
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/F097E10C5C7311EF9CC47281C4F9AE02.roa
File: F097E10C5C7311EF9CC47281C4F9AE02.roa (raw, json)
Hash identifier: K6jEuDhrI6n4J7VT22Lor71QYUQWjz6kVz3VBemDBVw=
Subject key identifier: AD:CB:C5:65:E9:39:61:C0:9D:F4:53:8C:64:CA:49:D8:C9:76:00:64
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 36ED
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/F097E10C5C7311EF9CC47281C4F9AE02.roa
Signing time: Sat 18 Apr 2026 09:23:21 +0000
ROA not before: Sat 18 Apr 2026 09:23:21 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 16509
IP address blocks: 117.121.245.0/24 maxlen: 24
117.121.247.0/24 maxlen: 24
182.54.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14061 (0x36ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Apr 18 09:23:21 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69e34d89-70e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:de:98:b4:eb:29:07:f0:b7:f6:44:a5:8b:
ab:d4:76:89:fd:a6:78:3a:dd:4b:6e:4d:66:c0:04:
cc:4b:77:95:f0:bc:3f:fd:91:2b:df:6d:bf:3d:58:
72:4b:b5:8d:29:ec:81:8e:35:7a:9b:61:bb:ed:c2:
57:01:ad:1a:78:2b:93:03:9d:ca:e2:9b:d0:2d:be:
a9:93:d1:12:73:fb:9f:51:0c:74:17:29:44:b2:41:
98:40:18:5a:79:67:27:6a:98:cf:4e:13:35:da:b3:
03:3d:f9:b4:9e:a7:c4:bb:9e:a1:02:00:01:ab:40:
2b:47:94:fd:00:3c:08:fa:48:05:8a:ca:e5:64:cf:
24:71:7b:47:5c:5e:96:14:f4:1a:05:75:e9:c8:f9:
5c:95:16:96:f3:c1:03:f6:b1:9f:9f:8f:8d:57:9d:
3a:bf:57:a8:74:a2:7a:10:6f:40:78:bc:9b:77:ee:
7f:36:4a:1f:7b:28:a5:2c:68:c0:02:84:3e:2b:17:
54:0f:bd:6d:cf:ac:f9:8c:fc:f8:b1:27:a0:f2:8c:
49:d2:bd:47:68:4a:94:cd:18:e2:76:c4:d8:b0:4b:
74:87:76:b8:3c:34:37:83:86:b5:0a:b3:94:eb:94:
6f:cd:da:4c:76:41:4c:1d:a7:4c:3d:52:e0:05:a7:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CB:C5:65:E9:39:61:C0:9D:F4:53:8C:64:CA:49:D8:C9:76:00:64
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/F097E10C5C7311EF9CC47281C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
117.121.245.0/24
117.121.247.0/24
182.54.239.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5c:62:cd:62:d2:30:31:ef:06:40:ec:34:0b:17:3d:bf:e8:
40:a7:4a:a9:9a:c6:63:82:3a:41:da:8c:c5:7d:b6:a9:1e:da:
e9:71:19:38:c9:ca:0a:2c:5e:4c:17:52:49:fd:31:9a:f6:23:
94:4d:a4:5c:4b:fb:8b:8b:ec:1d:3f:80:eb:b9:4d:da:14:22:
a2:b3:2f:ed:11:7f:bf:69:f9:8c:bc:f2:b8:4d:5d:aa:7b:50:
8e:8e:cd:33:0c:c3:16:79:98:1a:0a:e5:37:cb:45:1f:1a:1b:
97:db:31:10:89:a8:2d:e8:b2:ed:9a:bf:61:0a:70:8f:ed:bd:
db:ae:9d:00:f7:16:14:4c:fb:4f:e4:57:de:b7:26:61:46:68:
2f:60:31:54:ab:84:dc:3b:c3:d7:cb:c2:68:c5:67:22:0b:db:
10:c0:59:78:ea:51:c8:ef:d6:76:3b:6b:02:69:27:24:da:43:
5e:17:e6:01:16:12:b8:a9:a6:30:5f:9c:52:24:04:c5:dd:29:
b9:c3:34:78:ce:3b:93:ae:67:bf:7b:a1:83:13:d1:95:be:1f:
e1:ed:17:de:cf:be:6a:ed:8a:a7:5a:bf:2a:df:66:7e:2f:4e:
66:4d:de:6a:73:8e:a9:44:68:75:bf:12:8e:62:74:69:18:3d:
e0:33:85:ab
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICNu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0
OTExRjFGNEYwHhcNMjYwNDE4MDkyMzIxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWUzNGQ4OS03MGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlqjemLTrKQfwt/ZEpYur1HaJ/aZ4Ot1Lbk1mwATMS3eV8Lw//ZEr322/PVhy
S7WNKeyBjjV6m2G77cJXAa0aeCuTA53K4pvQLb6pk9ESc/ufUQx0FylEskGYQBha
eWcnapjPThM12rMDPfm0nqfEu56hAgABq0ArR5T9ADwI+kgFisrlZM8kcXtHXF6W
FPQaBXXpyPlclRaW88ED9rGfn4+NV506v1eodKJ6EG9AeLybd+5/NkofeyilLGjA
AoQ+KxdUD71tz6z5jPz4sSeg8oxJ0r1HaEqUzRjidsTYsEt0h3a4PDQ3g4a1CrOU
65RvzdpMdkFMHadMPVLgBacYMQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFK3LxWXp
OWHAnfRTjGTKSdjJdgBkMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE
OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvRjA5N0UxMEM1
QzczMTFFRjlDQzQ3MjgxQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAdXn1AwQAdXn3AwQAtjbvMA0GCSqGSIb3DQEBCwUAA4IBAQCYXGLN
YtIwMe8GQOw0Cxc9v+hAp0qpmsZjgjpB2ozFfbapHtrpcRk4ycoKLF5MF1JJ/TGa
9iOUTaRcS/uLi+wdP4DruU3aFCKisy/tEX+/afmMvPK4TV2qe1COjs0zDMMWeZga
CuU3y0UfGhuX2zEQiagt6LLtmr9hCnCP7b3brp0A9xYUTPtP5FfetyZhRmgvYDFU
q4TcO8PXy8JoxWciC9sQwFl46lHI79Z2O2sCaSck2kNeF+YBFhK4qaYwX5xSJATF
3Sm5wzR4zjuTrme/e6GDE9GVvh/h7Rfez75q7YqnWr8q32Z+L05mTd5qc46pRGh1
vxKOYnRpGD3gM4Wr
-----END CERTIFICATE-----
Generated at Mon Apr 20 06:17:52 2026 by rpki-client