
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/D8F7EBB0A5DB11F1B9CB19293711F970.roa
File: D8F7EBB0A5DB11F1B9CB19293711F970.roa (raw, json)
Hash identifier: oTvEKrWFUenaamzbuTSgsu0SUBBagSjY4Cjk6T15Eow=
Subject key identifier: FD:8F:82:B8:CD:20:CE:86:6E:47:07:9A:EF:B0:81:5D:BC:07:04:8B
Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
Certificate serial: 095E
Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/D8F7EBB0A5DB11F1B9CB19293711F970.roa
Signing time: Tue 01 Sep 2026 08:05:08 +0000
ROA not before: Tue 01 Sep 2026 08:05:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38060
IP address blocks: 113.11.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl
rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2398 (0x95e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
Validity
Not Before: Sep 1 08:05:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a968734-0e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:2e:ec:2e:18:25:0d:ff:8d:3a:75:31:ee:
41:0b:3c:0c:20:3c:3a:40:64:1c:8b:19:57:2d:be:
a2:1b:8b:3a:16:19:65:59:bd:74:6f:74:11:a2:1d:
95:d7:1a:09:76:4b:d8:bc:c6:1e:09:50:83:d8:ce:
c5:3b:c6:a3:a8:45:19:c2:cf:44:a8:8d:bd:15:3a:
3c:b4:e6:b8:7f:9c:8f:f4:c3:df:ff:83:e0:0e:d9:
fe:59:85:b4:f5:62:90:38:ad:b7:23:51:93:80:8c:
e9:73:8e:81:35:b9:f8:a7:08:78:8e:19:51:a9:7a:
f2:53:fe:4d:93:05:34:5a:8c:d1:a8:1a:d8:ce:8f:
ca:b9:ce:48:bd:44:2e:1a:05:3a:91:18:0d:9a:c0:
46:93:85:17:17:ab:1e:fe:60:5c:9e:48:3f:a5:1a:
27:38:12:ca:9d:bd:fe:88:5b:6e:5a:d2:40:25:d9:
89:dc:26:6a:d0:e5:c2:2e:ee:ea:a2:e5:31:3b:8b:
ab:56:86:5e:41:6c:19:6f:9e:1e:1d:67:00:34:4c:
4b:c8:1f:05:cb:d6:29:ef:16:9b:1a:44:a8:dc:2f:
1e:e4:5c:dd:1d:00:e2:30:85:27:c0:ea:e7:04:b9:
21:c9:7a:c3:ee:69:fe:7f:63:b8:1b:e4:d0:fa:d8:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8F:82:B8:CD:20:CE:86:6E:47:07:9A:EF:B0:81:5D:BC:07:04:8B
X509v3 Authority Key Identifier:
keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/D8F7EBB0A5DB11F1B9CB19293711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
113.11.177.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:cd:4d:9a:47:7c:1c:f9:46:73:be:68:d0:45:d1:d8:4e:00:
a5:b7:cb:84:70:df:4a:30:af:9a:2d:80:9d:51:09:50:d9:72:
36:06:c2:1c:0e:33:84:f0:cc:a1:a3:7b:44:41:eb:cb:e7:af:
b9:94:00:bd:be:a1:de:5e:af:af:ad:61:59:cc:7a:13:d5:7a:
3f:c8:d4:42:1f:7b:96:03:19:7c:ac:54:32:9e:51:46:fb:67:
7c:65:75:93:8d:0c:46:40:ce:a9:2d:2f:f5:d8:b3:59:22:6d:
02:72:09:c8:dd:9e:1e:2d:f1:ec:b4:b5:d8:f3:05:11:3f:22:
58:ae:56:e9:b6:3a:f7:bb:b3:4d:65:28:63:58:75:0a:8f:24:
65:c4:52:0f:3a:84:b5:98:e6:8f:25:bf:b1:8a:84:1f:cd:75:
12:d9:3c:43:95:56:90:b8:08:15:ac:28:cf:2c:7f:69:32:fd:
15:71:6b:60:fc:60:e3:56:38:b8:f9:47:6f:cd:63:5f:e7:3a:
7d:f3:30:38:37:81:7d:1f:7e:68:d8:42:0a:33:38:d9:53:77:
12:31:a4:2f:bb:96:c3:12:a2:b3:78:8a:47:ce:96:79:6e:33:
a8:57:84:dd:9e:64:10:93:a4:ee:b9:e9:30:d6:52:91:a7:62:
bc:8e:0a:63
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE
OUZGQTczQkQwHhcNMjYwOTAxMDgwNTA4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk2ODczNC0wZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1xgu7C4YJQ3/jTp1Me5BCzwMIDw6QGQcixlXLb6iG4s6FhllWb10b3QRoh2V
1xoJdkvYvMYeCVCD2M7FO8ajqEUZws9EqI29FTo8tOa4f5yP9MPf/4PgDtn+WYW0
9WKQOK23I1GTgIzpc46BNbn4pwh4jhlRqXryU/5NkwU0WozRqBrYzo/Kuc5IvUQu
GgU6kRgNmsBGk4UXF6se/mBcnkg/pRonOBLKnb3+iFtuWtJAJdmJ3CZq0OXCLu7q
ouUxO4urVoZeQWwZb54eHWcANExLyB8Fy9Yp7xabGkSo3C8e5FzdHQDiMIUnwOrn
BLkhyXrD7mn+f2O4G+TQ+tgE6QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP2PgrjN
IM6GbkcHmu+wgV28BwSLMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1
QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDVDOUIvRDM5RkZFNEFDNUEwMTFFQTg3ODU5MDUzQzRGOUFFMDIvRDhGN0VCQjBB
NURCMTFGMUI5Q0IxOTI5MzcxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAcQuxMA0GCSqGSIb3DQEBCwUAA4IBAQBLzU2aR3wc+UZzvmjQRdHY
TgClt8uEcN9KMK+aLYCdUQlQ2XI2BsIcDjOE8Myho3tEQevL56+5lAC9vqHeXq+v
rWFZzHoT1Xo/yNRCH3uWAxl8rFQynlFG+2d8ZXWTjQxGQM6pLS/12LNZIm0CcgnI
3Z4eLfHstLXY8wURPyJYrlbptjr3u7NNZShjWHUKjyRlxFIPOoS1mOaPJb+xioQf
zXUS2TxDlVaQuAgVrCjPLH9pMv0VcWtg/GDjVji4+UdvzWNf5zp98zA4N4F9H35o
2EIKMzjZU3cSMaQvu5bDEqKzeIpHzpZ5bjOoV4TdnmQQk6Tuuekw1lKRp2K8jgpj
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:48:43 2026 by rpki-client