
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/488867FE1E0111E9A590C837C4F9AE02.roa
File: 488867FE1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: r4Kz+9iKcpCTtx/OYRJw3Q1op8tr0MR7pYa8UM2vrvQ=
Subject key identifier: 0A:1F:40:DE:7C:33:8C:3E:65:DB:56:1C:96:92:30:6E:E7:F5:D9:BF
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B59
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/488867FE1E0111E9A590C837C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:28:37 +0000
ROA not before: Mon 14 Jul 2025 14:51:09 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 38326
IP address blocks: 210.86.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15193 (0x3b59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:51:09 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a49365-dab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:ef:2b:b4:b0:03:9c:42:98:ad:3f:88:4e:
61:88:5e:69:e4:b8:b8:57:4a:61:9e:f5:8e:61:d1:
69:e2:f9:49:3f:01:10:38:c0:0c:89:bc:80:5b:b9:
90:2c:b9:63:e8:47:0b:d4:bb:9b:e0:f4:e4:46:f4:
45:13:8c:19:00:9a:61:fd:1e:34:fa:d1:87:f8:88:
bc:19:4a:9d:fa:e2:bc:4c:ba:91:57:3b:72:29:e2:
d4:4d:cd:0d:00:c6:7c:3c:fc:2f:a0:73:2a:e2:eb:
42:74:f7:00:5f:3d:45:a8:28:cf:11:ee:10:10:a9:
e3:3f:a8:dc:1f:ab:23:a8:1a:b3:9f:7f:37:4f:92:
0c:bc:67:d7:8a:04:5a:fa:f9:a6:5d:67:fb:42:44:
b9:1d:dd:c5:8d:6c:9f:88:66:20:0a:26:a0:14:29:
31:2f:e9:f4:fb:65:46:9c:e5:db:ef:55:37:7e:06:
d4:94:d3:7a:a1:bf:1d:74:d5:20:14:fb:4d:c8:6d:
ce:8f:8e:77:22:18:42:a1:e4:e5:49:4e:2d:91:20:
17:1d:9e:34:b6:c0:64:30:f6:8c:f0:f6:0e:dd:74:
dd:40:60:f7:55:80:13:c7:ac:12:77:48:2a:65:49:
e2:07:e0:41:a8:a1:9d:44:1d:0d:76:18:7f:42:c9:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1F:40:DE:7C:33:8C:3E:65:DB:56:1C:96:92:30:6E:E7:F5:D9:BF
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/488867FE1E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.86.221.0/24
Signature Algorithm: sha256WithRSAEncryption
29:80:b1:e1:16:6b:b4:9e:ec:82:2b:b1:a1:65:3a:fa:78:98:
3c:5a:01:41:eb:8e:bc:69:db:af:7f:18:d3:55:51:7a:4a:37:
5f:87:d6:51:27:c5:fc:7c:68:9c:47:e9:fc:15:78:55:5c:f7:
46:0d:7e:31:66:2d:8d:cf:91:c3:9c:43:08:8f:7c:a7:58:6f:
4f:61:cd:5e:ec:14:0c:62:a3:78:05:16:a5:89:d0:bf:61:f4:
24:28:64:59:a7:e4:f7:dc:8a:da:2e:8f:5c:58:1a:9f:59:d1:
9d:f8:3c:a2:6a:a6:3c:03:40:f5:23:88:82:ca:5f:ae:d0:0c:
ab:1d:4f:59:bb:14:96:5a:e4:8a:39:3e:43:7a:f1:5f:3c:ca:
20:a4:1b:67:74:8e:a1:c3:1b:63:07:84:98:a7:12:50:33:8a:
eb:a5:15:7d:5b:69:39:06:c9:d0:bc:21:4f:ac:a2:2c:5a:57:
80:c2:98:47:07:e1:32:66:62:1f:ac:69:a4:f1:78:25:72:ad:
0a:8d:78:c8:22:ad:99:1c:30:5f:4a:48:10:c7:3d:f4:e2:75:
ce:90:ba:80:db:96:d4:ab:fe:32:57:b2:ae:22:22:9f:3d:74:
8a:8b:6f:aa:dd:f9:a9:e3:73:a8:a0:a6:77:5f:fa:34:56:77:
e9:3a:4c:5a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICO1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTA5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTM2NS1kYWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnK7vK7SwA5xCmK0/iE5hiF5p5Li4V0phnvWOYdFp4vlJPwEQOMAMibyAW7mQ
LLlj6EcL1Lub4PTkRvRFE4wZAJph/R40+tGH+Ii8GUqd+uK8TLqRVztyKeLUTc0N
AMZ8PPwvoHMq4utCdPcAXz1FqCjPEe4QEKnjP6jcH6sjqBqzn383T5IMvGfXigRa
+vmmXWf7QkS5Hd3FjWyfiGYgCiagFCkxL+n0+2VGnOXb71U3fgbUlNN6ob8ddNUg
FPtNyG3Oj453IhhCoeTlSU4tkSAXHZ40tsBkMPaM8PYO3XTdQGD3VYATx6wSd0gq
ZUniB+BBqKGdRB0Ndhh/QskvwQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAofQN58
M4w+ZdtWHJaSMG7n9dm/MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNDg4ODY3RkUx
RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0lbdMA0GCSqGSIb3DQEBCwUAA4IBAQApgLHhFmu0nuyCK7GhZTr6
eJg8WgFB6468aduvfxjTVVF6Sjdfh9ZRJ8X8fGicR+n8FXhVXPdGDX4xZi2Nz5HD
nEMIj3ynWG9PYc1e7BQMYqN4BRalidC/YfQkKGRZp+T33IraLo9cWBqfWdGd+Dyi
aqY8A0D1I4iCyl+u0AyrHU9ZuxSWWuSKOT5DevFfPMogpBtndI6hwxtjB4SYpxJQ
M4rrpRV9W2k5BsnQvCFPrKIsWleAwphHB+EyZmIfrGmk8Xglcq0KjXjIIq2ZHDBf
SkgQxz304nXOkLqA25bUq/4yV7KuIiKfPXSKi2+q3fmp43OooKZ3X/o0VnfpOkxa
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:59 2026 by rpki-client