
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/613CF60638D211EF88A7B370C4F9AE02.roa
File: 613CF60638D211EF88A7B370C4F9AE02.roa (raw, json)
Hash identifier: xLvnAukowQuOqMyfhlSAcbV4RtP06uwO5EVIBs8+AuA=
Subject key identifier: 05:6F:6C:AB:B4:48:FF:11:EE:D7:D9:D1:13:A5:BE:A5:31:B4:F4:6A
Certificate issuer: /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Certificate serial: 06CE
Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/613CF60638D211EF88A7B370C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:56:47 +0000
ROA not before: Tue 04 Nov 2025 22:42:32 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150127
IP address blocks: 203.10.6.0/24 maxlen: 24
203.10.7.0/24 maxlen: 24
203.10.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1742 (0x6ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149BFB, serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Validity
Not Before: Nov 4 22:42:32 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a453af-d92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:07:63:b7:d1:b4:e7:8d:d0:9f:4a:e7:12:
77:48:60:c7:02:09:7f:a3:9d:78:71:d6:be:6b:6e:
bf:ce:13:16:d4:81:ae:a9:d9:87:9a:59:e4:ed:25:
28:6a:74:02:17:47:14:8c:d9:00:52:f6:eb:eb:c5:
87:4e:9d:98:ba:36:0e:26:30:4f:61:90:61:3e:8e:
55:6f:7a:41:ba:b9:b0:1c:65:2f:b9:0d:e8:49:33:
aa:da:b1:b0:59:a5:c2:37:8d:da:56:d9:85:f2:54:
94:e3:8b:1a:f4:8f:78:e3:15:00:11:fc:ab:07:53:
e5:5d:e7:dd:a5:4b:3a:f5:c3:fc:ce:99:2c:9e:24:
02:cc:42:ee:dc:cf:6c:4b:ad:e2:4a:a4:5a:7e:99:
1b:18:cd:79:48:ec:1a:ba:53:7d:0e:72:47:08:a5:
f8:25:4b:fd:7f:0c:36:e0:57:6c:e0:de:9c:33:31:
13:0c:75:53:fd:dd:e7:a5:d5:ac:8e:5d:0d:50:f3:
e5:1a:88:da:72:43:2d:2b:2e:73:78:80:b6:e7:d5:
09:86:11:2e:82:52:b5:54:e2:2a:fd:09:43:0e:63:
8f:ce:22:f9:19:29:6c:4e:d8:31:53:bf:89:d3:b0:
3b:65:8a:31:dd:f8:86:d4:91:40:7e:6f:4a:f9:a1:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6F:6C:AB:B4:48:FF:11:EE:D7:D9:D1:13:A5:BE:A5:31:B4:F4:6A
X509v3 Authority Key Identifier:
keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/613CF60638D211EF88A7B370C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.10.6.0-203.10.8.255
Signature Algorithm: sha256WithRSAEncryption
34:56:41:02:11:51:8e:e6:e8:c3:bc:e7:d2:f9:7b:4e:53:f9:
13:73:34:dd:07:e4:15:26:17:e7:24:f6:72:cf:dc:b3:aa:e3:
d7:27:d0:82:ee:27:7f:b0:05:3b:26:30:8d:f7:03:af:48:02:
be:69:fd:b7:07:e8:27:12:b5:fe:c3:41:7b:c6:94:10:09:a8:
0c:78:bb:87:7f:e2:a2:3b:9a:01:51:1e:15:1a:70:be:18:14:
1d:01:c2:0d:75:79:57:d8:fa:11:72:92:60:b5:d3:e7:7d:c7:
92:a4:7a:40:dd:d1:1e:af:b2:0f:bf:9c:7d:d6:a7:85:6c:5b:
c6:a7:81:8a:ec:3e:49:0d:5b:48:f3:b8:cb:e1:65:d1:04:75:
c8:56:56:41:aa:97:0c:93:8b:95:8a:dd:dd:1d:e4:21:ed:b5:
b7:75:bc:ec:92:19:be:47:02:c2:10:15:f2:52:90:02:32:79:
7a:f0:da:e1:2b:85:b3:10:07:e5:3a:3c:73:8b:21:0c:1c:ba:
35:d5:d2:2a:84:8e:e5:93:d3:8f:50:ca:d5:c3:81:9d:f3:c9:
60:34:b7:f4:70:9c:3b:1e:33:c0:c7:5a:d3:34:5d:5c:66:7a:
31:53:43:fd:5a:56:55:a9:9f:53:80:ff:a3:5c:c3:7e:70:0e:
ce:3d:27:07
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlCRkIxMTAvBgNVBAUTKEY2RTcxMkZDNUM2OUU3MkY2OTM5NkU1RTExNDJDQzdG
NzhDNjhGRDEwHhcNMjUxMTA0MjI0MjMyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTNhZi1kOTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArxIHY7fRtOeN0J9K5xJ3SGDHAgl/o514cda+a26/zhMW1IGuqdmHmlnk7SUo
anQCF0cUjNkAUvbr68WHTp2YujYOJjBPYZBhPo5Vb3pBurmwHGUvuQ3oSTOq2rGw
WaXCN43aVtmF8lSU44sa9I944xUAEfyrB1PlXefdpUs69cP8zpksniQCzELu3M9s
S63iSqRafpkbGM15SOwaulN9DnJHCKX4JUv9fww24Fds4N6cMzETDHVT/d3npdWs
jl0NUPPlGojackMtKy5zeIC259UJhhEuglK1VOIq/QlDDmOPziL5GSlsTtgxU7+J
07A7ZYox3fiG1JFAfm9K+aFnFwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFAVvbKu0
SP8R7tfZ0ROlvqUxtPRqMB8GA1UdIwQYMBaAFPbnEvxcaecvaTluXhFCzH94xo/R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUJGQi9ERTJERTY0Njk4
MDAxMUVCODA3MURENjhDNEY5QUUwMi85dWNTX0Z4cDV5OXBPVzVlRVVMTWYzakdq
OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzl1Y1NfRnhwNXk5cE9XNWVFVUxNZjNqR2o5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlCRkIvREUyREU2NDY5ODAwMTFFQjgwNzFERDY4QzRGOUFFMDIvNjEzQ0Y2MDYz
OEQyMTFFRjg4QTdCMzcwQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBAHLCgYDBADLCggwDQYJKoZIhvcNAQELBQADggEBADRWQQIRUY7m
6MO859L5e05T+RNzNN0H5BUmF+ck9nLP3LOq49cn0ILuJ3+wBTsmMI33A69IAr5p
/bcH6CcStf7DQXvGlBAJqAx4u4d/4qI7mgFRHhUacL4YFB0Bwg11eVfY+hFykmC1
0+d9x5KkekDd0R6vsg+/nH3Wp4VsW8angYrsPkkNW0jzuMvhZdEEdchWVkGqlwyT
i5WK3d0d5CHttbd1vOySGb5HAsIQFfJSkAIyeXrw2uErhbMQB+U6PHOLIQwcujXV
0iqEjuWT049QytXDgZ3zyWA0t/RwnDseM8DHWtM0XVxmejFTQ/1aVlWpn1OA/6Nc
w35wDs49Jwc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:12 2026 by rpki-client