
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/E7584B4C86A211EE9791E012C4F9AE02.roa
File: E7584B4C86A211EE9791E012C4F9AE02.roa (raw, json)
Hash identifier: 0uWno4Hnhv+ttSxe+kg9HfvxP+j21A4ysRcLfxAKldM=
Subject key identifier: 71:27:6D:E0:1B:BB:F7:AC:8C:0C:55:CE:B4:72:EF:A1:36:69:C0:A5
Certificate issuer: /CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5
Certificate serial: 0691
Authority key identifier: BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/E7584B4C86A211EE9791E012C4F9AE02.roa
Signing time: Mon 31 Aug 2026 22:43:52 +0000
ROA not before: Mon 31 Aug 2026 22:43:52 +0000
ROA not after: Fri 01 Jan 2027 00:00:00 +0000
asID: 17411
IP address blocks: 58.147.128.0/20 maxlen: 24
58.147.144.0/21 maxlen: 24
58.147.152.0/22 maxlen: 24
58.147.157.0/24 maxlen: 24
125.213.192.0/20 maxlen: 24
125.213.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl
rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 22:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1681 (0x691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91619D8, serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5
Validity
Not Before: Aug 31 22:43:52 2026 GMT
Not After : Jan 1 00:00:00 2027 GMT
Subject: CN=6a9603a8-67aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:92:90:10:af:78:e9:fa:f9:36:3c:0a:42:
7b:15:7e:88:2c:ad:2f:1d:e9:f7:2b:46:de:1f:06:
68:4a:2d:ff:f7:7a:80:7c:ea:9b:cb:aa:c9:0e:85:
d9:74:10:3b:72:e1:28:ee:c4:7b:78:1a:77:df:17:
2e:f2:ac:c7:2c:97:27:a1:ef:33:fc:c1:8c:8a:f2:
14:d4:0a:02:9d:25:ea:9f:32:31:0c:d6:d5:b7:76:
ee:e1:e3:03:6e:32:a4:83:f6:86:a2:70:b9:17:f5:
86:06:fc:76:e3:cf:db:8e:76:97:7d:18:bd:91:ab:
95:92:e8:82:54:e0:6b:3b:aa:d0:ef:4e:fa:25:66:
63:71:f9:ce:3a:b5:b9:da:7f:dd:07:b0:66:b9:69:
c1:88:68:3f:5e:3d:b7:4c:d7:7a:34:94:aa:39:91:
f7:00:af:10:43:40:68:1e:84:ab:60:be:de:ea:cc:
c3:1a:75:de:67:a3:30:48:83:de:b9:ed:b8:89:a5:
88:95:5d:e9:dc:0d:85:a8:83:3d:91:f2:12:ee:5b:
8e:c9:ba:74:83:8b:c0:3b:d2:10:85:21:dc:25:01:
aa:f4:6c:f8:7b:8e:24:70:62:78:86:4d:e3:7b:ab:
8d:32:ca:cc:34:07:ed:b5:ae:d4:59:43:a4:79:35:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:27:6D:E0:1B:BB:F7:AC:8C:0C:55:CE:B4:72:EF:A1:36:69:C0:A5
X509v3 Authority Key Identifier:
keyid:BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/E7584B4C86A211EE9791E012C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.147.128.0-58.147.155.255
58.147.157.0/24
125.213.192.0/19
Signature Algorithm: sha256WithRSAEncryption
66:2a:10:2d:27:b5:de:82:36:51:41:0c:89:97:9a:bc:3d:ae:
ea:17:06:3a:cb:8b:21:bd:bf:46:bb:00:6d:a8:41:20:84:ca:
5a:a4:3f:8b:86:24:9e:2d:78:8b:64:30:c5:62:89:b4:c4:18:
f0:93:5c:dc:a4:f4:12:8b:97:09:2c:fb:2b:b5:43:8f:b9:d4:
ee:e1:b8:44:90:bf:20:fe:62:10:ba:f7:c5:88:23:34:be:e5:
7a:c4:66:4f:81:0b:f7:00:e0:fa:f0:3b:79:79:9b:3e:7e:ea:
ff:3f:ea:52:06:f1:0f:46:ab:72:ec:ff:d6:5c:4b:4c:65:ad:
50:39:ee:8b:b1:4f:f4:13:07:74:c6:2a:8a:df:0a:68:b6:e6:
09:5e:5f:1f:3d:a4:a1:5b:f7:fe:da:cc:11:85:4b:a6:65:9a:
5d:36:b7:1d:1a:a3:2c:7a:ae:58:92:43:a3:07:c7:90:e2:6f:
0b:f3:c9:3b:20:df:84:ae:d0:f7:4f:91:0c:2e:d8:6d:63:82:
78:74:4a:ba:91:d0:f3:b8:57:e6:98:7c:b8:06:ce:df:44:ad:
77:3a:f9:5c:47:7e:9e:3f:e4:a9:85:68:c6:bf:09:28:fb:48:
79:8f:04:6a:0c:b9:61:f3:f5:86:1c:9c:c3:50:98:92:f1:ed:
f8:ab:0c:0e
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE5RDgxMTAvBgNVBAUTKEJDRjJDOEFEQkMzM0UyN0U1Qzc2NzRBNjZEQTg2NUJG
NUFBNjZCRTUwHhcNMjYwODMxMjI0MzUyWhcNMjcwMTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk2MDNhOC02N2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmtqSkBCveOn6+TY8CkJ7FX6ILK0vHen3K0beHwZoSi3/93qAfOqby6rJDoXZ
dBA7cuEo7sR7eBp33xcu8qzHLJcnoe8z/MGMivIU1AoCnSXqnzIxDNbVt3bu4eMD
bjKkg/aGonC5F/WGBvx248/bjnaXfRi9kauVkuiCVOBrO6rQ7076JWZjcfnOOrW5
2n/dB7BmuWnBiGg/Xj23TNd6NJSqOZH3AK8QQ0BoHoSrYL7e6szDGnXeZ6MwSIPe
ue24iaWIlV3p3A2FqIM9kfIS7luOybp0g4vAO9IQhSHcJQGq9Gz4e44kcGJ4hk3j
e6uNMsrMNAftta7UWUOkeTXr/QIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFHEnbeAb
u/esjAxVzrRy76E2acClMB8GA1UdIwQYMBaAFLzyyK28M+J+XHZ0pm2oZb9apmvl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTlEOC8zNTU4RDFDNkU0
M0ExMUVCQUM4RDUwMUFDNEY5QUUwMi92UExJcmJ3ejRuNWNkblNtYmFobHYxcW1h
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQTElyYnd6NG41Y2RuU21iYWhsdjFxbWEtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjE5RDgvMzU1OEQxQzZFNDNBMTFFQkFDOEQ1MDFBQzRGOUFFMDIvRTc1ODRCNEM4
NkEyMTFFRTk3OTFFMDEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg
BAIAATAaMAwDBAc6k4ADBAI6k5gDBAA6k50DBAV91cAwDQYJKoZIhvcNAQELBQAD
ggEBAGYqEC0ntd6CNlFBDImXmrw9ruoXBjrLiyG9v0a7AG2oQSCEylqkP4uGJJ4t
eItkMMViibTEGPCTXNyk9BKLlwks+yu1Q4+51O7huESQvyD+YhC698WIIzS+5XrE
Zk+BC/cA4PrwO3l5mz5+6v8/6lIG8Q9Gq3Ls/9ZcS0xlrVA57ouxT/QTB3TGKorf
Cmi25gleXx89pKFb9/7azBGFS6Zlml02tx0aoyx6rliSQ6MHx5DibwvzyTsg34Su
0PdPkQwu2G1jgnh0SrqR0PO4V+aYfLgGzt9ErXc6+VxHfp4/5KmFaMa/CSj7SHmP
BGoMuWHz9YYcnMNQmJLx7firDA4=
-----END CERTIFICATE-----
Generated at Sat Sep 5 16:55:23 2026 by rpki-client