FF:75:10:E0:6F:4C:F7:73:3D:74:C2:28:FE:FE:C5:EA
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B32
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3898AE761E0111E9A590C837C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:28:02 +0000
ROA not before: Mon 14 Jul 2025 14:50:31 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 136182
IP address blocks: 210.86.205.0/24 maxlen: 24
210.86.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15154 (0x3b32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:50:31 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a49342-a5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c7:28:a0:5a:de:03:e6:e6:ad:10:1e:92:55:
76:48:d5:3c:04:58:b8:15:f9:56:78:c7:58:69:18:
91:c4:02:cc:a4:25:38:6e:38:0a:c7:b9:8b:07:f8:
35:29:36:5f:b3:58:d8:ca:be:f1:38:98:95:77:ee:
cc:98:72:9d:84:cd:db:ce:f8:9c:4b:e6:be:78:8a:
c3:c5:c2:d5:c7:95:9a:9d:b0:ad:3a:0d:64:b0:58:
d3:fc:11:bc:5d:31:47:bb:ae:8e:1b:8d:60:25:0c:
a1:e9:06:13:8c:86:fe:d2:7d:30:a1:fd:a6:3b:79:
10:56:54:88:6d:68:47:9e:7a:4f:68:91:e8:2e:7d:
54:7b:f4:54:d4:15:54:b7:b5:45:b9:47:2d:e2:48:
49:a2:58:b1:36:ed:63:5f:1b:e1:47:20:3d:87:18:
d9:53:97:b4:be:e0:2f:66:8e:30:70:5a:d6:2a:3f:
39:64:9a:aa:fb:a2:3a:24:91:ae:d7:ea:13:55:e9:
38:e6:11:49:c5:f8:62:bb:8c:9c:94:91:46:26:ef:
30:5a:a9:16:e6:fd:79:53:b7:eb:c5:af:ab:a1:c6:
74:39:99:4c:f8:a0:9f:49:08:aa:e6:c9:cb:b3:12:
72:1c:ea:7b:44:a1:84:91:f0:8e:f7:3c:af:8c:df:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B6:90:91:FF:75:10:E0:6F:4C:F7:73:3D:74:C2:28:FE:FE:C5:EA
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3898AE761E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.86.205.0/24
210.86.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:c0:af:40:c6:eb:63:46:d4:f2:e9:9c:74:c6:39:b7:15:52:
f6:e4:d8:90:82:8f:20:df:78:52:f3:b4:e0:34:7a:5c:2a:c7:
6a:b6:a3:88:09:12:81:82:13:97:24:54:72:a7:19:d1:cc:f6:
23:57:c1:a2:3d:54:df:18:3b:0e:a3:fc:6d:f9:61:25:d7:86:
7a:c5:58:57:57:ac:45:27:32:d5:0d:a0:c8:8c:73:0f:c7:9f:
c3:f3:31:ee:a9:0b:44:05:7d:e8:4d:71:64:85:cb:4a:c3:2d:
d2:84:f3:90:e1:0e:99:bc:6e:fb:24:ca:2e:f2:49:0f:ba:1a:
42:90:40:ac:ab:fc:d1:0a:c1:55:e7:88:52:b3:0f:6d:9a:b8:
05:fd:d9:19:46:fb:43:f1:19:bd:98:4f:25:bf:18:28:ca:69:
ba:f8:70:50:8f:68:72:db:2d:a0:7c:b9:b7:41:60:dd:50:c2:
fb:1a:2a:a5:78:33:96:64:33:13:57:d8:e6:02:98:76:f7:79:
10:11:4b:61:4c:8f:5e:01:25:01:a7:1d:52:d9:e5:1f:a6:bf:
86:44:4e:63:3c:ca:73:3b:02:8b:76:9b:76:ca:e2:07:1a:66:
a5:10:38:c7:81:9b:c0:55:0c:a4:c4:19:92:02:00:30:c2:9e:
7b:4e:50:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:02 2026 by rpki-client