
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/388A8C304FFE11EFA3C2A52BC4F9AE02.roa
File: 388A8C304FFE11EFA3C2A52BC4F9AE02.roa (raw, json)
Hash identifier: XZ0qbGDDANy2Q81pnLd6XWuSiMwLTC0S/qdVl5ZO/Rk=
Subject key identifier: 6C:07:78:76:04:7F:53:93:A5:52:0E:A5:6D:D8:C7:3B:7D:E3:57:6E
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0A32
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/388A8C304FFE11EFA3C2A52BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:53:55 +0000
ROA not before: Wed 27 Aug 2025 01:06:07 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 45458
IP address blocks: 58.137.110.0/24 maxlen: 24
58.137.199.0/24 maxlen: 24
203.170.169.0/24 maxlen: 24
203.170.186.0/24 maxlen: 24
203.170.187.0/24 maxlen: 24
203.170.206.0/24 maxlen: 24
203.170.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 23:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2610 (0xa32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Validity
Not Before: Aug 27 01:06:07 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a58862-67e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:c2:cb:69:02:82:f8:4e:ee:46:c0:4e:b9:
79:ba:04:55:9f:09:86:fc:70:03:37:16:02:d7:13:
18:7c:13:69:84:fb:9f:a7:f8:ed:31:8b:28:08:5d:
c7:0b:97:66:ff:66:aa:dc:dc:28:b4:4d:5e:fc:a4:
0d:0c:d4:9b:56:2e:0e:71:5d:0a:a6:ce:95:d1:d3:
2a:64:3d:5d:d0:a9:9c:e0:cc:fe:e0:69:b4:97:52:
17:02:84:7c:ee:eb:ab:f1:f5:6e:8b:61:f2:87:f6:
72:e7:23:e3:b8:8f:2b:59:1b:78:35:f6:b2:c0:7b:
a3:bb:ba:f4:f6:38:08:2c:a3:73:ca:ba:d1:53:57:
16:2b:e8:91:ac:c1:c5:2d:e3:aa:7a:45:e1:9f:8d:
3e:09:37:c4:9d:45:e8:01:30:f1:ce:0d:dd:79:52:
39:28:45:bf:b2:6f:52:6a:d5:a6:87:10:00:a5:61:
93:23:02:9d:03:ab:3f:03:3b:21:d0:93:a4:55:a2:
10:b7:40:85:84:ea:11:7b:b6:de:4a:ed:8b:e8:f3:
1c:d6:be:d8:50:9f:71:e9:e0:d5:8f:a2:74:28:88:
bc:37:27:1d:1d:9f:82:22:49:56:2d:b1:60:62:a2:
4e:b0:81:4c:4d:0e:19:fc:fd:9e:4c:84:5b:09:9b:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:07:78:76:04:7F:53:93:A5:52:0E:A5:6D:D8:C7:3B:7D:E3:57:6E
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/388A8C304FFE11EFA3C2A52BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.137.110.0/24
58.137.199.0/24
203.170.169.0/24
203.170.186.0/23
203.170.206.0/23
Signature Algorithm: sha256WithRSAEncryption
98:6b:8c:7f:31:c4:41:cd:9a:b5:5c:14:a0:77:8d:69:36:b2:
4e:65:f5:cb:cb:6c:f6:73:8b:97:67:5c:6d:33:ec:c2:20:f8:
71:b9:da:21:81:4f:02:46:f9:3d:92:dd:51:e6:a5:b8:fe:f6:
66:56:7d:93:63:1d:de:24:73:35:1a:05:4c:d4:c4:05:8e:5d:
31:4b:bb:35:93:90:ad:28:90:28:cc:df:c9:cb:7e:1e:93:d6:
27:47:d1:82:0e:31:8b:f7:ca:24:71:2d:f5:3b:a2:7f:33:79:
5f:50:c5:48:db:48:78:6a:4d:6e:87:7c:d9:1f:05:fe:02:98:
f3:f3:e6:39:05:23:82:12:2c:77:ff:a0:05:6a:5e:c0:f9:2b:
ad:1b:30:6f:ab:a9:84:00:ca:27:56:25:ad:e3:29:49:ec:06:
63:cf:c2:0e:ce:89:ed:4c:e5:3a:d1:5c:ca:5c:3e:80:35:e2:
3c:53:42:cf:26:0f:11:95:89:e3:13:a1:98:19:cc:a9:7a:3d:
a7:50:31:0e:88:16:82:11:b8:fb:38:35:68:27:d8:d4:a6:72:
02:a0:48:48:d9:27:da:3b:6c:99:55:36:fc:1e:d1:f9:02:12:
5e:64:c3:4b:78:9e:33:ff:1a:f4:c8:f7:86:2f:b0:94:4d:c4:
84:99:7f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:20:13 2026 by rpki-client