
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/58A53DF483EB11F083FC5148C4F9AE02.roa
File: 58A53DF483EB11F083FC5148C4F9AE02.roa (raw, json)
Hash identifier: 0AcNJYbPABCo7geahEBKTRdq6wGpuolAL2JTEM7M9Jk=
Subject key identifier: B4:C8:61:4B:63:5B:EC:D5:3D:0D:C0:0E:D4:9C:AE:2B:B7:22:27:EC
Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial: 0267
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/58A53DF483EB11F083FC5148C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:57:37 +0000
ROA not before: Sun 25 Jan 2026 01:21:29 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 151080
IP address blocks: 2001:df1:c340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Validity
Not Before: Jan 25 01:21:29 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a437c1-bcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:57:ae:28:a5:63:dd:3e:70:e8:43:9d:c5:
3f:90:8a:3e:05:91:cc:6b:d6:3c:2e:11:c4:31:2f:
c2:33:09:c3:ab:88:36:93:68:50:15:f0:f8:40:42:
0b:f6:fe:79:7d:c5:8b:3f:79:80:3c:32:da:05:08:
e7:86:07:98:f1:4e:39:c9:e6:8f:41:af:58:03:17:
78:dd:db:33:33:57:4d:90:9e:e3:71:e7:eb:67:19:
fd:4b:44:15:c1:2d:00:3f:b0:7c:b6:ec:b2:8f:06:
ef:9c:b6:f1:a0:d0:50:79:1d:21:fc:4f:8b:41:af:
5d:0b:f0:1e:f8:f6:2b:ce:98:86:e6:ef:e5:af:5c:
54:16:6f:c4:ae:5e:9d:40:5f:a8:5e:90:87:4e:6e:
0a:26:79:4c:d8:5a:c6:72:40:53:12:0d:67:0e:50:
21:b5:29:42:45:59:d7:68:c7:9c:a7:11:02:7b:08:
5f:44:23:87:ec:60:d2:3a:80:92:61:31:c7:54:a2:
0a:b1:00:e0:21:37:cd:43:a0:dd:d0:4a:cc:70:ac:
a1:a0:9c:5a:68:ef:57:5c:71:18:52:a4:ea:31:78:
df:c0:aa:1f:55:49:da:e4:e4:b6:eb:11:fe:5c:7a:
b1:62:8b:c9:e5:28:a0:d5:d9:16:2e:c6:8e:36:2e:
3d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C8:61:4B:63:5B:EC:D5:3D:0D:C0:0E:D4:9C:AE:2B:B7:22:27:EC
X509v3 Authority Key Identifier:
keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/58A53DF483EB11F083FC5148C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:c340::/48
Signature Algorithm: sha256WithRSAEncryption
25:19:d3:c2:94:56:1b:92:99:30:8c:32:87:b4:e9:32:4e:d3:
d8:8a:ae:ba:32:92:a0:4d:2f:89:30:35:24:ab:7e:a7:c1:88:
5e:3f:53:d5:0e:34:b3:70:d7:e5:f4:a7:c9:91:67:6e:0a:f1:
89:5b:d7:09:3c:51:df:ff:62:20:d2:bc:12:d3:11:87:ea:93:
de:83:cf:91:29:4f:99:7f:11:1f:9f:58:a3:04:6f:3c:39:af:
cb:a6:39:cf:2c:19:3f:6f:19:7b:c7:1e:f8:70:0e:d4:2e:d4:
e6:f8:73:97:2a:b6:b7:24:b4:63:d9:5c:10:1b:b3:6a:82:d4:
19:c0:fa:9c:d6:b5:09:cb:88:50:f7:e3:64:b7:72:44:fe:d0:
8e:54:1f:ef:77:12:40:7c:ea:cd:15:76:f2:b7:8d:00:6f:5a:
b2:41:c5:fc:46:b8:42:34:eb:15:c4:d9:31:96:aa:9e:2b:8e:
b6:a1:7b:a3:83:cb:98:36:ec:c0:2f:1b:84:dd:3e:b4:64:bc:
cb:9a:e6:b1:11:2b:34:5c:1d:1d:6b:a1:6d:dd:20:9f:cf:d3:
ae:1d:55:f7:71:7d:e8:7b:8f:f2:27:df:b5:8d:20:47:0c:4f:
df:01:76:a6:f2:ea:ae:e1:e5:5d:9f:b5:58:23:74:aa:e9:07:
57:c7:78:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:14:57 2026 by rpki-client