
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa
File: 3EF600FC1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: NsiRPLkcG87K+zIPhjQDgZwCGt8TLnCRMzl97vbzR08=
Subject key identifier: 2A:76:FA:86:BB:2C:92:5B:49:02:08:4B:E8:08:01:9E:C7:92:AF:76
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B46
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:28:20 +0000
ROA not before: Mon 14 Jul 2025 14:50:50 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 18197
IP address blocks: 58.97.37.0/24 maxlen: 24
110.170.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15174 (0x3b46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:50:50 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a49354-597f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:94:f0:5a:74:38:4b:4c:5c:09:4b:82:d0:
27:78:76:ba:e5:6e:a7:78:55:61:2c:f9:97:9c:f3:
b8:53:b9:0a:18:36:3d:25:ee:9b:47:8c:ae:6e:c8:
80:31:c2:ea:2f:30:b8:31:29:79:1b:91:aa:dd:c5:
3f:cc:07:42:c6:03:34:22:5a:6d:b6:e9:69:4a:1b:
b1:81:ac:9b:c3:75:8c:f5:e3:d4:f1:08:af:ae:b0:
2c:78:e1:b0:4e:83:d5:5b:4a:86:28:51:f9:a5:18:
da:4d:6b:1e:50:ef:f9:9f:2c:d9:74:e5:86:5a:8a:
19:dd:9c:0a:fb:82:85:79:af:e1:c2:ca:6a:6b:25:
a2:45:1f:df:7e:a3:2f:2e:02:4f:3c:8f:a4:d4:37:
9b:3a:7c:2e:63:a4:13:38:ec:a3:c0:f5:91:2e:01:
93:35:65:43:79:d0:1d:10:72:f3:16:e3:33:fb:c1:
03:05:30:da:21:94:1e:c2:ca:34:82:41:29:7c:69:
96:6e:14:c7:41:7c:f7:c9:bd:c5:a8:5f:fa:38:f1:
39:ac:b0:5a:3b:6b:8b:1d:a2:4f:cd:e2:6a:eb:4e:
e4:5a:d0:44:15:61:c9:89:c9:13:35:9b:50:05:f9:
ce:4c:3f:6a:98:fe:aa:ef:05:50:b0:30:4f:51:16:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:76:FA:86:BB:2C:92:5B:49:02:08:4B:E8:08:01:9E:C7:92:AF:76
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.97.37.0/24
110.170.149.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3e:26:25:7b:47:47:50:3e:af:c8:53:41:2a:3f:18:ae:f6:
3a:ec:b1:44:e4:39:a3:d8:62:69:27:47:f1:d7:00:2c:7e:c9:
8b:8c:18:c2:9a:4a:b5:93:61:c2:2d:13:a4:ca:2b:ae:89:ee:
fd:6b:27:43:62:b7:0d:03:23:b2:11:10:6b:43:96:da:c5:ad:
91:05:4e:e9:c2:8b:bf:19:d0:60:1d:40:f0:6e:d0:cf:15:a4:
13:4e:f8:c9:dd:13:f9:1a:a4:d9:5d:84:22:85:4e:21:eb:04:
cb:07:48:a0:e5:da:81:1a:80:da:47:e4:0f:80:65:de:7d:5e:
3b:e3:06:d8:72:26:70:d7:b9:3d:db:79:29:1c:db:a9:dd:17:
c3:9e:2d:14:92:bb:c4:3e:20:58:e0:20:2f:e6:d0:4c:f5:74:
46:4c:cc:13:d6:43:58:0b:54:58:24:bf:44:ed:e3:9d:fd:ea:
9c:ec:63:1c:0c:1b:30:f6:58:c6:a9:35:6e:05:91:72:8c:09:
e3:96:69:c2:13:04:e4:ed:a7:1c:c7:cd:68:88:98:cc:a0:40:
66:95:44:01:62:75:93:a9:25:07:08:e2:c1:a8:fc:22:47:ab:
8e:6f:a2:35:66:ca:fa:43:b2:9f:5c:10:f9:97:bd:12:fe:aa:
f6:08:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:13 2026 by rpki-client