
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/F9E12AD89D0011F08C93B545C4F9AE02.roa
File: F9E12AD89D0011F08C93B545C4F9AE02.roa (raw, json)
Hash identifier: sLhj2zyAg6egVDc0WrsXEOyJk+cLRHE/hif82VB3if4=
Subject key identifier: DD:B8:15:6A:28:88:9E:A3:C3:AE:D5:31:C9:AF:9B:30:3C:9F:F7:CC
Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial: 09BC
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/F9E12AD89D0011F08C93B545C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:06:33 +0000
ROA not before: Mon 29 Sep 2025 06:53:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38138
IP address blocks: 114.129.12.0/24 maxlen: 24
2405:eec0::/32 maxlen: 32
2405:eec0:1::/48 maxlen: 48
2405:eec0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2492 (0x9bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Validity
Not Before: Sep 29 06:53:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48e39-ed47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b8:de:22:4e:44:f5:f3:0c:fd:dc:66:8f:f9:
39:43:dc:2d:ca:f3:ed:d6:c6:7b:42:b8:d2:05:91:
c3:ba:df:3f:bf:6a:81:eb:98:a0:8b:41:76:58:ff:
03:c4:b5:10:04:11:7f:3a:00:5b:0b:11:49:53:f4:
1f:67:90:cd:65:9d:60:b7:d0:18:f6:21:21:9f:50:
35:09:92:38:a0:7e:60:45:30:4b:2a:97:38:ff:63:
af:fa:ab:2f:a3:02:f5:ac:df:1d:36:04:59:a2:60:
7c:fc:86:b2:25:b5:36:d4:63:45:60:ad:b1:33:a4:
0e:78:bf:40:b4:44:1d:88:3f:64:45:ac:c0:f7:e9:
93:8f:dc:bb:30:6f:2c:e1:e1:62:c7:47:fe:56:ba:
bf:ec:31:c4:b4:0f:56:a6:ba:19:25:37:a9:51:50:
16:20:50:f8:91:2c:43:c1:2e:e8:ce:4b:9b:7a:bf:
9c:9b:37:56:11:9e:0f:04:83:72:b0:eb:ae:7a:36:
d9:bd:d4:9b:f1:70:99:93:a6:c6:2d:46:2d:90:ad:
99:b6:30:61:bc:28:ee:4f:6c:26:27:3a:a2:fe:54:
5e:04:3c:df:3a:ac:98:f3:3f:8b:3f:47:97:e0:67:
3d:b3:51:f0:89:66:e1:cf:5b:4a:d1:ec:e6:00:f6:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B8:15:6A:28:88:9E:A3:C3:AE:D5:31:C9:AF:9B:30:3C:9F:F7:CC
X509v3 Authority Key Identifier:
keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/F9E12AD89D0011F08C93B545C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
114.129.12.0/24
IPv6:
2405:eec0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:db:e6:d1:50:93:d5:82:bc:48:f0:df:8b:7a:9c:08:6b:f5:
e1:58:9d:ab:f1:ff:d3:96:df:21:07:2c:43:9e:8f:db:e7:15:
8c:2b:36:52:51:0f:35:1b:7d:b2:b4:90:7b:da:cc:b2:25:05:
42:9c:c9:df:35:c9:d7:79:a0:a0:08:c2:f2:6f:fe:2a:ae:08:
99:c7:08:f5:98:02:5d:cc:0e:bf:b7:ed:88:46:6b:2e:fc:85:
8f:74:61:c5:69:0e:8a:2e:37:42:ca:ea:6d:9d:d3:bf:60:ff:
93:43:f8:5d:e2:e7:af:3b:8a:a8:48:78:54:3e:99:ef:ed:53:
40:75:20:29:43:e9:99:d0:80:fb:e1:f1:47:6e:4c:8a:44:19:
20:f4:79:35:ce:38:b9:ab:cb:cf:ab:1b:a3:e4:b7:cf:6a:a4:
98:a2:be:de:ad:1d:42:91:80:9c:da:fd:d0:1d:9d:df:3c:14:
ef:70:5e:f0:77:b7:74:98:1e:04:09:fd:11:51:f7:fb:a4:61:
16:f1:5b:57:00:2b:6c:84:cf:09:07:4b:e4:9f:81:70:2a:a6:
01:86:e8:b0:0c:99:e6:aa:be:2e:a2:e5:23:55:d3:04:f3:ab:
7e:3c:be:06:5a:7e:e1:0b:ae:e8:11:03:0b:41:5f:5b:f6:f5:
2f:dc:cc:94
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICCbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC
RTE2OTA5MTgwHhcNMjUwOTI5MDY1MzE3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGUzOS1lZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkLjeIk5E9fMM/dxmj/k5Q9wtyvPt1sZ7QrjSBZHDut8/v2qB65igi0F2WP8D
xLUQBBF/OgBbCxFJU/QfZ5DNZZ1gt9AY9iEhn1A1CZI4oH5gRTBLKpc4/2Ov+qsv
owL1rN8dNgRZomB8/IayJbU21GNFYK2xM6QOeL9AtEQdiD9kRazA9+mTj9y7MG8s
4eFix0f+Vrq/7DHEtA9WproZJTepUVAWIFD4kSxDwS7ozkuber+cmzdWEZ4PBINy
sOuuejbZvdSb8XCZk6bGLUYtkK2ZtjBhvCjuT2wmJzqi/lReBDzfOqyY8z+LP0eX
4Gc9s1HwiWbhz1tK0ezmAPZ1iQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFN24FWoo
iJ6jw67VMcmvmzA8n/fMMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5
NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzBCREUvN0U1QUMzRTA4OTcxMTFFQTkyNDAyQTBBQzRGOUFFMDIvRjlFMTJBRDg5
RDAwMTFGMDhDOTNCNTQ1QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQAcoEMMA0EAgACMAcDBQAkBe7AMA0GCSqGSIb3DQEBCwUAA4IBAQC0
2+bRUJPVgrxI8N+LepwIa/XhWJ2r8f/Tlt8hByxDno/b5xWMKzZSUQ81G32ytJB7
2syyJQVCnMnfNcnXeaCgCMLyb/4qrgiZxwj1mAJdzA6/t+2IRmsu/IWPdGHFaQ6K
LjdCyuptndO/YP+TQ/hd4uevO4qoSHhUPpnv7VNAdSApQ+mZ0ID74fFHbkyKRBkg
9Hk1zji5q8vPqxuj5LfPaqSYor7erR1CkYCc2v3QHZ3fPBTvcF7wd7d0mB4ECf0R
Uff7pGEW8VtXACtshM8JB0vkn4FwKqYBhuiwDJnmqr4uouUjVdME86t+PL4GWn7h
C67oEQMLQV9b9vUv3MyU
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:52 2026 by rpki-client