
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3934EF5C1E0111E9A590C837C4F9AE02.roa
File: 3934EF5C1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: AjBlbBT6bWRx6i0gBUgWKr2OibJnOLxbF4xsSDvzI/0=
Subject key identifier: C6:EB:49:33:CF:8B:AC:AB:C1:94:35:7B:6E:E7:18:3E:F1:3D:77:D1
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B33
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3934EF5C1E0111E9A590C837C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:28:03 +0000
ROA not before: Mon 14 Jul 2025 14:50:32 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 136457
IP address blocks: 210.86.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15155 (0x3b33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:50:32 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a49343-2c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:c8:63:dd:ef:40:8a:f7:ef:c9:9e:48:b2:
50:46:12:1c:64:c0:d1:16:79:d6:5d:27:fc:1c:bd:
73:60:ed:b4:6d:bc:20:e7:f7:71:ad:a0:d6:73:90:
ea:d8:5c:0a:00:21:b4:b8:1f:07:52:a8:93:88:ee:
3d:d7:fb:f0:7e:d7:13:d2:6f:ee:c2:c2:1f:a1:51:
d6:9c:7b:07:04:ef:98:a8:b7:49:7f:fb:82:71:ee:
bd:db:cf:62:85:6f:c7:1b:5b:95:b2:fd:66:09:f8:
da:39:b4:91:66:76:4e:0f:65:7b:f0:0d:93:7f:23:
c4:ff:da:b4:79:3d:f2:ad:9a:c0:c3:2d:44:f9:55:
d0:17:df:6b:8e:7b:c6:99:43:a6:1d:78:7c:5c:b9:
94:af:4d:c1:40:a4:b1:d4:c5:97:69:55:7f:d3:75:
10:90:64:a4:c8:f3:03:85:f4:4a:ed:30:29:cf:d0:
04:04:48:54:f2:c1:d8:d6:36:1c:06:29:7f:08:aa:
4e:8a:b8:2c:75:83:8d:18:30:8c:31:1b:88:4f:fd:
be:26:43:28:cb:1e:68:71:1e:55:a7:3a:98:4c:7d:
95:8f:ba:5e:0a:50:77:87:e5:64:06:9f:9f:99:ca:
ef:58:80:4d:b7:3d:7f:81:f3:18:94:83:2e:71:74:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EB:49:33:CF:8B:AC:AB:C1:94:35:7B:6E:E7:18:3E:F1:3D:77:D1
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3934EF5C1E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.86.206.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:47:b3:05:1e:54:fb:d9:f6:be:7c:b8:0b:aa:62:af:e7:95:
d1:5e:fa:7a:6e:f9:39:2b:53:bc:a6:ba:2b:c4:7a:dd:0b:f8:
76:3d:68:8c:3e:dd:bc:88:bd:d5:0f:88:49:58:7c:20:c8:96:
e2:36:cc:9a:49:a3:a4:9b:df:69:0d:63:b1:ff:8c:3a:51:31:
00:06:bc:96:df:82:09:94:80:91:8a:33:ef:5c:8b:7e:1f:b4:
a2:5c:e8:c4:a1:71:73:65:16:5e:2b:b8:a6:82:bb:b1:b9:c0:
5f:80:fa:c4:ad:a1:8e:fe:f0:92:1c:d3:b5:27:93:23:b1:3c:
c3:35:01:7f:18:de:4a:29:38:28:90:2f:05:6a:1b:be:78:56:
f3:ef:85:59:3c:b4:76:27:34:23:21:e9:f8:45:e5:95:57:c5:
cb:d0:d0:fe:fe:26:35:91:5b:52:af:c7:b9:d9:66:72:d3:d4:
b6:52:2c:7d:0f:4f:9b:df:40:18:b5:e4:f3:09:0c:0c:24:36:
8d:90:87:17:eb:6d:aa:a9:41:2e:a3:7d:ce:d4:2a:c8:31:f6:
22:cf:97:19:0e:f5:48:c8:04:f4:04:25:cf:fa:88:d5:80:4f:
2d:61:8e:03:f6:a2:aa:f9:56:cd:c0:a1:db:18:99:4c:5c:ad:
fa:76:13:cb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICOzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDMyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTM0My0yYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoqHIY93vQIr378meSLJQRhIcZMDRFnnWXSf8HL1zYO20bbwg5/dxraDWc5Dq
2FwKACG0uB8HUqiTiO491/vwftcT0m/uwsIfoVHWnHsHBO+YqLdJf/uCce69289i
hW/HG1uVsv1mCfjaObSRZnZOD2V78A2TfyPE/9q0eT3yrZrAwy1E+VXQF99rjnvG
mUOmHXh8XLmUr03BQKSx1MWXaVV/03UQkGSkyPMDhfRK7TApz9AEBEhU8sHY1jYc
Bil/CKpOirgsdYONGDCMMRuIT/2+JkMoyx5ocR5VpzqYTH2Vj7peClB3h+VkBp+f
mcrvWIBNtz1/gfMYlIMucXSahQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMbrSTPP
i6yrwZQ1e27nGD7xPXfRMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMzkzNEVGNUMx
RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0lbOMA0GCSqGSIb3DQEBCwUAA4IBAQBMR7MFHlT72fa+fLgLqmKv
55XRXvp6bvk5K1O8prorxHrdC/h2PWiMPt28iL3VD4hJWHwgyJbiNsyaSaOkm99p
DWOx/4w6UTEABryW34IJlICRijPvXIt+H7SiXOjEoXFzZRZeK7imgruxucBfgPrE
raGO/vCSHNO1J5MjsTzDNQF/GN5KKTgokC8Fahu+eFbz74VZPLR2JzQjIen4ReWV
V8XL0ND+/iY1kVtSr8e52WZy09S2Uix9D0+b30AYteTzCQwMJDaNkIcX622qqUEu
o33O1CrIMfYiz5cZDvVIyAT0BCXP+ojVgE8tYY4D9qKq+VbNwKHbGJlMXK36dhPL
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:25 2026 by rpki-client