
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58F8E9A8735711F099D2B76CC4F9AE02.roa
File: 58F8E9A8735711F099D2B76CC4F9AE02.roa (raw, json)
Hash identifier: TNmJ/iK91OVhQrvqm2gBCyqvI7pbgxyf5YQpQ9NlR50=
Subject key identifier: AE:69:4B:1D:FF:EB:BF:AE:25:4B:AB:2D:BD:B4:1B:17:C4:D8:0F:8B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F51A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58F8E9A8735711F099D2B76CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:30:42 +0000
ROA not before: Mon 06 Jul 2026 17:30:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149623
IP address blocks: 103.151.128.0/24 maxlen: 24
2001:df1:fdc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62746 (0xf51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:30:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be642-9b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:c7:d1:36:4b:ae:d9:ac:ee:2c:1d:c2:d3:
2b:03:b0:d2:6a:48:fe:5d:ac:c2:25:44:06:dd:3a:
9c:9f:f0:69:66:7b:fb:b7:20:ac:48:7b:59:9e:97:
94:9c:9e:ae:77:ff:80:46:dc:6e:61:e5:8d:63:5d:
5e:13:da:cd:24:3e:e0:ca:04:82:a2:27:d2:f7:f6:
b0:77:b6:6f:2e:b7:28:9e:a3:86:32:dd:4e:ae:f9:
1a:f0:30:4b:01:3b:ca:b8:7b:e9:77:f5:67:f6:e2:
a5:d2:f4:39:86:d9:89:cb:4e:19:68:0c:73:18:9a:
40:2e:32:ff:31:4d:b1:ef:e7:8a:82:c7:ac:ca:49:
4d:6a:5d:be:98:c8:60:ac:20:29:21:6d:63:81:df:
2c:39:eb:9b:3d:89:af:6f:e3:17:f7:e9:5c:b1:fd:
eb:aa:1e:48:65:69:98:81:1a:b9:e8:7c:9e:1f:cc:
46:5c:06:2f:ab:b4:b7:65:0f:0f:73:08:a4:05:13:
9d:5e:19:47:ba:f1:1a:61:d1:eb:53:c6:18:68:e7:
aa:38:c3:c2:48:0c:7c:fa:8a:cc:8b:1f:89:3a:93:
39:3b:25:3d:9e:4f:10:b8:97:84:37:e7:e5:5e:a5:
80:f1:a2:ca:ec:32:77:0e:59:13:4f:94:53:db:14:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:69:4B:1D:FF:EB:BF:AE:25:4B:AB:2D:BD:B4:1B:17:C4:D8:0F:8B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58F8E9A8735711F099D2B76CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.128.0/24
IPv6:
2001:df1:fdc0::/48
Signature Algorithm: sha256WithRSAEncryption
22:78:3f:3b:46:22:2e:eb:b5:19:bc:c6:18:55:56:1a:dc:c1:
51:d3:93:98:43:cb:58:93:d0:7f:30:76:4b:3f:77:69:ea:97:
f6:ac:9e:e6:6f:4b:ee:25:7a:aa:7d:36:c8:3e:95:65:36:be:
4a:a2:1d:25:95:3f:d3:78:61:b7:39:a6:bc:bb:3b:83:b0:a1:
30:cd:09:02:41:67:82:7b:ce:c7:a6:c5:47:fd:96:70:84:df:
fb:fa:ab:da:63:b1:2d:16:c8:97:78:37:ae:43:78:a1:27:57:
a0:55:9b:5d:d5:61:36:59:60:d4:f2:ea:38:12:47:32:3b:e0:
24:9f:26:2e:f2:5d:c7:0b:26:51:35:54:07:76:82:7e:fc:e0:
5f:ba:61:eb:9d:c2:9b:2f:85:d9:1e:a5:af:39:21:b8:ae:99:
2c:55:ed:81:3d:d2:4a:61:0e:c8:2e:7d:1d:7d:e9:25:37:62:
53:14:4d:d7:0b:62:f8:f6:1b:8b:ae:bb:b9:92:a2:a7:7c:46:
d8:bd:db:f7:fc:a1:3b:59:32:3c:12:ea:67:92:30:54:d1:93:
e1:b2:95:81:9d:29:e2:85:77:62:94:d4:f7:c3:49:77:e9:91:
e6:d6:30:b9:8f:8c:65:93:50:53:58:54:d8:29:38:71:c6:6f:
2f:fe:3b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:46 2026 by rpki-client