
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/58A35B90EA5611EEA9708773C4F9AE02.roa
File: 58A35B90EA5611EEA9708773C4F9AE02.roa (raw, json)
Hash identifier: 1G385VTheI+atJyTdCrkaW87iv1psEE5oikWEVvtrgs=
Subject key identifier: BF:6D:58:E4:C7:86:C2:95:4F:10:00:8F:D6:46:17:66:FF:71:3F:0E
Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial: 239D
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/58A35B90EA5611EEA9708773C4F9AE02.roa
Signing time: Mon 18 Aug 2025 16:23:44 +0000
ROA not before: Mon 18 Aug 2025 16:23:44 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 202595
IP address blocks: 203.82.24.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 15:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9117 (0x239d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Validity
Not Before: Aug 18 16:23:44 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68a35390-b139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:b1:8d:77:80:47:4f:b7:14:7c:48:fc:17:
d1:cb:73:c0:28:e2:c3:8b:c7:06:3a:3d:8a:76:d5:
8f:48:a8:46:89:58:e7:15:52:f1:80:7b:83:62:4e:
ab:e2:15:b8:ad:e1:dd:45:ac:36:e1:ee:5d:5c:e8:
33:fe:8f:56:81:6a:14:c6:c2:9f:ac:aa:70:c1:df:
df:3b:32:15:39:f0:71:3c:ab:8f:b9:6b:1d:2a:d5:
25:d8:b3:be:42:5f:2c:b5:cb:90:35:24:ad:09:53:
80:57:1c:33:c2:82:ad:e5:0b:f0:c9:4f:fa:15:8d:
fa:27:3a:34:2a:3e:7a:e0:5f:34:d5:2b:6a:f8:13:
60:a1:ac:a0:ac:79:9f:ec:a7:65:96:d9:6e:03:dc:
78:2e:26:b9:5d:f0:e6:38:8d:85:11:0c:62:33:a2:
81:59:a9:0e:28:7d:7d:af:13:93:f0:aa:6d:db:dc:
9c:bd:b6:c5:7b:7e:e8:d6:17:08:e5:38:4c:99:10:
c3:f1:a2:40:29:ea:38:3d:63:f5:cc:cb:ab:45:2e:
10:4e:85:22:a3:89:9f:59:d3:ba:1f:2b:65:0d:33:
8e:b5:47:98:45:e0:98:8d:be:b3:0a:97:51:4c:8d:
12:1d:4e:9f:07:45:ce:f6:94:e7:c2:47:97:71:ed:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6D:58:E4:C7:86:C2:95:4F:10:00:8F:D6:46:17:66:FF:71:3F:0E
X509v3 Authority Key Identifier:
keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/58A35B90EA5611EEA9708773C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.82.24.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:3c:6d:03:31:33:13:2c:e6:40:47:3e:1c:fd:82:3f:2f:bd:
e7:f3:ac:2a:79:4f:3c:65:c4:33:2f:d4:d9:5e:5d:b0:23:52:
cf:5b:92:15:44:67:67:40:a6:16:51:6a:a8:2c:4f:68:b3:e9:
90:9a:c9:81:7e:6a:7a:16:fc:79:1a:d1:20:f0:ae:e3:5f:da:
86:3b:74:d0:3d:54:21:c5:88:60:f6:27:91:63:fc:6e:a3:9f:
ca:3c:1e:bb:a8:83:89:18:93:e4:a2:3f:ec:2e:06:f0:43:87:
7b:b4:ed:85:ae:51:d3:0c:7d:33:b9:a2:b6:23:d3:69:70:a3:
89:f2:33:a2:b9:b8:c2:e8:41:e0:13:99:22:a2:17:02:e7:54:
a0:51:0d:30:61:b2:bf:8d:ac:44:04:a9:46:63:c5:66:74:c4:
ce:ba:cc:fb:6e:09:1f:98:8e:4c:8b:4a:43:b1:76:84:44:e2:
d7:a3:c2:a5:e4:1a:4e:dd:82:46:2b:58:51:82:93:32:b3:60:
95:54:ef:94:2b:8c:26:6f:cd:9a:01:e8:8c:3b:43:c1:d8:13:
36:e5:3c:05:6d:2f:9b:6f:94:5e:08:fb:33:25:23:ad:8a:8f:
ea:26:65:03:1a:52:b5:63:c7:90:72:bd:7a:fd:e0:04:b2:b0:
b6:87:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:44:27 2025 by rpki-client