
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa
File: EF706AC45C7311EF9CC47281C4F9AE02.roa (raw, json)
Hash identifier: 5t2Yq05hPwtXuLtqs8kweaIaku2qocKgZs9gLGmRXRc=
Subject key identifier: 63:AE:C7:21:7A:88:36:1E:C5:2C:57:06:FD:25:10:A9:B7:FE:50:F5
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 36BB
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:45:33 +0000
ROA not before: Tue 02 Sep 2025 15:01:20 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 141158
IP address blocks: 117.121.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14011 (0x36bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Sep 2 15:01:20 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4894d-da23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:c8:8f:01:24:6f:c6:f5:9b:30:c7:be:c1:
3c:13:1d:b3:14:c0:dc:10:c2:ec:2d:b2:9d:df:01:
c2:ce:45:7c:25:ca:62:99:4f:c6:7f:45:82:30:be:
25:93:30:ce:e8:33:3e:96:a9:72:1f:33:4d:00:86:
40:bf:0f:e6:99:61:58:2c:ae:df:3f:5e:7a:85:4e:
17:f7:67:00:fb:91:e0:f5:cc:e0:46:9b:af:c5:05:
98:04:2c:79:73:f1:c8:a5:13:a0:ae:c7:2f:ec:c1:
fd:77:53:e3:00:f9:a7:db:80:f7:94:58:73:d3:ca:
2c:a5:9c:c9:f5:cb:f0:35:5c:fb:3d:15:c6:71:1c:
86:31:e8:64:8e:17:36:f1:79:11:e5:90:b6:9f:91:
81:a1:10:69:41:98:14:cc:82:47:48:5f:a9:34:9d:
a1:a6:d3:b0:19:9b:a6:bd:80:3f:1d:5b:3b:1a:6d:
a8:8d:7c:63:02:74:b1:a4:bf:c7:d6:bc:74:f4:bd:
a7:99:44:60:24:ea:16:52:dd:80:18:79:1c:52:42:
71:74:64:1f:09:54:58:54:87:d3:b0:8e:b3:ba:64:
cf:2e:7d:7b:f4:01:51:cc:67:bd:9f:63:aa:10:01:
a1:fb:87:b3:04:a0:a7:68:11:12:37:50:43:6e:45:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AE:C7:21:7A:88:36:1E:C5:2C:57:06:FD:25:10:A9:B7:FE:50:F5
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
117.121.247.0/24
Signature Algorithm: sha256WithRSAEncryption
56:00:ff:be:54:46:39:3d:6d:8a:57:fe:df:17:48:7d:d5:2b:
92:cb:17:e5:9f:7d:c6:83:dc:5a:d9:1f:05:d0:96:c0:fe:87:
0e:4f:5d:50:08:ac:32:65:c3:01:84:5a:69:f1:7f:ca:17:f6:
84:99:6d:12:99:f4:a6:c8:51:bd:9a:44:29:78:a0:58:8f:55:
34:69:53:63:41:5c:3e:b7:05:30:e0:03:f4:64:98:62:d5:d4:
79:92:7c:07:a2:6c:14:03:c6:37:e7:93:dc:e6:5f:36:26:de:
00:7e:44:c2:c2:43:1d:d7:94:84:2f:c4:19:8c:c2:87:3c:d0:
ac:de:91:a9:bf:9a:b3:d8:4c:af:bd:26:84:c2:ee:90:f6:74:
72:14:e6:99:7a:a7:3a:a7:56:71:92:26:e0:3a:c6:7d:37:87:
ca:df:a5:86:69:a7:bf:0c:7c:4d:56:17:57:d0:20:ea:48:14:
4e:42:15:c2:8f:dd:64:ce:d4:10:ee:bd:7d:6a:3c:19:7e:0b:
12:d1:a6:56:40:b8:71:1b:19:26:cd:30:a4:10:29:24:5b:ba:
75:86:b9:fc:fe:06:2c:f8:e5:03:22:0e:c6:33:fd:c0:f5:b5:
24:a8:70:65:08:74:66:2b:f2:0b:24:ab:e1:b1:cf:c7:29:fe:
09:9e:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:41 2026 by rpki-client