
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/517080EA1E0111E9A590C837C4F9AE02.roa
File: 517080EA1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: nqrpetdHw7HA9ID5iYH7z+tBGUAeYz4E8ezp1KfJpds=
Subject key identifier: 85:A0:2F:87:2D:E8:42:AA:DD:2B:B5:CB:B2:C2:2C:1D:0A:86:93:9C
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B67
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/517080EA1E0111E9A590C837C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:28:49 +0000
ROA not before: Mon 14 Jul 2025 14:51:20 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 55451
IP address blocks: 119.46.81.0/24 maxlen: 24
119.46.82.0/24 maxlen: 24
2001:fb0:10a2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15207 (0x3b67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:51:20 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a49371-b293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:7d:ca:92:75:4e:2c:cc:82:70:d0:53:1d:
15:0d:45:cc:7b:88:81:8c:58:58:91:bd:f2:dd:12:
5c:a6:bb:f9:af:ff:97:96:16:8d:ce:df:1d:d1:76:
59:11:26:a0:31:ea:8f:1a:04:84:cf:75:3a:8c:1e:
8b:06:c5:c4:d2:75:a0:05:81:9c:8c:91:7a:04:73:
27:67:ec:d7:93:c0:6b:5e:68:12:62:35:b5:ed:3c:
d0:1b:9e:59:29:6a:bf:df:a0:e4:40:e5:82:36:55:
64:ef:0e:ef:38:8d:50:13:4f:bc:b2:f5:37:62:98:
a3:4f:31:1f:11:59:72:bd:4a:d7:f4:c1:df:9c:d4:
1b:c7:7a:c7:ce:e9:14:84:83:1e:39:ce:10:15:a0:
62:38:d9:a7:40:16:3b:47:43:e7:c8:2b:20:4f:ec:
c8:d6:c8:0e:8c:ee:8c:56:d8:33:5b:8e:e9:e4:d4:
03:6f:a1:aa:1d:aa:59:db:5e:24:3e:a7:cc:d0:02:
2b:91:e8:c8:a3:7d:86:56:5e:eb:72:10:6a:f5:e4:
d0:db:6f:26:85:0c:8a:ea:f2:ad:65:0a:0e:8c:ec:
b2:5a:a6:27:42:44:70:0e:1a:a9:a1:27:a8:a6:0d:
cd:93:3a:d5:1d:f8:4e:93:2f:e6:85:50:c7:cf:8d:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A0:2F:87:2D:E8:42:AA:DD:2B:B5:CB:B2:C2:2C:1D:0A:86:93:9C
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/517080EA1E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.46.81.0-119.46.82.255
IPv6:
2001:fb0:10a2::/48
Signature Algorithm: sha256WithRSAEncryption
4b:6e:0e:4a:bc:26:cd:a7:83:4c:fe:0a:03:a1:17:3a:36:48:
13:f5:f7:28:3b:34:f2:c7:3a:dd:30:d2:53:25:8b:b0:0d:b1:
09:1e:cb:0b:ee:78:10:63:d7:cc:59:d4:ab:35:81:1e:b2:97:
3f:7d:15:01:34:89:24:50:76:bb:9c:ac:1c:2e:19:a9:99:2a:
0f:c8:5d:28:0b:99:c1:64:8a:c2:61:3d:7d:ee:0b:31:a7:b4:
b6:14:30:b1:94:d7:83:0a:85:e8:10:76:b8:e5:c0:24:ba:eb:
f7:d0:44:de:02:97:9b:32:6a:c6:88:b0:6a:d6:f1:b6:d1:15:
e8:03:10:ce:16:32:4b:f8:72:3d:22:7b:09:4f:53:f6:bc:cf:
b3:cd:ae:0a:4f:d6:53:d7:d4:5c:fa:b2:2f:39:85:f8:5e:48:
0d:91:40:57:98:5c:12:00:ef:8e:5e:26:a8:ef:56:89:55:40:
6a:1b:77:83:fc:41:4b:71:2d:d4:04:8f:7a:b0:81:37:41:ae:
ca:2a:58:7e:4e:e2:e5:98:f2:9a:25:98:68:24:a6:2e:6e:b4:
8e:34:a4:db:88:32:3b:04:b1:77:8f:a1:49:ff:d9:eb:09:e0:
96:9a:02:af:63:64:ae:d7:57:d1:58:18:ca:73:40:63:2c:c5:
e5:c5:10:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:25:43 2026 by rpki-client