
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/58B04DD46F3C11EB924C4E2AC4F9AE02.roa
File: 58B04DD46F3C11EB924C4E2AC4F9AE02.roa (raw, json)
Hash identifier: 1ykJMGL6at4RQBXZd1ybx9+1UkR4f2L3m4pa6rsank8=
Subject key identifier: 8B:F4:4F:63:C8:42:2C:7A:B2:85:F2:74:BF:EB:71:61:75:80:0E:57
Certificate issuer: /CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
Certificate serial: 077E
Authority key identifier: BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/58B04DD46F3C11EB924C4E2AC4F9AE02.roa
Signing time: Wed 12 Aug 2026 21:42:33 +0000
ROA not before: Wed 12 Aug 2026 21:42:33 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38333
IP address blocks: 103.153.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl
rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 21:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918 (0x77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E3E3, serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
Validity
Not Before: Aug 12 21:42:33 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7ce8c9-f8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d6:63:7c:2e:06:fe:2a:6d:73:89:1f:f2:da:
9c:9c:d4:5e:82:2a:c2:1f:3a:c2:8a:d2:db:be:25:
9a:2c:f4:21:b0:7d:c5:82:fa:c7:59:f5:f8:8f:6c:
4a:4f:2c:54:ed:72:5e:b8:80:13:03:ab:1b:22:00:
2f:c9:a0:df:8c:00:c3:c2:ab:79:0e:d1:06:d9:53:
86:97:2a:54:cb:35:c4:8d:e4:80:11:1c:38:a6:b0:
d2:e1:48:f9:1b:9f:10:4e:ca:36:27:91:4a:39:44:
80:6f:4b:94:2a:b0:9c:55:cb:7d:1b:8f:80:fb:81:
7a:94:6b:7b:b5:39:28:33:01:d8:c0:32:dd:83:c0:
5a:d7:72:02:99:ca:2b:d9:fe:be:fd:2e:71:84:91:
88:cd:8d:65:1b:db:ed:3a:c5:8b:b1:1b:29:8d:cb:
4c:2e:b3:ca:f4:11:dd:e5:10:16:b6:46:19:4d:52:
79:74:3c:e1:7d:e6:87:b0:0e:e9:c5:fa:76:2a:eb:
9d:52:b9:d6:fc:67:9c:a2:62:91:1c:af:d7:71:3c:
ee:f6:df:53:df:88:23:02:03:18:b5:9a:01:4c:8a:
d6:90:5c:a8:3a:98:70:61:75:09:28:dd:8f:8b:83:
21:96:7d:9d:1c:26:24:9e:a6:83:c2:24:9a:8e:f0:
36:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F4:4F:63:C8:42:2C:7A:B2:85:F2:74:BF:EB:71:61:75:80:0E:57
X509v3 Authority Key Identifier:
keyid:BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/58B04DD46F3C11EB924C4E2AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.164.0/24
Signature Algorithm: sha256WithRSAEncryption
30:99:38:aa:0e:68:dc:60:16:1d:37:79:5f:4d:a6:fa:e0:ab:
4c:1b:7b:26:b1:11:2a:3f:9a:cc:8d:21:24:2d:52:c8:cb:5c:
1c:ec:6a:cb:fb:ff:8b:34:f4:43:ad:21:63:14:d9:a4:a8:35:
39:34:23:b9:7b:9b:13:06:0c:f2:b8:a3:3d:40:b7:82:0e:be:
84:7e:f3:d3:a5:ab:74:46:d2:f9:1c:d6:2d:69:13:fa:82:23:
ba:61:49:03:d4:97:78:4e:94:db:bd:ee:7e:30:de:bf:98:33:
ee:54:1b:f5:9a:6a:74:ae:c4:b5:73:19:17:46:f6:a3:1c:42:
4c:a1:a1:4c:64:68:1b:5a:bd:55:21:ac:1b:74:6d:8b:51:94:
7d:d7:a8:bc:1e:ae:c0:4b:4e:ec:21:99:c2:07:47:b1:20:9a:
21:39:57:25:b8:a5:db:7d:0c:2b:a9:ae:e4:de:56:94:89:85:
d4:48:6a:4f:93:a6:4e:0d:e9:15:ad:c6:30:d9:72:e8:21:59:
d7:05:5b:38:a1:4e:26:72:37:ae:b8:fb:22:e1:20:74:9e:14:
bb:a0:9b:32:08:76:55:a7:6a:96:36:36:b5:80:84:94:98:22:
72:49:2d:75:db:fb:bf:96:e6:72:e0:3a:9d:8b:53:52:f4:87:
d4:0c:5a:d0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUUzRTMxMTAvBgNVBAUTKEJCQ0M3NjBBRkUzRTlGMEE5Qjg4QzhFQzdBNDlFRDdD
REQwMzk2RjcwHhcNMjYwODEyMjE0MjMzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdjZThjOS1mOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2NZjfC4G/iptc4kf8tqcnNRegirCHzrCitLbviWaLPQhsH3FgvrHWfX4j2xK
TyxU7XJeuIATA6sbIgAvyaDfjADDwqt5DtEG2VOGlypUyzXEjeSAERw4prDS4Uj5
G58QTso2J5FKOUSAb0uUKrCcVct9G4+A+4F6lGt7tTkoMwHYwDLdg8Ba13ICmcor
2f6+/S5xhJGIzY1lG9vtOsWLsRspjctMLrPK9BHd5RAWtkYZTVJ5dDzhfeaHsA7p
xfp2KuudUrnW/GecomKRHK/XcTzu9t9T34gjAgMYtZoBTIrWkFyoOphwYXUJKN2P
i4Mhln2dHCYknqaDwiSajvA2OwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIv0T2PI
Qix6soXydL/rcWF1gA5XMB8GA1UdIwQYMBaAFLvMdgr+Pp8Km4jI7HpJ7XzdA5b3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTNFMy8wOEI4RDBEMjZG
M0ExMUVCQjExMzM5N0VDNEY5QUUwMi91OHgyQ3Y0LW53cWJpTWpzZWtudGZOMERs
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U4eDJDdjQtbndxYmlNanNla250Zk4wRGx2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUUzRTMvMDhCOEQwRDI2RjNBMTFFQkIxMTMzOTdFQzRGOUFFMDIvNThCMDRERDQ2
RjNDMTFFQjkyNEM0RTJBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5mkMA0GCSqGSIb3DQEBCwUAA4IBAQAwmTiqDmjcYBYdN3lfTab6
4KtMG3smsREqP5rMjSEkLVLIy1wc7GrL+/+LNPRDrSFjFNmkqDU5NCO5e5sTBgzy
uKM9QLeCDr6EfvPTpat0RtL5HNYtaRP6giO6YUkD1Jd4TpTbve5+MN6/mDPuVBv1
mmp0rsS1cxkXRvajHEJMoaFMZGgbWr1VIawbdG2LUZR916i8Hq7AS07sIZnCB0ex
IJohOVcluKXbfQwrqa7k3laUiYXUSGpPk6ZODekVrcYw2XLoIVnXBVs4oU4mcjeu
uPsi4SB0nhS7oJsyCHZVp2qWNja1gISUmCJySS112/u/luZy4Dqdi1NS9IfUDFrQ
-----END CERTIFICATE-----
Generated at Wed Sep 30 20:54:17 2026 by rpki-client