
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/1D58E1D6C62D11F0AAC5916FC4F9AE02.roa
File: 1D58E1D6C62D11F0AAC5916FC4F9AE02.roa (raw, json)
Hash identifier: Vpz93lQtOia2IcvMZCQMtxXNDGhCptW7YzTO+LIIZuE=
Subject key identifier: 63:F8:5A:D6:8A:BA:50:23:38:E7:4F:0A:3D:ED:B1:3F:23:0E:7E:34
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0850
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/1D58E1D6C62D11F0AAC5916FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:15:48 +0000
ROA not before: Thu 20 Nov 2025 16:22:32 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154350
IP address blocks: 138.252.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128 (0x850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Nov 20 16:22:32 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4ac84-cd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:e5:7b:60:6e:9d:ed:35:d2:7a:56:15:3f:
01:e1:8f:d2:70:50:3f:e1:57:e4:08:85:d8:51:6f:
a4:92:a7:ea:ea:56:e4:38:ed:a7:1d:76:4e:18:57:
2d:5a:da:90:c4:04:9e:69:1a:84:c5:1e:6c:3f:ad:
c0:59:21:52:50:4c:09:75:92:12:8a:44:9c:48:44:
b3:f4:13:0a:12:54:5a:af:5d:ee:e9:65:c9:ac:cd:
79:72:b2:bc:7d:20:fd:7e:ab:6c:49:d2:82:65:46:
63:d6:88:37:bc:0b:16:e5:9b:df:5e:b4:2c:ed:6b:
49:31:12:42:9f:9d:c8:7b:fc:fb:b0:01:22:2d:a4:
44:b1:dd:f6:86:95:aa:d5:87:6b:d7:bc:2d:45:07:
7e:2d:5c:2d:71:95:e6:5a:8a:c8:f7:2a:99:8d:87:
fb:b0:66:e5:da:57:6d:0a:2c:16:c0:b8:3e:01:82:
0d:bc:1a:84:a3:e9:35:3d:ed:00:f3:46:71:74:6f:
e0:a1:b3:38:d3:bd:d5:a7:7e:6a:ba:18:8b:06:63:
7c:a4:7a:9b:ad:be:d5:3d:e4:0f:c4:f8:bf:b6:73:
c7:94:f3:94:bc:c6:d0:ba:c3:f0:88:ee:67:e5:3d:
09:a7:8d:6c:fc:4e:d6:d1:1b:57:97:3e:56:12:69:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F8:5A:D6:8A:BA:50:23:38:E7:4F:0A:3D:ED:B1:3F:23:0E:7E:34
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/1D58E1D6C62D11F0AAC5916FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.152.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:ce:c9:1b:35:58:75:13:11:c2:da:01:36:64:38:3b:97:15:
ad:21:e4:e1:ba:43:a4:ad:63:7f:56:b8:de:28:97:9b:80:d6:
f6:ce:7b:65:89:e6:03:23:d3:60:6a:eb:ca:1d:5b:44:5d:d1:
93:20:57:8d:4f:58:f9:a6:15:e2:15:97:95:c7:79:32:c4:6e:
b7:87:f0:04:5e:08:51:15:9a:8c:09:67:9e:c7:c9:f0:da:25:
24:0a:57:c9:be:aa:1e:96:59:f5:67:bb:43:7e:dd:8a:70:90:
48:c6:b0:18:d9:59:37:7b:e5:77:83:86:d1:ba:42:eb:4e:3d:
56:42:91:7a:77:4f:30:6c:6e:10:0a:55:7f:01:fc:fc:b7:c8:
68:55:ac:4a:63:2c:bd:70:be:53:b1:24:ef:c0:39:32:eb:c8:
c8:28:a9:42:04:85:63:3e:59:8a:85:e4:1f:ec:50:68:b8:13:
de:91:dd:18:bb:b2:e7:26:fb:97:f0:4a:84:ad:a8:f2:26:17:
18:f0:db:5e:13:81:01:a6:ea:47:16:1e:47:2c:06:79:fc:aa:
67:29:82:e8:96:13:f9:de:0e:4c:17:d5:5d:9f:f5:ae:a5:3e:
92:c2:4b:3c:ad:e3:54:5c:47:b3:36:1b:af:ba:3d:32:34:9d:
09:5a:4d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:52 2026 by rpki-client