
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/58893B2878DC11F084C71D2BC4F9AE02.roa
File: 58893B2878DC11F084C71D2BC4F9AE02.roa (raw, json)
Hash identifier: cA1zRf5hGPx366nz55tbLEUSAsNqCtNhxK7+ift/7Yw=
Subject key identifier: 6A:FE:49:29:55:10:D1:BA:BC:68:81:ED:0C:C1:D3:18:4E:72:B6:A3
Certificate issuer: /CN=A91D901E/serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Certificate serial: 69
Authority key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/58893B2878DC11F084C71D2BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:13:17 +0000
ROA not before: Thu 14 Aug 2025 07:00:22 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 152595
IP address blocks: 165.101.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Validity
Not Before: Aug 14 07:00:22 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3f51d-a972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:e7:ab:a3:3c:19:12:fe:1e:b3:63:e6:ec:
1f:e5:c7:4a:bb:d7:ab:ee:bc:6f:66:a0:34:98:c0:
33:52:e8:4c:cb:90:9e:89:8e:a0:dc:b3:b1:b5:a0:
c4:17:42:59:0c:81:32:6f:54:33:a3:85:4a:48:e4:
b5:ed:86:9e:77:7c:84:a0:b7:75:95:4b:60:50:60:
07:06:35:25:d7:1d:b5:36:71:d2:e2:18:76:6c:d9:
fc:12:05:2e:99:3a:13:93:11:f6:24:b5:7c:30:d7:
b0:07:94:e5:43:14:e7:cd:13:53:88:13:d2:e6:4c:
51:13:58:6c:8a:4c:60:f6:ea:6b:24:14:25:53:d9:
7e:ae:2a:9e:10:da:3f:72:f2:fd:f6:cd:c0:86:ef:
d9:3e:70:51:67:18:a0:ef:23:06:f4:09:14:8a:f1:
d8:40:ec:2e:24:ec:b6:15:1b:e4:20:85:f8:7a:7f:
eb:e6:90:f6:40:53:93:6b:3a:47:20:12:5a:cf:c5:
ef:22:96:bc:09:e5:b4:e4:43:2d:94:dc:95:3c:2f:
8e:3e:4c:c7:92:65:a7:ee:d6:02:46:17:6d:29:d1:
53:6b:18:72:c3:7b:91:38:b3:ec:82:13:b3:7e:e3:
c0:56:ac:ea:e3:73:fd:47:da:5b:0f:e5:32:b1:f0:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FE:49:29:55:10:D1:BA:BC:68:81:ED:0C:C1:D3:18:4E:72:B6:A3
X509v3 Authority Key Identifier:
keyid:03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/58893B2878DC11F084C71D2BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.76.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:73:29:0a:e9:dd:eb:de:99:15:39:39:45:c4:ca:7d:c4:76:
66:f0:43:af:cd:8c:0d:0c:2f:32:3f:7f:ac:f0:3f:f3:2d:cc:
53:8e:22:fc:f0:41:74:78:1b:f3:1b:1f:fe:48:83:b3:49:94:
0a:52:bf:7e:81:e8:38:4d:0d:96:d6:16:9d:5c:76:47:bd:bf:
c0:7f:82:60:a4:84:72:f0:24:76:33:1c:64:4a:72:27:d5:e1:
54:38:bd:7f:51:cb:08:2e:c5:10:3c:dc:c3:15:fd:85:8a:3a:
41:d3:7e:80:79:93:8c:de:69:c0:66:37:55:ff:4b:75:eb:fc:
87:b8:70:7d:67:e9:55:95:d5:54:6b:52:14:52:b3:f2:2c:b8:
8f:69:db:85:72:65:1a:ec:71:17:39:be:db:16:71:f6:19:8e:
25:41:79:ff:1a:89:03:57:73:b1:51:98:33:47:cf:fa:2e:21:
bc:9e:e3:fd:1d:cf:00:c0:34:53:62:55:b6:9d:25:05:01:86:
9d:b4:73:9c:b3:fd:b0:e9:b0:2c:0d:26:72:b6:38:fe:92:e7:
49:cb:e2:33:6d:7f:fa:a7:1d:69:9c:e4:d7:cd:2e:69:a3:f3:
bb:f2:12:3a:66:bc:19:91:d1:88:32:a7:8e:7a:ac:17:91:67:
9f:7c:af:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:29 2026 by rpki-client