
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/89040F5A341011F0808A991DC4F9AE02.roa
File: 89040F5A341011F0808A991DC4F9AE02.roa (raw, json)
Hash identifier: XSbMI+UlBWNVtMWApI1sBzS25fpV5xmpW9pr9KdQiGM=
Subject key identifier: 02:3A:82:9D:7E:10:86:49:A7:D2:18:7B:CA:F1:D3:15:83:06:59:63
Certificate issuer: /CN=A9134A42/serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123
Certificate serial: CF
Authority key identifier: 80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/89040F5A341011F0808A991DC4F9AE02.roa
Signing time: Sat 07 Mar 2026 06:42:58 +0000
ROA not before: Sat 07 Mar 2026 06:42:58 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 137910
IP address blocks: 163.61.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl
rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134A42, serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123
Validity
Not Before: Mar 7 06:42:58 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69abc8f2-3ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:5b:02:a1:f7:cf:8d:5c:2d:e5:42:d8:44:
24:fa:53:93:12:a3:e2:6a:97:5a:31:d0:4c:d5:7c:
25:e9:e1:cd:f0:f5:62:29:f8:ea:e8:8b:c3:1c:69:
88:50:25:2e:b3:be:4f:14:8a:7d:97:17:b6:9f:da:
da:1a:82:14:21:38:63:7f:e5:35:4c:40:9f:63:e6:
61:13:cf:b7:4b:88:94:6d:92:9c:ed:0b:41:3c:37:
26:7c:2c:13:b5:9e:d0:b1:83:76:e6:22:29:5b:46:
03:35:27:64:06:57:d9:63:82:d8:9b:3c:e0:59:a3:
61:27:69:79:fb:41:6c:9e:e3:bf:28:04:cb:0e:f0:
8a:ff:8a:c0:33:47:9b:10:a9:05:38:93:8c:61:21:
f6:63:16:9f:9d:a8:99:5f:3a:0a:09:98:9b:99:93:
5a:8e:22:2a:b1:1e:8c:7f:b3:6f:f4:58:2c:f0:04:
4e:30:a1:f3:ad:8a:a0:47:fa:45:08:48:62:c1:77:
8f:65:61:f8:d4:37:40:50:42:f7:06:a5:d3:70:a1:
d7:ba:77:17:7b:0e:e8:ee:b5:aa:e8:38:39:22:74:
d7:fd:7b:96:e5:c6:38:e8:7a:c1:61:02:0c:29:16:
69:50:54:02:a6:46:78:9b:1a:f4:dd:e5:b1:3c:03:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3A:82:9D:7E:10:86:49:A7:D2:18:7B:CA:F1:D3:15:83:06:59:63
X509v3 Authority Key Identifier:
keyid:80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/89040F5A341011F0808A991DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.136.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:2f:e4:9b:85:b9:3d:0e:a1:04:cd:a1:3a:19:d7:ad:68:6d:
22:74:dc:17:f2:ff:6c:bd:8c:68:85:0c:85:79:a6:97:3e:50:
ff:19:64:a1:75:8c:81:0d:b0:e3:02:55:d4:54:ff:3f:7f:ee:
0e:98:47:50:f9:2f:17:08:9a:72:15:8f:e5:8b:6d:bd:1f:3b:
ec:e8:ff:e3:26:d4:4c:12:5d:03:bb:06:1d:68:f3:47:70:ce:
f3:b1:1b:00:83:e3:2c:21:ab:a5:ab:68:91:c5:ce:c4:99:f6:
54:f8:1f:69:ae:c2:38:6d:72:fd:54:ab:8b:e8:7f:e3:30:35:
e8:95:c2:d6:ce:cb:9d:7f:78:e3:ac:12:7a:a6:64:1a:f0:ce:
45:50:be:0a:20:17:22:60:7e:dc:1e:7b:a2:d9:ed:60:9f:57:
0e:18:ce:4b:41:f6:3a:cc:25:ce:aa:db:5e:19:d5:67:9a:1e:
5b:80:9b:19:e2:7c:31:59:6a:51:2a:6d:0f:2e:60:0e:fd:fa:
37:0a:d5:07:4a:ff:db:2d:39:53:6b:85:0a:53:61:29:60:76:
07:99:cb:dc:d2:01:6d:94:eb:ea:0d:60:53:9a:fc:b2:0b:d1:
a1:ec:35:ef:58:79:55:39:38:83:83:9e:c3:a2:89:4f:b2:e9:
70:bb:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:27:11 2026 by rpki-client