
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/58A9026623AD11EBB858645DC4F9AE02.roa
File: 58A9026623AD11EBB858645DC4F9AE02.roa (raw, json)
Hash identifier: DpnrDLtmUYXL+QS+EesHCO03r/B2g7JpvqZf7zraP80=
Subject key identifier: 4F:16:9A:83:63:4C:6D:ED:A7:AB:5B:F0:7E:CF:BB:10:2E:C9:AB:64
Certificate issuer: /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial: 08DF
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/58A9026623AD11EBB858645DC4F9AE02.roa
Signing time: Sat 02 May 2026 21:25:45 +0000
ROA not before: Sat 02 May 2026 21:25:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38880
IP address blocks: 103.152.248.0/24 maxlen: 24
103.152.249.0/24 maxlen: 24
119.252.176.0/24 maxlen: 24
119.252.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2271 (0x8df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Validity
Not Before: May 2 21:25:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f66bd9-d834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:c9:85:20:de:aa:27:9f:e6:ff:5c:c5:0e:
46:3d:31:88:61:9e:9b:50:bd:e6:0e:62:7d:2b:a8:
29:1e:f3:28:71:1b:a9:73:c3:95:49:f8:24:ad:86:
23:9e:84:f3:92:7e:e2:f0:d8:4c:5e:72:7c:64:0c:
52:0d:62:b9:7d:d5:bf:ca:6f:ad:e8:21:fd:7f:6c:
ad:e0:67:ea:3c:84:90:9a:6e:d0:22:aa:dc:b9:06:
66:d0:6f:83:86:68:46:28:ce:35:bf:c1:2c:cc:fb:
ed:16:62:ba:c0:81:db:74:10:ba:3a:97:32:dd:2b:
9b:97:cf:bb:ca:89:e7:1d:7a:bd:10:d3:72:0e:c7:
6d:4f:31:b6:ba:25:2f:e2:b2:2e:76:1c:04:63:77:
a3:ab:3f:10:a9:71:8b:7f:70:b2:53:2d:87:57:0a:
f3:3b:c8:85:59:07:23:ec:c9:2d:d1:4d:c3:bc:92:
99:7a:32:59:8b:76:8b:4c:9f:d8:c7:b6:5a:df:59:
07:da:94:d6:20:2f:ab:ec:f3:67:dc:b9:f6:d7:55:
13:68:67:0b:66:3d:00:47:4d:a6:5a:87:7c:29:6c:
47:33:50:26:fb:1f:0c:a4:ba:4e:01:52:da:0f:0e:
65:06:3f:48:33:91:67:59:e6:a6:a0:2a:48:60:d9:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:16:9A:83:63:4C:6D:ED:A7:AB:5B:F0:7E:CF:BB:10:2E:C9:AB:64
X509v3 Authority Key Identifier:
keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/58A9026623AD11EBB858645DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.248.0/23
119.252.176.0/24
119.252.179.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:6e:75:ca:1b:97:4e:99:4d:7c:ac:d5:66:ee:11:18:af:49:
f9:3f:8c:ad:c4:8d:44:1e:33:c5:b9:b8:b1:87:fc:c1:e0:6b:
11:79:48:74:f2:44:48:e8:17:59:08:3e:ca:82:a8:49:5d:8b:
ac:f0:2b:d1:10:19:4c:c8:e4:58:58:48:9c:71:50:bd:ea:46:
96:0d:1b:90:51:92:72:6a:bd:c7:c5:de:fc:48:b0:09:e1:39:
63:69:75:f4:71:b3:f5:7e:ce:6c:75:d5:c2:23:8f:33:98:15:
b8:9f:6d:16:a1:11:8c:db:7e:a3:0f:e9:25:55:1e:33:5b:db:
6f:64:1e:57:c1:79:ed:2a:2b:3a:85:e2:8d:67:c5:cc:10:be:
97:f5:e7:42:a7:18:61:b3:ac:2c:2f:11:0e:e6:8c:05:a3:f9:
91:19:40:4b:86:09:60:16:ac:d9:e5:b6:36:95:2b:6a:26:cf:
af:ec:13:b7:4e:5b:b5:4b:b5:33:a0:b5:0f:76:be:00:ad:29:
25:cb:e7:62:a1:5c:5d:17:47:3c:c2:a8:2e:a8:79:5f:17:83:
7b:dd:e1:3e:e9:fa:cf:39:e5:8c:a3:67:aa:0c:8f:af:ea:e8:
fd:b1:a1:90:19:f4:bc:36:99:00:02:df:a9:18:a8:45:e9:cd:
ac:c8:60:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:56 2026 by rpki-client