
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ACBE9D886BCE11F190D386B58047A888.roa
File: ACBE9D886BCE11F190D386B58047A888.roa (raw, json)
Hash identifier: 6Dn1Zj8li9YnY4uNHlxc1KEOnqvRzcjtgoYrtqpugpU=
Subject key identifier: 26:DE:5D:9F:B3:90:54:5A:6E:14:1F:2C:18:B9:18:01:F6:34:C8:AD
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3751
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ACBE9D886BCE11F190D386B58047A888.roa
Signing time: Sun 04 Oct 2026 15:18:01 +0000
ROA not before: Sun 04 Oct 2026 15:18:01 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 14618
IP address blocks: 117.121.247.0/24 maxlen: 24
182.54.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 14:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14161 (0x3751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Oct 4 15:18:01 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac26e28-4ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a6:00:7b:cc:1e:20:1b:af:f2:d0:9d:f1:35:
12:3e:b7:5c:d8:ba:e9:9c:9c:14:86:39:42:71:ea:
dc:6e:a9:85:91:e8:a2:e0:05:04:08:c7:86:8c:af:
d2:d2:79:09:48:de:b3:1c:35:2e:76:00:56:68:1d:
0d:70:41:c4:30:6f:62:32:2a:d8:05:58:8f:b0:f6:
de:80:f8:00:6a:6c:eb:21:a8:80:a2:34:bf:20:1e:
90:6e:78:a0:96:c0:69:6a:1b:8c:62:2e:f3:dd:b2:
b7:dd:f7:22:28:2b:af:6d:2e:90:01:57:8d:6a:77:
bd:e0:49:84:a4:04:c5:ae:b4:7e:dd:50:1f:c3:27:
83:99:66:1e:5c:70:b2:c8:27:01:05:3d:4a:04:37:
20:d3:fc:49:21:d4:09:9a:4c:3d:4f:93:2d:34:ab:
63:29:2a:89:9b:cf:7e:af:b6:78:fd:70:eb:54:cc:
61:e5:44:57:ba:a9:49:d4:f9:33:f9:ee:67:de:ee:
3d:b5:df:38:7c:e7:8a:6b:92:c6:51:a1:7a:fb:01:
7c:1f:ec:94:bd:a3:ee:e5:16:67:37:14:48:12:9e:
74:8d:50:2a:9b:ac:6b:c9:1d:d5:29:91:2a:98:7a:
00:80:b7:25:23:cd:7c:3d:d3:5e:f1:30:cd:fe:08:
4c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DE:5D:9F:B3:90:54:5A:6E:14:1F:2C:18:B9:18:01:F6:34:C8:AD
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ACBE9D886BCE11F190D386B58047A888.roa
sbgp-ipAddrBlock: critical
IPv4:
117.121.247.0/24
182.54.239.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f2:9d:dc:26:51:e4:ae:7a:89:35:24:b6:f5:83:25:24:0d:
9e:a9:3b:63:2a:84:1b:8b:9f:05:60:16:a2:46:8b:a2:2b:59:
35:a7:4f:77:d3:c2:21:da:30:90:f9:af:6b:1b:42:91:4d:a2:
ee:1d:03:49:98:35:ae:27:c4:b6:69:4a:fc:a6:57:88:49:58:
33:56:7d:92:6c:49:3d:0c:76:00:e2:77:7e:06:88:31:36:84:
1d:0b:45:ce:73:0b:94:f6:99:e8:5d:21:f8:e9:3b:7c:fd:76:
c0:09:33:3c:24:42:0b:63:b0:32:3a:02:3a:ce:c2:7d:5a:04:
06:3f:ce:44:f7:cd:fd:ee:89:78:b7:31:43:97:47:e3:24:ca:
e9:7d:69:06:f6:ec:d8:14:0a:bf:a9:2d:62:de:dd:0b:8b:57:
8d:74:3f:8f:f5:78:46:8b:9d:ee:53:70:58:be:d8:a9:c5:77:
7f:ae:ca:bf:4c:b8:0d:cb:1b:81:37:19:5d:06:49:3f:cd:29:
3e:a9:b1:2b:0f:fe:ec:29:ef:29:57:07:d1:69:93:80:71:cf:
10:46:67:b2:01:f8:d2:1a:58:48:dc:05:a2:cd:bb:a3:b2:ea:
62:38:58:bd:93:47:b4:63:08:ab:d8:10:ae:3f:a9:1f:af:66:
b7:8d:5a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 01:13:59 2026 by rpki-client