
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/561E3BF01E0111E9A590C837C4F9AE02.roa
File: 561E3BF01E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: qJeONy7BX5Mtjw/5uDlHzjzPpzE/Xi0ABn/AAQ2eTG4=
Subject key identifier: A2:FE:47:73:EB:07:88:8F:22:43:7E:5C:73:81:71:8F:9C:F9:91:68
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B75
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/561E3BF01E0111E9A590C837C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:29:01 +0000
ROA not before: Mon 14 Jul 2025 14:51:32 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 55932
IP address blocks: 119.46.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15221 (0x3b75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:51:32 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4937c-fad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:4e:f6:13:a7:5a:b3:b6:98:13:06:08:7a:
34:03:cb:74:9f:d9:6b:fd:e1:07:6d:97:a6:19:a6:
8e:a1:28:5a:5f:54:84:5e:0d:a0:68:f4:cb:75:c2:
35:a3:a8:9b:88:1e:e4:bc:59:b5:99:9e:84:b1:70:
ac:5b:18:43:17:3d:06:8b:e0:8a:c6:c7:17:de:d1:
69:d6:f8:55:fb:86:42:a8:1b:87:9f:f3:bf:bf:8c:
e7:6b:55:57:64:fb:fd:c4:be:af:09:e2:6a:99:d2:
a8:ff:48:a5:cd:f0:17:0b:06:75:15:22:ef:4c:d8:
87:c3:3c:60:56:a3:0c:12:01:1f:8d:0c:5c:5e:75:
33:68:86:60:8f:d5:eb:03:a5:1b:3e:46:b7:5c:59:
2b:11:50:30:57:2d:da:13:b0:3b:3b:a9:1a:d5:8d:
44:8d:50:0d:e2:a6:dd:1d:db:42:af:fa:30:fe:81:
ec:4a:e9:da:cb:3d:d6:36:cd:8f:3f:90:28:45:32:
5b:db:78:28:8b:32:eb:5d:94:8f:37:b2:b0:9e:39:
6d:08:e7:cf:e1:21:1c:8a:01:47:46:8d:95:38:42:
49:ad:b8:b5:29:e7:59:e8:ca:d4:76:b0:62:f3:a3:
16:6a:d5:ab:f5:7d:82:76:af:71:a5:27:9f:12:ee:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FE:47:73:EB:07:88:8F:22:43:7E:5C:73:81:71:8F:9C:F9:91:68
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/561E3BF01E0111E9A590C837C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.46.182.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e6:35:03:81:51:54:60:5e:36:59:aa:1f:2b:d9:9d:2f:76:
c7:36:1e:01:db:2f:33:13:13:39:40:f1:6e:74:3b:e5:bf:f5:
d5:37:26:5b:4c:45:8e:1a:aa:fc:80:24:fc:61:35:25:dc:fb:
d9:eb:c8:bc:f2:3d:a1:d2:37:1d:82:f6:1b:0a:a5:04:6c:de:
fe:99:08:ca:a8:e5:64:0a:2e:44:4e:b0:9a:72:b0:cc:5e:a8:
a9:c5:20:75:88:d3:89:a2:f1:3f:c5:b7:b6:e9:78:c8:38:45:
76:3e:b1:d1:6a:69:97:1a:27:f8:43:5d:39:fd:f7:a0:e2:f3:
91:a7:94:d7:dc:3b:9d:10:e4:16:5f:d3:4e:9f:c5:60:29:52:
7c:82:2a:52:f7:0e:8a:99:7b:a2:9f:7f:47:a0:f3:4b:e7:84:
16:4c:9c:cc:be:2e:cc:83:3e:4c:82:07:2c:f0:30:07:8e:23:
52:50:5c:de:67:0b:90:3a:58:4d:5c:32:b4:7e:0a:1f:6d:9c:
64:22:83:d5:51:27:6e:e7:4c:80:75:b8:66:6f:72:9a:72:13:
79:fc:55:87:e0:05:f0:dc:94:4b:07:3e:7f:34:7e:d8:ec:c4:
0d:42:e9:8e:d3:e4:4f:3b:df:4f:29:ca:db:e3:19:6b:fb:43:
56:80:9e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:00 2026 by rpki-client