
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/147B50A8D70411EFA945F56EC4F9AE02.roa
File: 147B50A8D70411EFA945F56EC4F9AE02.roa (raw, json)
Hash identifier: cYx6l8Vt8EJsdln8S7BM7QXiBCdMz2V7snGbX23mjjY=
Subject key identifier: A9:FA:93:7F:13:66:27:E4:20:1A:A6:9C:DA:F6:99:21:19:AB:BC:C8
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3C84
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/147B50A8D70411EFA945F56EC4F9AE02.roa
Signing time: Fri 09 Oct 2026 07:58:56 +0000
ROA not before: Fri 09 Oct 2026 07:58:56 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 17556
IP address blocks: 58.97.124.0/24 maxlen: 24
58.97.125.0/24 maxlen: 24
114.109.249.0/24 maxlen: 24
115.87.70.0/24 maxlen: 24
115.87.71.0/24 maxlen: 24
115.87.72.0/24 maxlen: 24
115.87.73.0/24 maxlen: 24
119.46.99.0/24 maxlen: 24
119.46.255.0/24 maxlen: 24
124.120.219.0/24 maxlen: 24
210.86.191.0/24 maxlen: 24
2001:fb0:101::/48 maxlen: 48
2001:fb0:102::/48 maxlen: 48
2001:fb0:10b2::/48 maxlen: 48
2001:fb1::/32 maxlen: 48
2001:fb1:3009:1::/64 maxlen: 64
2001:fb1:3009:2::/64 maxlen: 64
2001:fb1:3009:3::/64 maxlen: 64
2001:fb1:3009:7::/64 maxlen: 64
2001:fb1:3009:3e::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15492 (0x3c84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Oct 9 07:58:56 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6ac89ec0-2544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:57:72:9f:c4:ea:5c:4f:67:7e:37:48:04:
86:9f:3b:f0:ee:2b:14:31:7a:5d:02:80:ad:9c:02:
6a:cf:1d:41:fd:f3:83:f2:2a:8b:4c:40:bb:f6:24:
f0:be:3a:0f:b5:f3:d9:4b:0e:3f:d5:2d:31:0f:80:
70:31:8e:76:ed:b4:ca:48:40:8d:62:11:f8:49:a6:
bd:d8:8c:11:5c:73:db:7a:a0:52:9f:71:26:bb:e8:
49:13:95:83:77:8a:ec:3e:f2:5f:b2:81:fa:7a:c0:
c0:b7:94:5f:b1:a7:5a:84:eb:93:82:a7:be:1e:4e:
13:e0:6f:5e:d5:df:f9:4b:cc:2b:15:71:df:9a:83:
b8:dd:15:20:f7:32:58:d2:b3:d4:86:b4:b9:bf:3a:
d8:dd:2f:34:50:1b:ef:31:ac:d7:1e:ae:73:c1:50:
4d:9a:df:b4:23:26:30:32:55:d4:f2:80:b0:63:5c:
50:9b:26:84:3b:0b:17:8b:86:19:5a:60:e4:c0:8c:
e6:35:f8:95:06:55:b0:97:f6:51:49:ed:4b:d2:34:
ce:46:32:3f:a6:14:40:12:82:0b:71:58:74:f2:61:
5a:0f:38:4b:4f:b8:18:9a:d2:89:0d:71:09:8b:77:
a6:34:be:97:38:ad:d8:47:47:7a:d5:94:6d:0f:2f:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FA:93:7F:13:66:27:E4:20:1A:A6:9C:DA:F6:99:21:19:AB:BC:C8
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/147B50A8D70411EFA945F56EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.97.124.0/23
114.109.249.0/24
115.87.70.0-115.87.73.255
119.46.99.0/24
119.46.255.0/24
124.120.219.0/24
210.86.191.0/24
IPv6:
2001:fb0:101::-2001:fb0:102:ffff:ffff:ffff:ffff:ffff
2001:fb0:10b2::/48
2001:fb1::/32
Signature Algorithm: sha256WithRSAEncryption
84:7f:6f:f4:dc:0a:e7:eb:d2:5e:a0:64:f9:e5:c4:05:eb:c1:
6d:01:ee:45:b1:59:5e:93:3e:61:55:77:a6:19:70:08:f2:d8:
f4:fe:30:2e:df:ff:02:2c:7b:3d:26:dd:ee:bc:b4:67:c0:40:
e4:0d:d8:40:d9:47:b1:fe:ef:77:f6:a6:2f:40:81:b7:50:0e:
58:0e:05:49:c7:e9:ab:46:26:7d:fd:83:22:67:17:51:50:ba:
c1:93:57:70:a8:f4:a3:d2:1f:98:d8:09:96:41:3a:a6:4a:a1:
c5:62:8b:26:13:43:a2:ed:77:30:84:ab:fe:e6:cd:42:48:17:
94:8c:f9:c9:0e:95:bf:74:ff:ba:3c:5f:ad:41:05:6b:f1:a7:
c3:61:3c:14:5f:91:23:74:57:78:e6:68:80:b6:d6:1a:bc:d6:
cc:54:58:0f:97:2f:d5:31:3d:ce:ff:6c:ae:95:0a:43:26:b0:
77:23:e1:fe:5a:b8:0a:3e:f8:01:98:fd:ca:1b:fe:ac:3c:2b:
67:1b:5f:4c:52:84:e1:2f:6f:43:7f:ed:55:0b:40:9e:16:e7:
b1:8c:27:18:ee:13:88:ae:c6:11:d3:82:4b:35:8a:b5:ef:90:
41:35:31:46:f2:cc:5e:76:8e:71:62:0c:3b:21:e3:08:59:5b:
46:32:75:2d
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICPIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYxMDA5MDc1ODU2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM4OWVjMC0yNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3IhXcp/E6lxPZ343SASGnzvw7isUMXpdAoCtnAJqzx1B/fOD8iqLTEC79iTw
vjoPtfPZSw4/1S0xD4BwMY527bTKSECNYhH4Saa92IwRXHPbeqBSn3Emu+hJE5WD
d4rsPvJfsoH6esDAt5RfsadahOuTgqe+Hk4T4G9e1d/5S8wrFXHfmoO43RUg9zJY
0rPUhrS5vzrY3S80UBvvMazXHq5zwVBNmt+0IyYwMlXU8oCwY1xQmyaEOwsXi4YZ
WmDkwIzmNfiVBlWwl/ZRSe1L0jTORjI/phRAEoILcVh08mFaDzhLT7gYmtKJDXEJ
i3emNL6XOK3YR0d61ZRtDy8mGQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFKn6k38T
ZifkIBqmnNr2mSEZq7zIMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMTQ3QjUwQThE
NzA0MTFFRkE5NDVGNTZFQzRGOUFFMDIucm9hMHcGCCsGAQUFBwEHAQH/BGgwZjA4
BAIAATAyAwQBOmF8AwQAcm35MAwDBAFzV0YDBAFzV0gDBAB3LmMDBAB3Lv8DBAB8
eNsDBADSVr8wKgQCAAIwJDASAwcAIAEPsAEBAwcAIAEPsAECAwcAIAEPsBCyAwUA
IAEPsTANBgkqhkiG9w0BAQsFAAOCAQEAhH9v9NwK5+vSXqBk+eXEBevBbQHuRbFZ
XpM+YVV3phlwCPLY9P4wLt//Aix7PSbd7ry0Z8BA5A3YQNlHsf7vd/amL0CBt1AO
WA4FScfpq0Ymff2DImcXUVC6wZNXcKj0o9IfmNgJlkE6pkqhxWKLJhNDou13MISr
/ubNQkgXlIz5yQ6Vv3T/ujxfrUEFa/Gnw2E8FF+RI3RXeOZogLbWGrzWzFRYD5cv
1TE9zv9srpUKQyawdyPh/lq4Cj74AZj9yhv+rDwrZxtfTFKE4S9vQ3/tVQtAnhbn
sYwnGO4TiK7GEdOCSzWKte+QQTUxRvLMXnaOcWIMOyHjCFlbRjJ1LQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:49:01 2026 by rpki-client