
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/F097E10C5C7311EF9CC47281C4F9AE02.roa
File: F097E10C5C7311EF9CC47281C4F9AE02.roa (raw, json)
Hash identifier: eIEz+HOUkpHE2Yid4Ib+bwGWkf99JpQePY3ZBP5agtw=
Subject key identifier: ED:94:0F:9F:3B:12:6A:C1:08:0F:F4:E4:C2:48:14:1B:CC:CF:0C:FF
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 36BE
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/F097E10C5C7311EF9CC47281C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:45:36 +0000
ROA not before: Tue 02 Sep 2025 15:01:23 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 16509
IP address blocks: 117.121.247.0/24 maxlen: 24
182.54.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14014 (0x36be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Sep 2 15:01:23 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48950-4226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:5e:a2:d3:72:4a:88:4a:5c:f2:db:eb:6a:
bb:7a:5a:b4:cf:ce:39:11:bc:1e:a9:66:a2:d0:95:
b8:ff:f7:7d:16:96:24:be:c2:74:a0:e8:95:11:ff:
09:31:ad:c6:32:d4:4d:e2:e5:b1:04:28:62:01:50:
df:64:b5:5e:96:4e:fe:e8:a8:90:d9:00:f7:ce:a3:
ba:44:71:fa:a1:d8:45:a1:5b:5f:03:ce:59:a2:cc:
ca:85:ea:12:96:35:b7:b5:2b:e9:fb:cd:ff:7e:18:
65:e8:86:7e:8d:f5:11:c4:8c:08:f3:c2:df:a6:f3:
46:1a:36:69:e1:0e:aa:94:49:bd:bb:e1:0b:7f:5b:
a0:dc:2b:d5:2e:a2:f7:41:4b:86:77:e1:d4:4e:3e:
d6:7a:ac:e4:44:81:42:67:fc:49:6f:70:ee:67:9d:
cc:5c:85:83:6b:ee:75:52:df:8a:47:a5:a1:96:a4:
76:f2:d5:93:93:5b:29:e2:a5:8a:f0:3c:e2:7f:5d:
52:0a:98:93:d2:61:7e:4c:af:38:25:61:3c:36:55:
79:e6:95:db:b2:c1:ee:15:db:3b:60:99:5a:eb:fb:
d4:89:b6:b9:9a:d5:56:d7:51:b7:51:0c:ad:9c:e0:
14:db:b9:1f:28:27:e2:39:75:42:67:8f:f5:fb:c7:
8c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:94:0F:9F:3B:12:6A:C1:08:0F:F4:E4:C2:48:14:1B:CC:CF:0C:FF
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/F097E10C5C7311EF9CC47281C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
117.121.247.0/24
182.54.239.0/24
Signature Algorithm: sha256WithRSAEncryption
28:67:04:0f:3c:3f:8a:4a:58:69:17:39:c6:57:1d:e1:dc:20:
87:bd:d1:c4:bf:ca:8e:4e:28:84:45:33:e7:a8:7b:2f:2f:26:
cf:90:1d:8f:97:37:98:00:e7:69:cb:39:d1:4b:0e:38:43:2d:
96:72:1b:ca:86:6c:f7:a5:ac:d7:57:8e:1b:5d:64:45:83:f7:
71:7f:44:3a:f9:99:4b:eb:44:ee:58:ee:20:82:e2:a4:3c:60:
32:93:b5:b4:75:3c:11:77:ea:d2:f9:9a:1a:fd:c6:dd:82:2f:
18:e8:6e:75:4f:cc:b3:3d:44:59:82:09:a5:30:73:b0:26:11:
22:4e:84:ed:18:3e:a7:20:18:ee:ab:7c:1a:74:e3:e3:71:da:
3e:3d:69:e6:08:b7:47:b6:97:74:9e:09:80:d1:3d:08:02:53:
a1:b5:84:38:fd:7f:11:8e:71:96:0f:38:89:94:c7:cd:c6:e9:
f3:b3:bf:63:77:79:d2:c2:22:a8:2a:fc:01:8e:cf:c1:0b:24:
91:e8:31:9d:ea:55:e0:db:0b:dc:e8:6c:c6:b1:c9:14:a4:71:
75:90:d8:66:19:40:59:3d:3c:47:5b:f2:9c:00:00:91:63:26:
1c:6e:8c:18:f7:16:c5:6d:ba:cf:86:e5:36:17:da:f3:22:11:
bf:6a:37:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:37 2026 by rpki-client