
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/55B702E2B27711F195DBF3DC3411F970.roa
File: 55B702E2B27711F195DBF3DC3411F970.roa (raw, json)
Hash identifier: kOntsOXGES64oi1Eg1WcUgg8tcl0eulB3R2jwi2RHTw=
Subject key identifier: C4:56:B4:9F:2D:13:94:92:06:59:EC:84:FF:3B:FC:C0:0D:E4:B8:4D
Certificate issuer: /CN=A91D1C2E/serialNumber=40C855900EBEB4DDEE119C808E459AAFDF75B584
Certificate serial: 7A
Authority key identifier: 40:C8:55:90:0E:BE:B4:DD:EE:11:9C:80:8E:45:9A:AF:DF:75:B5:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/55B702E2B27711F195DBF3DC3411F970.roa
Signing time: Thu 17 Sep 2026 09:08:23 +0000
ROA not before: Thu 17 Sep 2026 09:08:23 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 55547
IP address blocks: 58.97.156.0/22 maxlen: 22
58.97.156.0/24 maxlen: 24
58.97.157.0/24 maxlen: 24
58.97.158.0/24 maxlen: 24
58.97.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.crl
rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1C2E, serialNumber=40C855900EBEB4DDEE119C808E459AAFDF75B584
Validity
Not Before: Sep 17 09:08:23 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aabae07-f68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:3e:19:cb:7c:2d:7f:55:7a:2e:72:9e:94:
d3:09:eb:41:e4:fe:8e:a4:b0:5d:22:34:fe:36:27:
c8:d7:6f:f2:41:13:39:7a:92:5a:b5:be:fc:1f:99:
07:ee:7e:55:ec:a4:ec:75:e5:98:1a:f9:99:f6:78:
bd:d1:41:da:4e:2a:eb:91:e1:3c:23:c1:47:4f:23:
aa:7f:1e:53:66:65:2c:70:ce:ad:a5:eb:a1:99:c5:
ba:1a:5b:4f:72:86:a1:3a:dc:5f:df:15:60:bd:1b:
0e:7d:69:b5:01:cc:dc:99:b9:8d:a8:03:f4:fb:2d:
b6:3c:c1:47:c3:c9:ee:54:f0:b9:54:5c:2c:85:d3:
54:7a:50:ec:f7:09:9a:97:71:28:32:5f:e1:f9:ad:
47:65:04:16:49:f6:96:76:4b:de:f6:93:33:b4:ed:
da:2c:ec:8c:e8:1a:46:42:72:7e:2a:b4:82:f2:98:
85:86:63:bb:16:cd:3a:93:a1:91:0e:be:7e:33:ea:
a5:cc:32:df:3c:e3:92:da:43:30:f8:c2:46:97:12:
59:f1:6a:fe:94:3d:48:41:65:7f:a2:18:03:31:98:
92:f7:3f:c2:ad:0c:59:37:a5:15:0e:d6:6e:15:9a:
1a:cc:93:18:41:a5:51:b1:b1:d2:34:55:97:c7:e4:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:56:B4:9F:2D:13:94:92:06:59:EC:84:FF:3B:FC:C0:0D:E4:B8:4D
X509v3 Authority Key Identifier:
keyid:40:C8:55:90:0E:BE:B4:DD:EE:11:9C:80:8E:45:9A:AF:DF:75:B5:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/55B702E2B27711F195DBF3DC3411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
58.97.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:3a:d5:2a:47:aa:ff:77:61:7c:1d:cb:8d:f1:f7:7e:9b:3d:
00:0d:09:f2:51:e5:8d:22:cf:35:18:da:cb:25:fe:b8:fb:20:
66:4b:02:3b:5e:41:c1:02:39:1e:38:7e:70:f3:e6:1c:a0:49:
24:c1:c2:94:7a:89:9f:7b:be:1f:75:50:59:58:e9:01:e5:f3:
f3:a2:ad:54:50:15:e0:34:20:ce:a2:7b:44:40:ba:f4:c1:10:
a1:89:67:30:2e:e4:d6:44:bc:b4:aa:32:e8:98:53:c3:bd:29:
f7:b2:46:9d:8a:14:7c:0e:ac:15:15:60:81:38:13:19:f8:dc:
92:ad:cd:89:99:83:23:4b:64:09:0d:65:f5:3d:f0:ea:de:b4:
d7:3e:0c:2e:5c:7a:75:d9:3a:c0:d8:94:58:20:8a:92:b9:7d:
61:36:0f:29:72:e3:a1:e1:68:86:66:69:00:80:ec:68:3c:bd:
06:7e:c8:94:0f:ff:7f:d8:c2:de:1a:94:9b:69:11:9b:b9:95:
69:1d:ca:80:c3:82:16:03:1c:78:7a:6a:8a:6a:8d:2d:43:a0:
35:34:29:6f:3e:c2:c9:b4:fb:8f:60:0f:46:c9:bd:21:24:26:
48:20:31:95:01:7b:07:59:7d:97:d8:49:31:66:bb:43:af:72:
22:19:ae:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:25:55 2026 by rpki-client