
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/49CFE3A0AB3311F08C67FB1AC4F9AE02.roa
File: 49CFE3A0AB3311F08C67FB1AC4F9AE02.roa (raw, json)
Hash identifier: dhlmrjLPFkeOjKrN1TewXYy3bU4cFFTjdCHoD9tAbH0=
Subject key identifier: F8:C3:4E:97:CD:0C:33:38:1B:07:E3:24:CA:33:CC:82:D7:58:DC:5E
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B84
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/49CFE3A0AB3311F08C67FB1AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:29:15 +0000
ROA not before: Fri 17 Oct 2025 08:28:42 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 154179
IP address blocks: 203.144.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15236 (0x3b84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Oct 17 08:28:42 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4938a-d38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:69:03:7b:42:00:89:c1:20:6b:7f:29:f2:
9c:8b:28:01:f1:ec:5d:ee:f6:ba:5c:3d:87:ff:32:
4b:34:c5:2c:5f:80:71:44:a4:89:29:de:40:4e:07:
03:03:db:cd:dd:07:ee:45:16:75:a0:f1:5c:0c:78:
f6:d9:3b:7d:91:d2:5f:f4:ae:6a:90:86:39:1e:ea:
86:ad:ab:bb:0a:f5:03:27:55:f6:54:8a:5c:ab:62:
3f:23:ce:4e:ae:f0:e5:06:a4:62:10:bb:19:c2:10:
6a:45:35:40:62:ea:6a:dc:73:0e:03:bd:b6:9f:80:
66:ca:c7:cf:f4:8a:ff:1f:84:33:f9:78:52:db:9e:
50:a4:03:78:be:6f:94:31:aa:79:dd:28:14:eb:83:
08:76:10:10:21:15:1d:de:0c:d2:35:b7:98:b7:76:
1b:f5:4f:24:a2:33:3c:aa:aa:7d:dc:4b:67:f5:08:
9e:44:a6:1b:f0:04:ba:d7:83:d6:bf:dd:27:8c:7a:
83:54:cf:1a:58:88:4a:39:72:2c:19:21:40:36:a6:
ce:57:46:37:4f:98:e3:a5:22:5a:58:25:81:52:0f:
fb:be:2d:ed:9d:81:08:d9:32:88:3f:0b:e8:72:8c:
47:5d:bd:73:ad:86:9e:b2:b4:58:40:70:43:d8:91:
b3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C3:4E:97:CD:0C:33:38:1B:07:E3:24:CA:33:CC:82:D7:58:DC:5E
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/49CFE3A0AB3311F08C67FB1AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.144.131.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d0:56:55:17:8d:8d:4e:81:d2:ed:b7:94:e2:1e:0a:9e:92:
38:77:a0:86:4e:74:ff:a6:1c:45:b4:c0:af:1b:56:22:4e:17:
bf:bc:07:5a:29:d6:c1:02:66:c4:4c:f3:60:20:b7:aa:ef:a0:
86:50:c8:c3:21:4e:ee:ca:ce:50:3c:8c:07:33:20:72:e6:79:
04:09:56:53:e8:20:37:de:2a:b9:a9:ad:e3:bd:80:e9:e3:c5:
2c:2b:92:b3:01:85:05:f6:30:18:60:b4:f0:73:4b:91:f2:f8:
b2:5a:32:23:11:66:02:81:e9:d7:d4:0e:0a:08:b1:0a:d8:98:
e1:0a:21:7e:ea:19:72:95:5c:09:43:07:17:f2:5c:08:c7:9c:
02:2e:b2:fd:99:d1:4c:b9:18:7a:77:a8:22:2d:7a:13:0a:8d:
87:4e:2a:b2:9b:32:fa:22:6b:25:cf:05:36:81:f2:61:63:28:
11:b1:5e:29:03:9d:c6:f5:86:13:db:da:9a:dc:04:18:ce:1a:
bb:d3:bb:e4:e8:5a:84:7d:70:c4:4e:53:3b:6d:3b:b9:d0:dd:
39:2a:f5:f1:63:6d:31:21:5e:72:fe:b6:10:b6:bc:33:20:9c:
e5:d8:13:9b:ba:2c:95:b3:a8:e8:77:e8:ce:fd:5d:b3:df:d8:
07:49:68:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:05 2026 by rpki-client