
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/58EB7FEA17BA11F192FEB12A393D8C67.roa
File: 58EB7FEA17BA11F192FEB12A393D8C67.roa (raw, json)
Hash identifier: 2KciHVKCwNQJZwIswrhWW3+d4zx/KcnZcJdVnRiVP80=
Subject key identifier: 1B:04:56:26:4A:DC:2B:71:EB:2E:99:66:2D:DB:AD:FE:68:28:3F:F2
Certificate issuer: /CN=A91878FF/serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Certificate serial: 04
Authority key identifier: 5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/58EB7FEA17BA11F192FEB12A393D8C67.roa
Signing time: Wed 04 Mar 2026 11:07:35 +0000
ROA not before: Wed 04 Mar 2026 11:07:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 103.214.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 11:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878FF, serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Validity
Not Before: Mar 4 11:07:35 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a81277-a24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:db:80:87:33:85:fd:e8:3e:7c:93:49:08:
21:35:fa:d1:c1:cd:89:fb:ac:65:b8:45:f1:69:1a:
df:a1:71:3c:df:fb:32:3b:1f:10:26:50:d1:55:b8:
9a:76:ad:c3:d9:c0:da:6b:db:5c:19:81:60:f8:01:
19:8e:c9:3a:b1:b9:25:51:1e:06:bb:98:de:8a:69:
ed:3e:e9:97:c3:7c:1c:70:25:37:51:e7:59:a5:32:
f4:b5:fa:f9:92:7b:bf:b2:fc:2c:e0:82:2d:04:9c:
f7:9c:63:cd:be:2a:2f:4c:f6:f6:91:c6:8c:62:76:
46:14:b9:3b:3b:1c:8b:55:60:a8:c7:ce:7a:98:e1:
60:fd:6f:92:b0:08:08:18:1b:2b:b4:c8:97:bd:59:
30:ab:de:7f:45:9e:0a:d6:55:d3:cb:5e:22:9b:59:
84:6b:25:7d:89:ba:66:5e:56:b1:d8:ad:81:06:d1:
c4:bb:2b:5d:b2:b2:0b:96:53:40:78:8a:ad:b2:c2:
19:41:28:13:de:f8:ed:fc:41:74:82:fe:fd:b0:cb:
81:73:0d:2a:ed:57:f2:90:b0:2e:d1:9b:41:1f:93:
a3:a2:b8:32:e9:f5:a8:1c:0b:21:63:e1:da:77:39:
86:7b:7e:0d:38:63:9a:f6:45:74:45:72:12:c6:14:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:04:56:26:4A:DC:2B:71:EB:2E:99:66:2D:DB:AD:FE:68:28:3F:F2
X509v3 Authority Key Identifier:
keyid:5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/58EB7FEA17BA11F192FEB12A393D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:9f:ed:f0:90:41:c2:20:76:55:31:63:6a:e3:46:8b:b1:82:
24:53:bd:4f:fe:13:63:7c:29:45:47:51:fa:5b:a1:50:b6:2e:
f8:a0:ca:58:f0:50:6d:85:6f:75:68:fc:a7:ed:83:3d:e5:2f:
80:0d:fe:3f:3d:1b:9a:e4:67:63:32:1f:3a:e8:65:c4:e4:17:
6c:58:c8:5b:b5:43:ff:c1:30:3a:54:de:96:ce:e9:80:30:7a:
2a:9b:a2:ea:d5:b2:70:35:69:58:1e:d3:ce:4e:41:d9:b1:6b:
a3:79:f2:b6:d2:ec:a6:6e:2d:3e:6a:c3:3b:33:31:99:dc:40:
b0:44:3a:5f:d0:0b:40:a0:ee:2d:ed:11:65:2e:e5:d1:dc:2d:
76:2b:56:03:83:96:02:d3:f3:59:bc:26:f5:32:82:f3:6a:1c:
2b:2d:0b:c9:69:9c:0a:e7:16:98:9d:8c:c8:5a:e0:9b:95:2f:
22:e0:1a:e8:e0:19:9f:1d:04:a0:b1:86:a9:a9:92:64:8e:e3:
49:73:93:e1:2f:c3:5a:8d:83:85:81:4f:fa:b4:d8:2d:6d:61:
a0:9f:8a:56:1d:6e:ef:d5:7d:14:50:4e:34:be:13:b4:87:74:
dc:00:92:c1:58:ad:ef:6c:6d:9a:3e:2b:65:80:1f:f7:06:e5:
18:02:95:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 14:26:19 2026 by rpki-client