
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ADC20B986BCE11F190D386B58047A888.roa
File: ADC20B986BCE11F190D386B58047A888.roa (raw, json)
Hash identifier: HA6Y/mCGw2yaPjZrohd5Bz3JW+KNRtW1kyc+CoKAAps=
Subject key identifier: 18:AF:F5:5B:4F:FA:A6:EE:23:9B:26:9B:4F:7E:4E:BF:96:A3:CA:71
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3711
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ADC20B986BCE11F190D386B58047A888.roa
Signing time: Fri 19 Jun 2026 11:04:45 +0000
ROA not before: Fri 19 Jun 2026 11:04:45 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 16509
IP address blocks: 117.121.247.0/24 maxlen: 24
182.54.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14097 (0x3711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Jun 19 11:04:45 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a35224d-7196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:56:e0:49:fe:14:67:ab:60:3e:0a:2e:1f:91:
dc:a1:76:df:6a:21:15:4b:76:49:9b:43:bd:0d:cc:
2c:8f:44:9f:49:53:f2:c0:d4:b8:48:b3:42:96:f3:
e0:4f:47:99:89:1b:87:1c:9d:e9:d2:27:be:f8:3c:
87:0b:0c:cb:88:3b:fa:67:7a:1e:77:26:36:a5:54:
51:d1:49:56:39:de:b3:1d:8c:93:22:95:82:1e:fd:
cd:72:59:40:77:90:62:e2:15:11:96:1d:79:d8:b6:
55:c4:12:45:6a:74:18:9f:32:8e:65:d0:9c:60:5e:
f1:09:ad:cc:65:53:a2:f4:26:1e:28:80:f5:99:d9:
0c:50:17:ca:7e:fc:20:e5:3f:6f:e3:62:c9:57:78:
b2:3c:d5:2a:1b:dd:ac:34:9e:a7:f1:ad:56:95:ac:
dc:96:35:37:5b:d6:16:9c:ce:87:e7:41:e9:30:dd:
5d:88:0b:94:dd:7e:c3:3d:de:3f:cf:d3:43:ca:af:
2a:1b:58:c6:1a:82:5c:3e:cf:dd:5d:1f:a5:94:f9:
7e:ef:9b:63:7d:81:c8:a7:ba:7f:b7:fe:73:c0:84:
3c:a9:e6:6d:9f:7c:1c:ef:44:09:61:10:76:db:57:
43:34:6b:de:9f:a2:6d:35:96:19:43:6b:8a:7d:36:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AF:F5:5B:4F:FA:A6:EE:23:9B:26:9B:4F:7E:4E:BF:96:A3:CA:71
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ADC20B986BCE11F190D386B58047A888.roa
sbgp-ipAddrBlock: critical
IPv4:
117.121.247.0/24
182.54.239.0/24
Signature Algorithm: sha256WithRSAEncryption
11:77:ef:a3:dc:41:2a:b7:28:bc:a1:94:21:9c:f6:30:d1:cf:
fd:ca:67:b1:75:05:60:0d:a3:bb:9e:c8:0a:88:67:f1:c0:26:
6a:f2:fd:03:6a:7d:c8:c6:ae:3a:14:81:30:2d:0b:09:e0:48:
43:08:c3:1f:9c:fb:28:84:32:4b:32:58:ba:86:7c:4b:66:0d:
cc:2f:cc:6b:56:bf:36:72:b2:ba:65:a0:31:d0:46:f6:a4:cf:
f7:a9:e2:7d:e3:0f:ff:20:37:c9:12:0c:5b:63:62:04:5d:4f:
0b:20:6d:da:ad:d0:2f:23:85:a1:ec:ca:64:ae:9e:ed:fc:e5:
f1:e7:15:85:50:2f:51:f0:8c:01:9c:b8:f4:73:89:b1:1f:ad:
ef:b5:41:19:ed:c3:3c:fb:ae:c4:07:18:ff:c9:2d:09:68:5a:
3a:9e:bf:a8:5c:2d:2f:d6:08:d6:35:ae:0b:4a:bf:71:95:9b:
3a:3c:c7:60:ca:49:5e:ad:b4:84:bf:bc:16:3a:d5:aa:be:fa:
18:c9:54:c9:17:b9:3f:09:3a:d6:70:68:fd:57:a6:87:a5:16:
26:56:de:a7:e6:80:3f:91:eb:94:bb:48:e9:ff:52:c9:ba:f8:
9f:64:d7:6c:1f:2b:3f:4a:85:39:3c:ba:23:f1:48:6c:bf:d4:
2c:fc:ef:73
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICNxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0
OTExRjFGNEYwHhcNMjYwNjE5MTEwNDQ1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM1MjI0ZC03MTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAklbgSf4UZ6tgPgouH5HcoXbfaiEVS3ZJm0O9Dcwsj0SfSVPywNS4SLNClvPg
T0eZiRuHHJ3p0ie++DyHCwzLiDv6Z3oedyY2pVRR0UlWOd6zHYyTIpWCHv3NcllA
d5Bi4hURlh152LZVxBJFanQYnzKOZdCcYF7xCa3MZVOi9CYeKID1mdkMUBfKfvwg
5T9v42LJV3iyPNUqG92sNJ6n8a1WlazcljU3W9YWnM6H50HpMN1diAuU3X7DPd4/
z9NDyq8qG1jGGoJcPs/dXR+llPl+75tjfYHIp7p/t/5zwIQ8qeZtn3wc70QJYRB2
21dDNGven6JtNZYZQ2uKfTYjZwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBiv9VtP
+qbuI5smm09+Tr+Wo8pxMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE
OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvQURDMjBCOTg2
QkNFMTFGMTkwRDM4NkI1ODA0N0E4ODgucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAdXn3AwQAtjbvMA0GCSqGSIb3DQEBCwUAA4IBAQARd++j3EEqtyi8
oZQhnPYw0c/9ymexdQVgDaO7nsgKiGfxwCZq8v0Dan3Ixq46FIEwLQsJ4EhDCMMf
nPsohDJLMli6hnxLZg3ML8xrVr82crK6ZaAx0Eb2pM/3qeJ94w//IDfJEgxbY2IE
XU8LIG3ardAvI4Wh7Mpkrp7t/OXx5xWFUC9R8IwBnLj0c4mxH63vtUEZ7cM8+67E
Bxj/yS0JaFo6nr+oXC0v1gjWNa4LSr9xlZs6PMdgyklerbSEv7wWOtWqvvoYyVTJ
F7k/CTrWcGj9V6aHpRYmVt6n5oA/keuUu0jp/1LJuvifZNdsHys/SoU5PLoj8Uhs
v9Qs/O9z
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:33 2026 by rpki-client