
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/58A1565020E711F19CC84E688AEE528E.roa
File: 58A1565020E711F19CC84E688AEE528E.roa (raw, json)
Hash identifier: o/P0eN+v/Q1ipjMbR6r2DTz0KGYCL5D3sUlafnPbhyA=
Subject key identifier: 32:B4:65:D7:8E:06:A6:7B:3B:D9:78:9D:33:E5:22:6F:2A:DE:ED:9E
Certificate issuer: /CN=A917047F/serialNumber=44560607D997AA4B0A73AA57C6F635343DD018D6
Certificate serial: 63
Authority key identifier: 44:56:06:07:D9:97:AA:4B:0A:73:AA:57:C6:F6:35:34:3D:D0:18:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/58A1565020E711F19CC84E688AEE528E.roa
Signing time: Fri 04 Sep 2026 17:35:48 +0000
ROA not before: Fri 04 Sep 2026 17:35:48 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135323
IP address blocks: 103.215.128.0/22 maxlen: 22
103.215.128.0/24 maxlen: 24
103.215.129.0/24 maxlen: 24
103.215.130.0/24 maxlen: 24
103.215.131.0/24 maxlen: 24
202.58.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.crl
rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917047F, serialNumber=44560607D997AA4B0A73AA57C6F635343DD018D6
Validity
Not Before: Sep 4 17:35:48 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a9b0174-1ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:43:2b:0b:84:23:80:0d:ee:16:04:db:75:
66:ad:60:38:7c:3a:e8:9c:46:c7:9e:67:dc:a9:c3:
dc:b5:ba:0d:25:60:2c:32:37:b1:13:03:6d:70:43:
4b:25:6b:08:df:70:57:fd:b2:4e:40:08:ae:5f:e9:
f4:11:22:3e:55:d0:7b:d6:e2:54:2c:5b:c6:fa:6f:
d3:fd:d0:66:69:18:43:03:a6:fd:5d:2a:bf:5e:00:
d7:cd:03:df:03:63:40:6a:94:50:18:c5:cd:ef:8a:
9d:cf:23:24:04:da:60:dc:e1:a7:70:b0:da:be:7b:
48:e8:3e:09:a9:29:48:cf:cb:31:b0:1e:a2:29:99:
ab:bc:97:c8:86:db:58:53:cc:ca:77:79:1f:6e:84:
c3:c7:00:89:f6:33:93:8f:e1:df:a6:9b:72:37:57:
58:0f:7c:1b:1f:bb:86:7e:45:a8:60:3b:31:cb:4d:
8d:78:ee:89:69:02:82:39:17:41:e8:d7:30:d8:1b:
ca:cd:0b:f9:2a:42:4b:95:91:18:b3:a0:95:64:ba:
18:18:96:99:f5:f2:23:5a:cd:17:c9:d3:2c:a6:29:
e8:b1:35:aa:3e:6f:84:5e:26:59:31:34:6c:f4:36:
2f:83:90:c9:5f:74:0c:84:33:05:11:50:f4:47:19:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B4:65:D7:8E:06:A6:7B:3B:D9:78:9D:33:E5:22:6F:2A:DE:ED:9E
X509v3 Authority Key Identifier:
keyid:44:56:06:07:D9:97:AA:4B:0A:73:AA:57:C6:F6:35:34:3D:D0:18:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/58A1565020E711F19CC84E688AEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.215.128.0/22
202.58.233.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9a:89:1c:e4:ab:8c:c1:c8:4f:35:b3:af:b7:ec:0c:cd:a2:
df:20:ff:a6:f8:80:88:10:5c:1e:73:86:e1:e5:2d:7d:8e:15:
47:46:ee:72:97:7f:9b:ca:a1:21:29:18:70:e7:f2:68:6a:be:
98:81:94:08:60:4d:d5:cd:ba:92:5a:3e:fa:26:64:ec:c6:5a:
0c:8e:44:8d:90:c9:43:5d:4d:14:e7:8f:c4:73:ce:35:cd:47:
d3:f8:45:6a:85:5b:b3:15:55:54:7f:45:a0:bc:26:a2:07:f7:
80:a9:aa:d0:28:04:86:c6:6a:56:0f:03:7c:0e:46:d3:25:31:
2a:fa:8e:be:bd:b1:23:01:eb:14:01:2d:55:4e:42:01:3b:ec:
c5:19:47:e9:7b:f8:7b:f9:b8:4a:db:f2:6e:8b:d6:5d:52:ed:
fa:6d:10:a1:bb:0a:a5:e6:ed:f8:59:15:0f:0f:23:6f:97:ef:
f8:38:f0:a4:a9:43:bc:ce:e9:f7:dc:6f:f1:fa:a8:7f:51:dd:
ed:06:3f:2f:bf:33:7b:de:95:cb:72:88:b9:0d:95:d9:26:f4:
77:10:cc:63:14:d2:78:02:60:83:e0:05:b3:1d:3b:95:ff:f7:
77:d0:36:a8:d3:d6:82:4d:aa:55:eb:3f:28:26:40:1b:2b:0a:
9d:fb:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:38:32 2026 by rpki-client