
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7DDB945CDF1011ECA2548C86C4F9AE02.roa
File: 7DDB945CDF1011ECA2548C86C4F9AE02.roa (raw, json)
Hash identifier: rTv19eL2VIpDHuM5An2gRW2Nlu5fFv/+nnMlY3TAcaA=
Subject key identifier: 0A:8E:90:78:D9:40:B6:DF:51:4C:8B:85:60:86:4E:8A:44:AC:0E:0C
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0A1F
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7DDB945CDF1011ECA2548C86C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:53:39 +0000
ROA not before: Wed 27 Aug 2025 01:05:49 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 17980
IP address blocks: 58.137.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2591 (0xa1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Validity
Not Before: Aug 27 01:05:49 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a58852-c23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:a9:d1:29:a1:fa:f8:96:cb:c2:46:3f:9a:
74:e7:54:3b:fd:8c:30:65:4c:82:71:e4:c9:85:0d:
4f:1e:3e:b8:f1:4b:38:04:cf:93:ce:63:37:61:86:
1f:43:e9:63:41:52:ec:dc:97:fb:12:00:14:ee:2b:
60:e9:23:12:b6:a2:ce:9f:31:e5:e4:aa:a1:77:d8:
46:3f:92:d8:2a:ac:b0:b9:24:fc:fc:13:42:09:6d:
1d:e0:a1:bf:77:e0:ed:58:09:3b:ef:64:5f:35:ec:
ff:89:2e:0d:8c:3e:1f:53:f7:5f:d4:95:5a:f8:ab:
fc:24:e4:73:57:bf:d3:fb:64:d3:3f:45:de:9d:57:
e0:a1:22:c3:1c:ff:ff:e9:9b:67:53:6e:43:d4:46:
16:81:ca:67:f4:11:52:fd:5e:d1:23:c7:9a:79:30:
da:42:7c:02:c8:d4:ba:42:35:64:5d:e4:fa:19:ce:
45:70:2d:38:59:29:24:a6:ee:d0:e0:70:e3:b0:4a:
c0:80:1a:df:a5:2e:53:56:52:5e:b5:e8:87:72:7c:
15:22:46:20:a0:f3:1b:a0:d8:58:0e:12:4f:03:31:
d2:dc:43:02:e3:4f:eb:d5:fa:d2:fd:2a:91:3b:45:
28:4e:6f:c8:e5:38:8b:4e:f9:d6:63:72:de:7d:dd:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8E:90:78:D9:40:B6:DF:51:4C:8B:85:60:86:4E:8A:44:AC:0E:0C
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7DDB945CDF1011ECA2548C86C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.137.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b9:79:25:2a:6a:d3:cb:49:dd:d9:7d:ab:44:87:8c:02:bd:
44:3b:72:95:fa:54:3a:d1:f5:76:6c:0d:be:cc:35:91:3a:88:
eb:44:52:bd:c7:1b:7f:31:0a:21:6e:e0:54:c7:f1:d4:67:ab:
73:b0:33:8d:23:3b:bd:9c:76:65:f7:11:4b:59:f2:8d:1e:ac:
47:cb:c1:57:b0:23:77:80:94:37:9e:3b:09:8c:1b:72:d1:53:
5e:56:18:5c:a2:71:fd:77:77:fb:37:e7:05:5c:4e:bc:7a:61:
46:e6:79:79:27:1d:f3:8b:74:a7:54:6f:f0:0d:54:d9:8b:2d:
68:df:4d:df:92:ae:f9:7d:05:21:92:4e:db:89:9e:2c:97:ef:
f3:10:4e:ca:7a:73:d3:d3:ca:3d:17:4c:a5:2d:76:06:cc:1d:
73:92:4e:ca:d0:60:a2:f5:7f:7e:c2:7e:16:aa:0c:d7:1a:de:
77:5f:06:4c:90:b0:47:50:11:8c:f0:23:b2:12:32:fa:eb:f1:
45:94:6c:9e:43:2f:c7:c1:fc:78:9c:39:d0:e1:42:2a:dd:bc:
22:33:ca:a1:81:a0:56:19:d1:c0:40:e9:45:07:09:f2:99:7b:
31:14:02:1d:f9:98:b1:12:15:c0:0a:92:8f:ba:f4:b3:68:fa:
55:d1:04:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:24:16 2026 by rpki-client