
$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/559FC8C054F411F08DC15C53C4F9AE02.roa
File: 559FC8C054F411F08DC15C53C4F9AE02.roa (raw, json)
Hash identifier: 0f4GSHCzNdKS9bURs+KpF8txlIHrkRwt0EzFhj9CMzQ=
Subject key identifier: B9:5A:8E:4E:AC:01:57:12:F2:35:E7:6B:87:55:C4:87:5E:AA:BC:F4
Certificate issuer: /CN=A91656C7/serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
Certificate serial: 8A
Authority key identifier: 58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/559FC8C054F411F08DC15C53C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:20:13 +0000
ROA not before: Sun 29 Jun 2025 14:21:23 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153789
IP address blocks: 165.101.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl
rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91656C7, serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
Validity
Not Before: Jun 29 14:21:23 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a59c9d-cb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:a0:f2:54:53:1a:e9:03:6b:f9:4f:aa:08:
b3:cd:6c:d9:a8:96:94:17:94:29:90:d8:29:bf:e9:
ad:79:90:0c:30:f5:a1:31:c8:90:56:39:1a:8a:0a:
26:01:06:6d:c1:05:0b:ea:4a:92:a4:39:be:52:17:
4d:ab:3e:76:22:d1:83:21:f5:d0:07:08:71:a1:2d:
09:76:d4:cf:d6:b8:51:63:02:94:40:dd:9b:d1:f9:
58:f2:14:e0:9b:da:30:2f:d3:5d:39:cc:c8:07:3c:
30:d1:89:7b:60:51:5d:cb:62:2e:0e:ea:d8:f9:c7:
0c:5b:0e:7b:45:71:14:b9:50:c1:80:ae:a8:e0:56:
c9:5f:c2:63:f7:b2:e4:ca:86:62:cb:0e:87:4d:2c:
b0:b4:66:97:59:e1:68:ad:d3:7d:6a:00:05:48:9b:
88:93:86:b7:2b:f2:c4:08:82:f0:4c:60:a5:7d:3e:
13:bd:a7:d4:89:bd:26:c8:71:1f:e4:12:df:a7:3f:
73:83:20:f9:65:88:5a:91:15:e7:59:09:d5:28:b3:
d3:52:51:5c:bf:45:b3:d6:76:07:c1:2a:7d:2c:11:
69:f6:86:82:0e:55:b3:99:d8:20:2e:49:4a:63:e2:
04:1d:8b:6f:45:b6:f6:ad:43:d8:46:6d:c0:52:f5:
fd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5A:8E:4E:AC:01:57:12:F2:35:E7:6B:87:55:C4:87:5E:AA:BC:F4
X509v3 Authority Key Identifier:
keyid:58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/559FC8C054F411F08DC15C53C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.58.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ad:7a:ad:a8:51:7b:26:d1:4a:4d:a7:99:85:1e:6e:e3:a3:
ab:ed:7c:80:f7:a8:f0:8b:5c:1a:55:87:81:c1:b7:26:12:db:
8f:9e:ed:1c:e9:0a:32:57:a9:fb:48:ac:0f:db:45:68:02:80:
d8:05:ac:6d:86:29:6e:46:fa:fb:2a:77:84:8a:78:23:75:13:
f0:d3:0c:22:7d:ca:6a:62:7e:c1:95:b2:97:c4:8e:da:36:46:
5c:b0:89:89:68:f3:4f:f3:38:d2:7a:0f:c8:9b:92:21:95:aa:
c6:fe:b3:6f:82:31:7f:0c:74:b7:37:89:da:50:94:ad:c1:eb:
d5:7c:c3:95:90:71:27:c7:b5:40:01:cd:5c:7a:55:79:31:f3:
e1:c0:15:52:bb:e0:39:70:df:c8:11:90:2e:d4:94:b9:74:67:
c0:5a:b0:25:54:6d:5f:c6:6f:34:1f:cb:73:d7:3f:a4:cc:68:
00:40:d0:0d:9f:41:0c:0d:d2:81:83:77:ff:8e:94:2e:62:8a:
0d:ce:d4:98:3e:00:61:7b:d8:f7:79:32:a1:44:f4:d4:bc:64:
73:be:fa:e8:ef:bd:43:19:d8:10:74:28:2f:6f:30:88:76:16:
f8:b2:f5:2a:b3:de:5a:45:3e:fa:86:0f:1c:32:e1:0d:5f:a1:
7b:1c:fa:b8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU2QzcxMTAvBgNVBAUTKDU4QTIxRTdCMjNGQUYyMUI4OUQzNDI3MEVCNTZGNzQ0
OUMyMzk5ODYwHhcNMjUwNjI5MTQyMTIzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWM5ZC1jYjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAylmg8lRTGukDa/lPqgizzWzZqJaUF5QpkNgpv+mteZAMMPWhMciQVjkaigom
AQZtwQUL6kqSpDm+UhdNqz52ItGDIfXQBwhxoS0JdtTP1rhRYwKUQN2b0flY8hTg
m9owL9NdOczIBzww0Yl7YFFdy2IuDurY+ccMWw57RXEUuVDBgK6o4FbJX8Jj97Lk
yoZiyw6HTSywtGaXWeFordN9agAFSJuIk4a3K/LECILwTGClfT4TvafUib0myHEf
5BLfpz9zgyD5ZYhakRXnWQnVKLPTUlFcv0Wz1nYHwSp9LBFp9oaCDlWzmdggLklK
Y+IEHYtvRbb2rUPYRm3AUvX91QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLlajk6s
AVcS8jXna4dVxIdeqrz0MB8GA1UdIwQYMBaAFFiiHnsj+vIbidNCcOtW90ScI5mG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTZDNy84NURFREFEODUw
QTUxMUYwQjJEMURFNEZDNEY5QUUwMi9XS0llZXlQNjhodUowMEp3NjFiM1JKd2pt
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dLSWVleVA2OGh1SjAwSnc2MWIzUkp3am1ZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU2QzcvODVERURBRDg1MEE1MTFGMEIyRDFERTRGQzRGOUFFMDIvNTU5RkM4QzA1
NEY0MTFGMDhEQzE1QzUzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWU6MA0GCSqGSIb3DQEBCwUAA4IBAQAIrXqtqFF7JtFKTaeZhR5u
46Or7XyA96jwi1waVYeBwbcmEtuPnu0c6QoyV6n7SKwP20VoAoDYBaxthiluRvr7
KneEingjdRPw0wwifcpqYn7BlbKXxI7aNkZcsImJaPNP8zjSeg/Im5IhlarG/rNv
gjF/DHS3N4naUJStwevVfMOVkHEnx7VAAc1celV5MfPhwBVSu+A5cN/IEZAu1JS5
dGfAWrAlVG1fxm80H8tz1z+kzGgAQNANn0EMDdKBg3f/jpQuYooNztSYPgBhe9j3
eTKhRPTUvGRzvvro771DGdgQdCgvbzCIdhb4svUqs95aRT76hg8cMuENX6F7HPq4
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:44 2026 by rpki-client