
$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/EE01A248F2FB11EE9AA9E24CC4F9AE02.roa
File: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (raw, json)
Hash identifier: rKGQBFsWBoXRwkkEHmzJU4DziCIyRjQTWeYrnr/z7fc=
Subject key identifier: 84:3F:2F:6F:D8:8D:F8:64:47:EE:DF:4B:97:51:7C:78:B8:18:71:25
Certificate issuer: /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial: 01CD
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/EE01A248F2FB11EE9AA9E24CC4F9AE02.roa
Signing time: Sun 19 Jul 2026 05:31:01 +0000
ROA not before: Sun 19 Jul 2026 05:31:01 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 7545
IP address blocks: 155.144.58.0/24 maxlen: 24
155.144.59.0/24 maxlen: 24
155.144.60.0/24 maxlen: 24
155.144.61.0/24 maxlen: 24
155.144.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 05:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Validity
Not Before: Jul 19 05:31:01 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5c6114-496a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c1:fc:6b:4d:c5:cd:1f:7b:cd:70:7c:20:09:
8b:eb:aa:e2:bd:b0:59:2c:f1:b5:20:5d:3e:d4:26:
1f:4e:15:df:17:f2:57:7d:13:b4:37:4a:69:55:b4:
75:c9:ab:e7:56:9b:3c:59:03:92:d6:23:b2:af:44:
08:c1:d5:cd:41:9b:cb:7f:2f:6e:49:4b:ac:77:24:
82:e8:3c:29:cb:46:7a:9c:a2:92:e3:c7:27:ec:bf:
17:1b:40:67:b1:07:e6:24:0c:fc:d9:5c:a4:c6:fa:
86:71:cb:42:f9:de:fb:19:37:91:b7:83:a4:a4:1c:
68:8a:c1:32:cb:51:70:d8:f0:16:fe:6d:ae:ca:ad:
8e:80:48:bc:32:6b:a8:4d:45:10:df:57:a1:7f:fb:
a0:54:a5:a1:f1:4b:6e:6e:c6:e1:db:9e:45:d8:73:
ec:bc:52:06:27:c5:4a:3e:02:a4:c1:86:2e:b1:77:
63:cd:e1:a6:2d:45:b5:d9:a3:51:bd:68:24:0b:bd:
e7:17:14:17:60:19:45:96:0c:9c:dd:0b:54:a2:ea:
33:1f:ef:9d:25:90:8e:73:69:19:c2:31:84:cb:cd:
ce:4e:81:d2:69:d2:e9:98:63:df:2a:46:b9:2a:59:
00:74:71:df:18:7d:1c:f4:35:18:9c:f3:89:f9:f2:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3F:2F:6F:D8:8D:F8:64:47:EE:DF:4B:97:51:7C:78:B8:18:71:25
X509v3 Authority Key Identifier:
keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/EE01A248F2FB11EE9AA9E24CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
155.144.58.0-155.144.62.255
Signature Algorithm: sha256WithRSAEncryption
31:fe:80:84:a5:52:31:22:6c:da:1e:d3:2a:30:a5:2d:27:85:
ec:b2:99:8b:ae:03:34:59:a5:29:c1:51:47:38:6a:a4:f4:e3:
86:18:40:d0:ec:03:95:75:4d:96:72:8a:c5:97:5c:4c:54:3b:
7a:14:a3:e0:98:3f:4c:88:74:24:52:96:17:dd:98:1b:21:f1:
76:a8:fa:e1:21:67:6a:d1:1c:96:42:db:66:04:a7:14:92:4b:
d4:b9:bb:df:fd:95:c3:70:7d:5f:8f:26:f0:a4:4a:2b:5a:7d:
c9:c3:b1:0a:40:30:6e:fc:24:e6:5a:ea:a4:a3:c3:e8:a4:f8:
a5:1b:b1:31:31:52:14:6f:2e:88:9e:2c:44:0c:0d:92:06:c4:
db:5f:45:5d:18:57:8e:5d:d7:d6:f4:7d:11:70:5d:72:57:57:
ea:e7:b0:0e:cd:92:6c:a5:3e:8b:ee:47:75:3b:2b:fc:04:4e:
83:b8:f9:9b:2d:4f:ad:70:74:fe:f6:b0:c8:ba:60:e7:69:aa:
96:ef:ee:c5:ad:84:f2:c6:5a:ed:4a:fd:16:ef:94:19:49:13:
d3:54:97:c7:e5:31:5a:60:a8:40:14:2b:d0:cf:83:ae:45:1e:
e2:0f:8f:78:0e:e8:27:3b:55:4d:54:41:c9:39:22:22:92:1d:
d4:f5:1e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:05:18 2026 by rpki-client