
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/559FC8C054F411F08DC15C53C4F9AE02.roa
File: 559FC8C054F411F08DC15C53C4F9AE02.roa (raw, json)
Hash identifier: f3XPiQtR0p/IYkSOHYWRqV0zJmTEshw00emsE4qgK3E=
Subject key identifier: A0:47:D9:21:44:32:82:C6:14:FE:83:E4:ED:AD:4F:5B:85:A9:38:25
Certificate issuer: /CN=A91656C7/serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
Certificate serial: DB
Authority key identifier: 58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/559FC8C054F411F08DC15C53C4F9AE02.roa
Signing time: Mon 03 Aug 2026 08:57:02 +0000
ROA not before: Mon 03 Aug 2026 08:57:02 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 153789
IP address blocks: 165.101.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl
rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 30 Aug 2026 06:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91656C7, serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
Validity
Not Before: Aug 3 08:57:02 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a7057de-acfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:5e:0a:a7:9f:f2:4e:3b:c8:2e:b8:c6:93:
89:8a:93:4f:28:2d:d4:23:06:8b:e9:7a:44:46:c8:
10:21:18:48:fa:3e:4d:29:d6:02:4a:f8:b1:b2:e7:
98:eb:17:89:84:7d:1f:de:70:d8:da:62:8d:09:6e:
14:03:74:33:72:cd:d2:dc:e5:a3:1b:6b:39:6f:7e:
c2:eb:f9:94:5f:ff:e3:70:3c:9e:56:91:7a:3d:52:
c2:db:74:ed:a8:d1:3b:83:14:5c:21:3e:15:ea:ab:
1d:e4:67:88:ee:95:ce:10:4a:b6:0d:5b:44:26:70:
35:12:a2:1e:d9:d4:91:fb:31:e0:34:ce:26:01:f9:
06:cc:83:a6:2d:b2:16:af:89:59:bb:de:75:bd:86:
04:1e:aa:e5:c2:19:da:c7:b9:58:62:29:f9:1e:51:
2b:11:de:67:60:05:54:5b:7e:3b:f4:63:db:43:6b:
d1:a5:9d:46:1e:d3:32:10:31:5d:51:f5:c3:10:73:
6a:ce:36:a5:82:ea:97:3a:7e:d0:fb:6c:ba:37:39:
7d:75:66:9a:9c:79:f1:81:52:98:38:92:bf:5a:28:
12:d6:7a:25:ae:2f:74:55:b9:b2:fd:8f:dd:5d:f1:
1d:76:66:63:e9:37:93:e2:a7:2e:c4:d8:34:c1:9e:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:47:D9:21:44:32:82:C6:14:FE:83:E4:ED:AD:4F:5B:85:A9:38:25
X509v3 Authority Key Identifier:
keyid:58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/559FC8C054F411F08DC15C53C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:db:47:2b:01:12:2d:bd:03:a6:9d:b5:41:24:63:4d:03:b3:
f5:d6:cd:44:6c:b5:f7:9d:4e:b5:5f:4e:53:dc:a6:7f:e5:ec:
6f:28:00:aa:cc:04:85:87:6b:2f:76:3a:e4:d4:88:bb:13:4e:
f4:dd:67:68:09:30:c3:49:f6:3a:9a:9b:1c:70:1b:10:55:0b:
a6:52:51:2c:bc:05:45:01:22:b2:2c:ae:98:c2:e0:3b:3d:3b:
08:7b:ba:67:87:c9:af:3f:1f:1e:69:00:b1:53:47:d4:06:c2:
17:d8:13:57:e7:7c:1e:f5:79:99:ba:6c:17:3a:d3:54:a7:4e:
e4:cf:6f:dd:98:7d:8a:f8:99:78:48:45:41:4f:22:df:b3:7c:
20:26:80:90:81:ca:e7:17:00:f9:72:a7:06:b6:cd:68:57:70:
68:e7:f9:07:e3:77:0c:c3:91:ea:68:63:58:97:4d:e0:b8:3c:
9c:e7:db:5a:e8:24:ab:39:d6:14:25:dc:b8:da:63:e7:8c:94:
67:6d:7a:13:22:53:58:48:31:ee:f9:32:54:1b:d6:b4:80:93:
d1:90:1b:0c:5c:26:6c:b2:e4:71:71:51:64:35:36:b5:9a:64:
1b:84:2b:9e:d6:af:5c:3c:20:7f:78:da:14:03:98:3d:90:1f:
62:01:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:56:45 2026 by rpki-client