
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/65A36988DF1911EC8F85991EC4F9AE02.roa
File: 65A36988DF1911EC8F85991EC4F9AE02.roa (raw, json)
Hash identifier: 2Ihsd+KPuhQQ9/0UCKOUqNcMFSts4hpXPIh9qdW3jr8=
Subject key identifier: 07:23:30:92:DA:1D:D3:5B:53:AB:01:1A:9B:04:BD:4B:1C:F4:7F:FE
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0A22
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/65A36988DF1911EC8F85991EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:53:41 +0000
ROA not before: Wed 27 Aug 2025 01:05:51 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 24083
IP address blocks: 58.137.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2594 (0xa22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Validity
Not Before: Aug 27 01:05:51 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a58855-5a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:b9:10:87:b2:c8:d0:01:11:e1:a9:79:74:
61:2a:7d:14:d0:c4:77:92:e7:f8:98:ae:1e:52:f3:
42:6b:96:fd:df:5e:26:ea:04:1a:5a:d3:09:1a:cd:
71:51:33:1e:03:b6:72:67:a5:d4:a3:96:1e:04:e8:
a7:94:17:c9:98:bc:ef:73:dc:f6:c6:4d:1e:56:18:
d2:45:dc:d9:0f:a9:bc:ac:67:32:67:9a:55:b1:48:
65:ef:41:e8:b8:ad:7a:ff:be:44:ca:52:15:d0:f3:
d0:73:b8:c6:05:01:1a:ac:9a:d7:0f:47:ba:bc:d4:
f8:58:eb:b4:7f:79:78:e5:2f:cd:a2:14:7b:c3:5b:
c8:7d:e2:80:99:23:94:2a:e7:44:56:0d:70:7c:9f:
b2:b8:c5:e6:35:e2:26:ed:da:20:79:de:e6:08:66:
01:70:ad:4f:2c:09:3f:a2:b4:78:38:45:31:e5:03:
cc:b2:3b:fe:09:e6:63:b7:60:f3:f9:3d:6c:87:57:
0e:da:dc:a9:3a:7f:cb:29:d7:74:01:27:18:7a:df:
6f:e9:3f:31:be:0d:2f:a5:08:0c:15:7e:a8:1f:0b:
6d:3f:a5:39:92:a8:aa:22:0e:ac:32:c1:ba:b2:b1:
cb:eb:93:8f:34:9f:2d:ee:12:26:62:3e:db:28:bd:
52:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:23:30:92:DA:1D:D3:5B:53:AB:01:1A:9B:04:BD:4B:1C:F4:7F:FE
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/65A36988DF1911EC8F85991EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.137.216.0/24
Signature Algorithm: sha256WithRSAEncryption
35:68:6a:f2:a2:bb:84:47:bb:54:6c:68:18:6a:43:1f:d4:9b:
00:ca:29:06:ff:69:c2:d5:f7:12:32:73:9c:4d:6f:b1:96:fe:
df:14:b5:66:e9:0e:e7:bf:d1:65:ea:30:d7:36:ef:b1:67:01:
d5:08:38:84:c4:d4:be:58:7d:dc:03:09:ae:46:4d:d0:b3:f1:
0b:c3:21:4e:d5:f1:d2:45:65:0d:64:6b:79:5d:3f:c3:87:d5:
8e:d8:dc:30:98:7b:8c:33:4b:b6:f7:7e:69:a2:b3:ad:dd:80:
ae:11:f8:1a:16:e1:ab:4f:1e:db:fe:ca:0a:57:3c:fd:e7:a7:
9b:2e:00:a7:95:91:53:a5:c0:59:2a:5e:f2:a6:46:72:a8:55:
83:2a:ae:d8:86:95:a2:96:c9:88:35:af:05:90:bf:59:ee:0d:
54:f9:a6:32:7e:6e:e7:c8:17:db:2d:11:86:1c:81:a8:a4:2e:
04:bd:4b:d1:9c:1e:3c:36:a4:e1:f5:8d:31:c6:e9:29:72:46:
f8:27:87:cf:c1:cd:cb:6d:34:ba:d3:38:88:a1:1a:b0:0a:a8:
1d:37:af:57:0b:47:23:83:0e:79:84:56:bf:e1:45:f5:c9:b7:
31:7c:b6:0d:d9:09:f5:40:ad:c3:d9:6b:b8:a6:67:81:d6:d2:
b5:cd:9b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:18:31 2026 by rpki-client