
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/B3789882F23211EC9A7DB924C4F9AE02.roa
File: B3789882F23211EC9A7DB924C4F9AE02.roa (raw, json)
Hash identifier: hROqHQfzOZpF5zXWWBnOQzRehyPqHQ2b0GG9Y2ExMZ4=
Subject key identifier: 87:66:9F:56:BE:B1:A2:FF:75:66:E2:1E:99:40:EA:C5:82:86:2F:BB
Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Certificate serial: 0526
Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/B3789882F23211EC9A7DB924C4F9AE02.roa
Signing time: Fri 06 Feb 2026 16:13:22 +0000
ROA not before: Fri 06 Feb 2026 16:13:22 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 133334
IP address blocks: 2.58.228.0/22 maxlen: 22
2.58.228.0/24 maxlen: 24
2.58.229.0/24 maxlen: 24
2.58.230.0/24 maxlen: 24
2.58.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1318 (0x526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Validity
Not Before: Feb 6 16:13:22 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69861322-4416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:c6:d8:68:e8:03:5e:34:ec:4f:09:e1:d1:
8e:c5:7e:1b:b9:4c:dd:a2:65:50:38:16:b5:f9:d6:
0f:32:e7:d0:a2:44:f1:a9:18:bf:9c:c3:cc:04:b7:
0b:d4:a6:9c:42:7e:09:78:d0:e1:a2:68:b2:48:15:
26:59:ea:55:6b:4e:33:91:5d:22:62:60:56:e9:3c:
eb:9a:25:e4:33:73:b9:fe:96:36:0d:61:eb:cc:5d:
13:f0:89:c3:49:03:84:0b:89:9f:1f:9c:40:a9:cc:
85:fb:9c:bd:1c:eb:a1:a6:e5:08:11:9f:70:e7:cb:
4a:de:8d:4b:ef:77:42:62:33:bc:72:49:11:fa:e4:
2e:58:c8:4d:ba:14:f5:7e:01:43:44:3c:6b:95:c2:
8a:f0:e5:75:c0:ce:5e:05:27:4c:f7:ed:06:a8:55:
ff:f7:3a:a7:5d:8d:38:99:32:8c:af:0c:4b:ec:db:
10:64:50:d2:38:d5:3c:a3:db:47:0a:d0:35:8d:a9:
bf:72:31:23:a8:55:e9:c3:f8:b7:22:e3:90:1e:84:
46:fc:18:2b:52:e6:8f:35:e0:88:5c:3b:c6:75:c3:
e9:d4:dc:87:ee:19:b5:17:4f:ad:fa:85:ee:e6:0c:
55:1e:b1:1d:d6:db:96:b2:a8:8c:43:da:4e:1c:d3:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:66:9F:56:BE:B1:A2:FF:75:66:E2:1E:99:40:EA:C5:82:86:2F:BB
X509v3 Authority Key Identifier:
keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/B3789882F23211EC9A7DB924C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
2.58.228.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:a9:df:89:fe:65:13:33:22:82:2f:2a:a1:6c:21:46:13:41:
42:d8:bb:81:16:4f:70:36:95:35:36:eb:b8:04:81:b8:70:58:
f2:cb:03:86:da:50:92:96:41:98:85:9c:33:cb:eb:86:45:5d:
25:ca:5b:c0:54:aa:a9:02:64:31:00:3e:fc:4d:e6:af:95:e3:
12:d6:a0:d4:de:92:ee:e9:9e:08:36:28:4d:97:b0:f2:b5:40:
55:19:af:57:8c:49:93:c8:a3:ef:a3:e7:46:70:8a:4f:fb:86:
2c:ff:0a:67:06:1b:c4:1a:ac:49:c1:fb:41:ab:aa:d6:db:9a:
ed:5f:aa:84:78:61:bc:ef:56:38:0f:58:9a:95:9a:26:08:75:
2e:89:46:3d:69:82:5b:b6:72:6a:67:52:26:d5:fb:97:5c:7b:
80:d9:87:b4:51:f6:82:e4:44:e5:5b:da:4c:fe:01:fa:7c:87:
0c:d8:76:8c:6c:47:4f:02:9a:37:be:5d:05:97:13:aa:e0:f5:
d9:b3:17:0b:b6:70:d8:80:ba:eb:dd:68:6f:25:9a:b2:44:69:
ab:74:9b:3e:00:cb:ed:81:bc:38:c5:ea:54:3e:dd:90:49:a7:
c5:7e:f2:68:1a:91:38:a0:ab:df:de:97:cc:69:1e:4c:16:75:
06:1b:02:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:45:40 2026 by rpki-client