
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/46FEF7041E0111E9A590C837C4F9AE02.roa
File: 46FEF7041E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: HCcb/6MJuEYSVR4kCp1s1jx1pPqc5nKgnyBMFSjQw2Y=
Subject key identifier: F4:FA:7D:44:DF:39:88:F2:5A:7E:2C:32:79:3C:51:D4:79:B7:3D:34
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B55
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/46FEF7041E0111E9A590C837C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:28:33 +0000
ROA not before: Mon 14 Jul 2025 14:51:06 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 37992
IP address blocks: 61.90.234.0/24 maxlen: 24
61.90.235.0/24 maxlen: 24
61.90.236.0/24 maxlen: 24
61.90.237.0/24 maxlen: 24
119.46.188.0/24 maxlen: 24
119.46.189.0/24 maxlen: 24
119.46.190.0/24 maxlen: 24
119.46.191.0/24 maxlen: 24
119.46.235.0/24 maxlen: 24
119.46.236.0/24 maxlen: 24
119.46.237.0/24 maxlen: 24
119.46.238.0/24 maxlen: 24
2001:fb0:100e::/48 maxlen: 48
2001:fb0:100f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15189 (0x3b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:51:06 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a49361-d104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:ce:89:31:94:f4:49:8c:13:51:7d:f4:50:
af:68:46:19:6b:c7:bb:14:6c:4e:5f:ad:4a:0a:eb:
a5:72:1b:3e:e8:4c:2f:b4:fa:e2:92:5e:9b:54:4b:
91:03:0a:56:de:f0:cc:c9:2b:28:7a:00:98:48:8c:
5d:a8:e8:d7:d6:cf:25:8f:5a:8a:6c:4d:ed:ac:5c:
dd:d4:d0:31:85:df:1f:9d:38:7e:b2:63:8a:ce:58:
7f:3d:c3:dd:28:0d:c2:e7:43:6f:c8:b1:16:c9:27:
ff:76:f2:3c:17:0d:a3:3a:3a:96:d4:9a:8f:79:6f:
82:2a:be:a8:21:85:cb:7c:fa:fc:48:38:e1:77:50:
00:dc:68:73:f5:26:b9:76:24:64:1d:43:85:44:56:
26:7a:7d:1d:53:f7:9e:24:c9:13:ab:ca:10:0a:cf:
a0:c5:f9:38:a5:b6:31:1d:8a:b0:8a:c1:a9:11:d3:
cc:d1:45:cf:77:16:2f:b2:2f:f5:ef:a5:4f:5e:55:
93:10:72:bc:45:23:a8:dd:e8:26:2e:06:5b:f9:7a:
8f:bc:db:a5:87:d4:a7:7e:48:0c:d3:c1:f7:f0:b8:
e9:01:5a:2e:cd:3b:78:83:05:ad:4f:f4:4d:ad:e4:
fc:b1:49:a9:ec:36:af:15:8c:37:57:3f:f1:c7:61:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FA:7D:44:DF:39:88:F2:5A:7E:2C:32:79:3C:51:D4:79:B7:3D:34
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/46FEF7041E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.90.234.0-61.90.237.255
119.46.188.0/22
119.46.235.0-119.46.238.255
IPv6:
2001:fb0:100e::/47
Signature Algorithm: sha256WithRSAEncryption
64:20:46:23:85:0c:b0:ec:79:ce:85:5b:ce:13:e6:84:a4:82:
85:81:e6:8b:70:81:96:e9:86:b6:43:6b:93:02:51:9c:7d:7a:
f3:6e:66:0e:50:9f:8b:86:47:3f:49:79:58:38:7d:64:3e:e2:
a4:a3:46:8d:1d:c6:e6:d1:88:4c:b2:36:f4:d0:cc:11:fc:2c:
12:01:a9:61:12:06:80:8e:e1:86:ae:ad:71:da:41:c1:4e:80:
a4:ce:a1:dc:40:08:30:5e:27:74:8d:ed:54:aa:c6:0b:84:7e:
13:fb:d4:70:81:a1:07:3b:e1:d4:2f:d7:71:71:02:08:c2:42:
82:a1:c3:4b:eb:0b:95:31:dd:7d:8a:af:11:ec:a4:fd:da:f2:
fa:b6:e7:25:a1:1b:e5:e9:21:bb:12:5a:61:08:e3:b6:cc:e9:
19:9e:6d:2d:84:98:5f:30:01:cc:06:e2:37:5a:ea:f2:28:42:
3b:d0:28:a4:88:de:e8:a4:9f:f6:8e:94:dd:0b:11:28:c2:40:
f8:e0:64:09:a2:3d:5e:3e:a8:98:83:54:5b:a7:60:e7:88:09:
45:58:59:c2:e0:45:4e:73:e5:ec:47:cd:ea:ca:73:45:85:dd:
eb:cf:dc:b0:fc:66:13:2b:f3:cf:2c:6c:94:b8:d5:b0:ba:92:
7b:b7:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:56 2026 by rpki-client