
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3FBCC4581E0111E9A590C837C4F9AE02.roa
File: 3FBCC4581E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: 1DJiWDxCIH8jM5ZRiOkgW0SKpdKTo/qTD2aMVEc7o40=
Subject key identifier: 60:7F:AA:70:18:FB:FD:CD:6B:DE:36:19:2A:5A:3F:FA:60:09:8D:61
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B49
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3FBCC4581E0111E9A590C837C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:28:23 +0000
ROA not before: Mon 14 Jul 2025 14:50:53 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 21859
IP address blocks: 61.91.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15177 (0x3b49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:50:53 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a49357-8183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:08:cc:20:2b:64:35:5c:ce:b8:db:9e:76:
c8:84:12:93:14:aa:82:bb:27:dc:e8:e7:c2:f1:7e:
7c:01:f8:20:f5:02:dd:b6:ac:2b:99:ec:5d:df:cc:
8f:cc:6f:c3:bd:ba:3f:78:0c:a9:2e:ab:17:eb:2f:
b1:a0:0e:f9:f1:91:e0:b0:7f:d8:0c:d1:dd:d9:4f:
25:8e:ef:e8:dc:9d:c3:a3:58:e3:a5:d4:b2:d4:8a:
5f:45:ec:31:a2:17:9f:46:56:38:d4:be:58:e5:48:
e3:ff:4b:86:64:70:94:11:d8:74:3e:5a:d3:a9:a8:
76:25:57:36:24:2b:16:35:91:e1:1a:5e:2f:81:5c:
5a:e6:b2:a9:17:9c:4a:cb:fa:38:ac:1a:01:54:7d:
ca:c8:2c:a7:ea:ac:c1:cf:81:a3:73:da:55:8d:12:
8c:53:ff:30:62:b1:78:e0:5f:19:6d:c2:e7:f9:b3:
26:d6:1d:c5:a2:ba:d9:31:34:97:1e:72:c6:1c:af:
be:c9:a9:51:2e:81:b4:99:cd:37:8f:34:da:a0:65:
5e:ad:04:ef:c3:f3:48:12:e0:ac:08:48:4f:b6:9e:
3d:0b:06:03:13:3b:7a:78:73:5b:77:63:61:34:fa:
52:2f:71:70:ec:ca:e7:61:7b:80:52:3f:26:b3:7d:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7F:AA:70:18:FB:FD:CD:6B:DE:36:19:2A:5A:3F:FA:60:09:8D:61
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3FBCC4581E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.91.194.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2d:f0:cf:7f:e2:65:c1:3d:8b:29:e0:d1:02:3c:29:2e:c9:
2b:ed:b4:0e:bb:6e:81:58:68:7c:fa:b8:58:f6:51:b4:70:9d:
29:12:5b:8b:40:5f:24:d2:39:ee:d3:a8:e0:63:a3:ae:f6:d1:
62:ac:f4:bd:dc:22:79:97:02:bd:bd:ba:b6:39:23:ed:f5:a6:
3b:e8:1d:f6:3f:e5:46:66:cb:25:30:66:f2:ea:f8:b7:01:0a:
39:da:4b:67:82:5f:80:d3:26:1f:a7:3c:b4:cb:0d:70:bd:09:
67:1e:dc:8b:da:bb:74:d6:80:b3:2a:8c:d8:06:0d:d6:2a:f4:
80:3f:68:41:82:64:9e:6a:27:81:b4:6b:c9:c4:20:54:d0:05:
38:0b:00:f2:4f:93:80:a6:27:f2:2c:36:55:5d:ea:e4:94:2f:
bb:56:29:41:be:e1:de:d5:49:33:78:46:41:81:3b:20:cb:2e:
14:28:3a:fe:ba:c0:b8:f1:ed:c5:82:4b:8a:56:84:6b:af:27:
21:eb:c4:c3:04:68:21:a5:e2:f3:17:91:2c:58:0e:dd:ca:d4:
2f:de:c8:69:b1:79:8a:fb:a1:ae:76:d1:ca:e6:d3:db:cc:2d:
ed:46:07:6c:b7:80:83:01:6d:b7:0f:6f:2c:2c:97:6f:0c:85:
32:b6:25:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:27 2026 by rpki-client