
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ACBE9D886BCE11F190D386B58047A888.roa
File: ACBE9D886BCE11F190D386B58047A888.roa (raw, json)
Hash identifier: wzA3Q1n/Ym5vQVGakgnRQ0/0/5N1KiNndOy36YFgSvE=
Subject key identifier: C8:DB:B1:85:D6:78:75:F8:F7:39:37:B0:B0:29:E5:80:31:ED:CD:D7
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3710
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ACBE9D886BCE11F190D386B58047A888.roa
Signing time: Fri 19 Jun 2026 11:04:43 +0000
ROA not before: Fri 19 Jun 2026 11:04:43 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 14618
IP address blocks: 117.121.247.0/24 maxlen: 24
182.54.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 14:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14096 (0x3710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Jun 19 11:04:43 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a35224b-550a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:06:5b:34:7f:9b:5c:fe:65:9d:f9:f5:37:
50:01:90:2d:8f:26:80:c2:71:dd:0a:4e:f9:5b:5e:
28:9d:84:d2:c9:e4:4c:f2:3f:3a:7f:83:cf:03:f9:
71:69:ca:72:f7:85:52:9d:77:5b:b0:1b:27:5f:c5:
87:d7:f6:15:34:e0:61:c2:1c:d7:b5:75:6f:0b:fb:
8c:f4:fc:02:de:27:7f:63:bd:55:c3:e3:e0:2f:a0:
2f:07:e0:c9:ac:ef:25:a6:99:c3:62:a9:8e:ed:24:
1d:39:5b:eb:30:05:3f:fc:46:d9:0f:49:ef:85:7c:
a5:58:ff:cb:a7:e4:2b:1d:15:4a:4d:47:af:f7:9d:
c9:6f:e5:f7:f4:3d:a9:7e:c4:e0:44:4f:c8:60:11:
43:3d:7a:1b:0d:c3:f7:91:96:f9:e7:66:75:1f:be:
ff:91:e7:24:41:12:df:a4:ca:af:ba:8b:2e:18:28:
51:84:cd:df:30:4c:f3:f5:65:8c:53:65:8e:8f:45:
91:2c:48:e7:23:2a:89:c1:39:c9:ee:50:7f:4d:e2:
42:cd:e4:8b:48:96:97:d2:48:46:36:1f:28:09:a3:
ee:18:a1:83:9c:2c:9c:a0:7d:0f:81:c3:5b:7d:8f:
ac:5e:a9:49:42:cf:73:9a:d5:d2:87:09:5b:8d:3f:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DB:B1:85:D6:78:75:F8:F7:39:37:B0:B0:29:E5:80:31:ED:CD:D7
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ACBE9D886BCE11F190D386B58047A888.roa
sbgp-ipAddrBlock: critical
IPv4:
117.121.247.0/24
182.54.239.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b1:62:b8:c7:ec:71:38:18:2c:18:26:7a:62:d1:2a:7e:59:
8e:1f:bf:a6:1c:e6:b7:fd:0f:41:04:a9:0e:44:f3:fb:3f:d1:
9f:dd:9b:78:39:97:45:54:f7:97:c4:09:77:06:f2:9f:48:6a:
c9:b0:3b:82:e4:20:7f:9b:37:a5:72:fb:dc:54:80:53:01:ff:
9b:7e:e2:2c:f7:4c:e2:25:f5:8f:d2:8a:a5:eb:d9:ef:f8:c9:
97:6c:4e:f1:5d:fa:9a:1c:d0:88:90:ca:ff:8f:cf:e1:b2:9f:
99:ef:c6:52:78:b4:3e:55:34:38:b2:98:a0:00:23:88:24:10:
95:c7:95:20:b4:1a:23:1d:07:6b:7e:90:54:f8:d4:c0:03:75:
33:c7:37:6a:99:a4:90:df:35:8e:bc:1f:d8:e5:b2:35:47:d9:
96:56:42:aa:de:25:1e:df:f8:2a:99:f3:1b:b8:8f:e3:17:3c:
ea:ee:b2:84:82:d5:fd:4a:2a:2e:9b:51:35:62:c2:1a:e3:15:
4c:f8:1d:06:56:54:23:32:a8:0e:e2:d2:a3:12:7c:19:fc:cf:
8a:f6:50:20:42:27:f4:e6:33:0a:55:3d:5f:cc:7b:86:f8:5e:
f8:f7:cb:fa:80:d0:74:e2:78:59:67:cb:72:6f:6f:d6:d4:0f:
da:13:4e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:45 2026 by rpki-client