
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9BC27CB01E0211E9862ECE3FC4F9AE02.roa
File: 9BC27CB01E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier: Ovw/0G0kQVHTCfhH/cwDBOhTKrEcoAEPs59cohYwI0U=
Subject key identifier: B1:19:CB:20:71:59:56:BF:6D:CC:69:0A:C4:B6:B5:A6:97:16:7C:9E
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 39B7
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9BC27CB01E0211E9862ECE3FC4F9AE02.roa
Signing time: Mon 14 Jul 2025 14:50:16 +0000
ROA not before: Mon 14 Jul 2025 14:50:16 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132063
IP address blocks: 171.102.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14775 (0x39b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:50:16 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68751928-11d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:06:ee:0b:d3:40:9c:f8:88:f3:86:58:d5:fb:
5d:22:5d:92:74:73:ad:03:91:6e:74:52:5d:81:68:
55:21:dc:23:d8:35:2d:ec:03:74:34:34:71:c6:03:
81:74:f8:19:d0:1d:7b:16:85:a0:ee:64:fa:11:dc:
11:3f:2a:d8:1d:14:80:7f:d8:77:ae:c5:d2:7b:af:
fa:7f:17:df:00:6a:a2:1f:79:4d:89:71:4b:39:42:
08:83:98:9f:0c:b3:53:1e:cc:2b:05:49:08:7c:38:
d8:1b:c0:00:5f:07:5a:09:45:86:f3:ff:92:00:67:
d9:00:6f:cc:fd:82:6b:9c:f4:bb:2a:ec:89:e2:f3:
f6:37:cf:66:13:e9:82:3b:45:fc:d1:c6:79:3e:2a:
43:9f:72:01:b9:55:92:44:0e:a6:67:99:48:37:a0:
7d:2b:65:bc:c0:e3:9e:76:f8:40:0f:28:64:28:0e:
c3:56:5d:86:8e:2a:8f:46:72:fa:78:f9:9c:c9:5a:
38:81:c4:25:c3:31:5d:62:23:9e:ae:fa:64:a4:99:
dc:6b:8f:fd:a0:9d:65:72:ad:d9:d2:d5:6a:c2:aa:
42:b9:b5:f1:5e:e0:0f:18:08:25:cc:7e:a0:4f:8a:
0b:12:5a:bf:66:c0:2e:43:9f:43:87:e0:93:a0:a7:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:19:CB:20:71:59:56:BF:6D:CC:69:0A:C4:B6:B5:A6:97:16:7C:9E
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9BC27CB01E0211E9862ECE3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
171.102.42.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a9:c6:11:85:1b:6e:7e:c1:91:5a:12:d2:ff:a7:c3:b2:79:
2e:9f:09:75:66:73:c7:71:87:7f:71:38:7d:db:3e:54:c8:13:
e0:1c:eb:57:11:d1:44:67:c1:3a:aa:84:08:f3:62:c4:1c:99:
3a:e9:e9:10:a2:18:c7:eb:8e:0f:64:99:96:25:e1:52:34:a5:
c0:a0:6b:f2:b2:da:c1:09:c8:2f:5c:86:87:4f:a8:a7:5c:a2:
25:bb:d7:e5:d0:23:72:f0:55:7a:9c:bc:8d:a3:17:ab:7d:3a:
2f:03:80:be:59:30:5c:f0:45:97:38:c6:25:81:83:fd:28:ad:
9b:f6:37:50:1c:f9:04:d3:a3:cb:ee:c6:37:bf:c8:af:e9:4b:
9c:ad:9d:02:1c:31:91:77:85:bf:61:4d:42:ee:e7:ea:e5:0f:
14:11:de:b4:dd:d4:85:96:f8:0e:80:fb:6b:18:b0:66:b2:94:
3a:47:e2:a4:89:3a:33:4c:67:8b:1d:9b:1a:c6:76:3c:0d:ea:
60:46:0f:ca:53:5f:6b:b0:0d:14:c1:11:1f:53:72:86:74:85:
81:ac:a9:95:33:7c:97:cc:24:0e:a2:a0:bd:5a:f4:73:8e:4f:
fb:f4:45:c8:22:45:13:03:9b:5b:15:ca:c9:d7:24:86:9c:71:
38:ae:c3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:52:01 2025 by rpki-client