
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/58F7915E78DC11F084C71D2BC4F9AE02.roa
File: 58F7915E78DC11F084C71D2BC4F9AE02.roa (raw, json)
Hash identifier: SoN2OmaKDx3s/tXFdxvFr9GR6YOZ0tZJgZDuBgai0t4=
Subject key identifier: 26:68:6A:02:53:85:4A:6E:E1:56:F1:CE:FB:2C:8F:4A:92:44:E9:1E
Certificate issuer: /CN=A91D901E/serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967
Certificate serial: 69
Authority key identifier: 0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/58F7915E78DC11F084C71D2BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:13:21 +0000
ROA not before: Thu 14 Aug 2025 07:00:23 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 152595
IP address blocks: 2001:df5:c9c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl
rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D901E, serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967
Validity
Not Before: Aug 14 07:00:23 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3f521-bceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:06:b4:7f:ed:90:34:e2:7a:10:95:31:bf:
3b:10:94:e4:21:b8:29:66:70:4e:a7:97:f0:b8:f7:
0f:86:6e:78:a7:ef:3c:86:22:bc:09:ed:71:04:70:
49:7e:f7:a8:9f:99:ce:db:1d:a4:59:7f:a0:44:59:
57:79:57:a1:25:63:04:e3:56:c9:78:ef:83:db:ba:
ce:d4:70:da:05:14:95:f2:64:51:f7:51:a1:c6:ea:
ac:a9:44:76:78:4c:59:c4:a2:a1:1e:c3:5a:5b:d8:
bf:47:97:11:77:e1:07:20:7a:ad:2a:67:a6:62:24:
49:56:99:71:01:ac:25:cf:bf:bd:08:94:ce:a2:e3:
19:91:73:10:02:50:e0:6d:b0:bc:c6:43:46:63:68:
de:2a:42:b1:f4:44:fc:c7:76:a0:0b:b2:6b:70:2b:
e8:2c:e2:70:c9:23:98:7c:e2:e6:6f:2a:4b:e0:e5:
2b:d2:b8:a6:bc:29:0b:66:a2:ca:68:f4:af:99:97:
a3:7b:98:32:59:15:a6:f8:06:12:8e:b3:28:68:11:
a3:9d:61:de:97:4c:b7:c1:7a:89:40:fe:6d:f3:28:
f2:bc:cb:96:97:34:18:d3:d9:28:07:7f:78:83:df:
41:50:85:b6:3b:30:c9:c6:bf:84:53:ff:18:ee:4b:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:68:6A:02:53:85:4A:6E:E1:56:F1:CE:FB:2C:8F:4A:92:44:E9:1E
X509v3 Authority Key Identifier:
keyid:0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/58F7915E78DC11F084C71D2BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:c9c0::/48
Signature Algorithm: sha256WithRSAEncryption
d0:07:3e:54:a7:f3:c9:bd:26:2b:00:a5:ab:3b:ea:8e:90:7f:
54:0d:6d:6c:4c:10:0c:a1:78:21:53:57:e5:cf:ee:d3:20:83:
70:da:4a:20:f2:47:b9:40:b0:95:7a:55:d9:e3:18:bd:fb:45:
e2:2b:48:02:48:81:a7:44:9b:ba:23:1d:53:97:c0:a2:56:a7:
7d:79:e3:29:cb:d3:0c:6e:51:36:6c:90:4a:bd:17:03:de:ce:
66:09:7b:56:13:c6:41:96:88:36:bc:dd:de:bf:56:60:f9:38:
07:31:e8:4f:78:7b:a1:af:8a:2e:c8:97:63:7d:42:9f:0e:85:
e6:ed:1e:dd:5b:76:82:00:ec:78:3e:0d:e1:8b:5d:96:1f:c0:
53:5c:fa:76:9c:de:ec:98:9d:07:68:fb:6b:13:50:23:a6:82:
04:a3:e8:38:8a:7f:09:7b:c8:96:3f:bd:db:33:66:ed:3f:27:
a7:66:0c:c9:dc:57:87:9b:09:6c:28:2f:d6:78:66:43:d7:b5:
0c:ff:05:2c:01:d9:b5:8c:b8:6c:a4:cb:c9:de:01:55:27:0a:
ba:44:78:30:52:e3:3a:04:c3:72:2e:d4:4a:98:61:7b:65:b2:
a9:69:40:f2:32:45:4d:ca:c5:e9:e0:9d:30:e0:81:2e:1b:e8:
b0:ac:52:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:37 2026 by rpki-client