
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/58A35B90EA5611EEA9708773C4F9AE02.roa
File: 58A35B90EA5611EEA9708773C4F9AE02.roa (raw, json)
Hash identifier: E8onjnN6iimBzZDHgmtWpBoYlonlzj7tjyMVxIXY934=
Subject key identifier: F1:CC:62:67:80:2C:17:53:9A:F6:2C:7C:71:13:03:D3:70:BA:54:D6
Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial: 241B
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/58A35B90EA5611EEA9708773C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:23:42 +0000
ROA not before: Mon 18 Aug 2025 16:23:44 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 202595
IP address blocks: 203.82.24.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9243 (0x241b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Validity
Not Before: Aug 18 16:23:44 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4680e-ee48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:98:3e:43:a5:a6:a9:60:90:70:f9:5e:43:
e1:41:03:a2:9b:ad:e8:9c:e2:e6:5e:33:93:d9:63:
f6:14:7f:c6:0d:27:ac:44:fd:77:16:cd:cd:63:0f:
06:ec:64:bf:e8:6e:fc:c7:ac:be:54:8e:76:fc:1a:
1b:10:7a:22:6a:c7:ec:a6:06:ca:1e:6c:3c:8e:58:
10:89:c8:f3:2e:8d:96:20:db:dd:8a:64:24:d0:e3:
3b:29:91:56:ee:06:99:7e:ac:6f:2f:e4:9d:da:91:
4e:e5:81:21:23:29:ae:f6:fa:db:6c:05:b0:f8:81:
5e:fa:f3:1c:16:16:c3:ae:53:1a:64:e4:f5:e5:48:
c3:7e:0c:6d:99:fd:80:2f:8b:00:7c:39:36:89:d9:
14:d0:a3:86:62:0f:c6:8b:ea:c6:eb:d0:d5:4f:8c:
89:e7:58:da:e9:6c:01:3a:ef:91:dd:22:8a:08:1d:
9b:e5:0a:a2:bb:69:10:66:44:4d:ae:d7:6d:4d:67:
5c:82:65:00:be:80:7e:0c:6d:51:62:11:d6:0f:54:
f4:a6:a9:8f:52:c6:1e:4e:63:96:8f:7e:3e:c4:bb:
5e:96:20:2e:f2:96:ff:44:37:cd:7c:ea:8e:c6:4b:
00:83:ff:06:e7:23:ff:ac:87:66:2d:95:af:cb:69:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CC:62:67:80:2C:17:53:9A:F6:2C:7C:71:13:03:D3:70:BA:54:D6
X509v3 Authority Key Identifier:
keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/58A35B90EA5611EEA9708773C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.82.24.0/22
Signature Algorithm: sha256WithRSAEncryption
81:46:d7:cf:5f:1a:01:53:35:78:53:27:5b:81:cd:8e:88:1f:
9e:b5:f8:e8:91:f5:be:0a:70:4e:b2:b9:7e:00:c6:3b:0f:f2:
5b:9f:aa:1a:8c:7f:70:e4:46:b2:ba:cf:2c:64:9a:41:b7:e4:
82:75:5e:b7:a7:0c:61:e5:47:35:e3:87:ad:84:8d:6f:35:21:
bf:e1:09:5a:a4:72:cc:7e:58:23:13:81:e8:00:20:3e:5b:72:
dc:06:31:1d:36:0e:9b:b0:46:0f:d7:af:13:88:35:99:a6:e5:
c0:c6:8b:c5:7e:76:a8:57:d1:d3:02:34:e0:f8:22:6d:c2:23:
39:59:8c:3c:4f:68:9d:24:fb:8f:68:e8:47:4a:ef:0c:11:2d:
a6:37:07:2c:ad:0d:9d:8c:ae:28:3a:8e:69:8a:eb:b5:50:a0:
a2:3d:16:1c:05:05:fa:92:11:3c:b9:d9:f9:22:52:a5:0a:41:
f4:44:b5:a9:88:13:aa:16:dd:eb:79:29:06:e3:2b:df:df:2b:
fa:b5:83:7d:3b:58:18:51:23:16:af:f7:81:8e:de:d9:2c:b4:
32:a8:5d:14:6d:02:d5:39:cd:7d:2a:41:e5:05:7a:f0:7a:10:
aa:d9:12:64:8e:31:80:c8:92:bc:44:a3:7b:54:09:8d:cf:f2:
b1:d8:4b:58
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICJBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB
QTFBODc2NkQwHhcNMjUwODE4MTYyMzQ0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjgwZS1lZTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAti+YPkOlpqlgkHD5XkPhQQOim63onOLmXjOT2WP2FH/GDSesRP13Fs3NYw8G
7GS/6G78x6y+VI52/BobEHoiasfspgbKHmw8jlgQicjzLo2WINvdimQk0OM7KZFW
7gaZfqxvL+Sd2pFO5YEhIymu9vrbbAWw+IFe+vMcFhbDrlMaZOT15UjDfgxtmf2A
L4sAfDk2idkU0KOGYg/Gi+rG69DVT4yJ51ja6WwBOu+R3SKKCB2b5Qqiu2kQZkRN
rtdtTWdcgmUAvoB+DG1RYhHWD1T0pqmPUsYeTmOWj34+xLteliAu8pb/RDfNfOqO
xksAg/8G5yP/rIdmLZWvy2knjwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPHMYmeA
LBdTmvYsfHETA9NwulTWMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0
MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k
bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0ZBOTMvRTkwMTNCNzY4NDA3MTFFNTkyRTk0NzJEQzRGOUFFMDIvNThBMzVCOTBF
QTU2MTFFRUE5NzA4NzczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCy1IYMA0GCSqGSIb3DQEBCwUAA4IBAQCBRtfPXxoBUzV4Uydbgc2O
iB+etfjokfW+CnBOsrl+AMY7D/Jbn6oajH9w5Eayus8sZJpBt+SCdV63pwxh5Uc1
44ethI1vNSG/4QlapHLMflgjE4HoACA+W3LcBjEdNg6bsEYP168TiDWZpuXAxovF
fnaoV9HTAjTg+CJtwiM5WYw8T2idJPuPaOhHSu8MES2mNwcsrQ2djK4oOo5piuu1
UKCiPRYcBQX6khE8udn5IlKlCkH0RLWpiBOqFt3reSkG4yvf3yv6tYN9O1gYUSMW
r/eBjt7ZLLQyqF0UbQLVOc19KkHlBXrwehCq2RJkjjGAyJK8RKN7VAmNz/Kx2EtY
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:38 2026 by rpki-client