
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/CBBF13566EA911F1979A4FB45FA30FBC.roa
File: CBBF13566EA911F1979A4FB45FA30FBC.roa (raw, json)
Hash identifier: InjAFjFfD9Kqc+Wu+wt8coAIdhYTvUAL4QI7Q5j856I=
Subject key identifier: 17:CA:31:15:C3:44:29:02:F5:57:42:10:FC:FA:FA:2A:3B:84:9C:CE
Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial: 1A98
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/CBBF13566EA911F1979A4FB45FA30FBC.roa
Signing time: Tue 14 Jul 2026 17:16:46 +0000
ROA not before: Tue 14 Jul 2026 17:16:46 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 56868
IP address blocks: 43.255.58.0/24 maxlen: 24
43.255.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 16:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6808 (0x1a98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Validity
Not Before: Jul 14 17:16:46 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a566efe-e66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:7a:1a:12:f3:e6:de:0b:0f:61:1c:4d:b6:
ff:78:c2:ea:d3:8c:76:90:78:ca:9c:d4:90:fa:af:
df:4b:ae:79:c7:02:a7:28:2a:13:63:e0:6c:3a:db:
91:bd:47:a9:2c:fe:c4:7e:72:f8:68:a3:61:01:dc:
65:de:58:bb:56:17:10:33:c5:51:60:98:96:68:cb:
e7:5f:6b:3d:18:69:e3:e5:55:c5:93:70:fd:6b:c3:
9e:8d:c3:6e:fd:6e:46:d5:5d:72:fb:b9:38:7d:2f:
ba:42:ed:9b:62:e4:e6:4e:19:a2:4c:60:e7:da:2c:
74:17:6c:00:c0:0c:c8:bc:17:41:a0:52:ea:94:b5:
ca:dc:25:2c:3e:1c:bb:25:ef:41:08:c4:04:b1:f1:
62:db:0a:16:e1:b9:cc:61:b6:0d:4a:5b:a6:d8:3c:
4d:9e:7f:69:c2:8b:8f:65:b7:6a:51:d1:4f:08:96:
ac:51:53:7a:72:7d:b1:0b:54:cc:ef:6e:2b:34:9a:
c7:0b:0f:1c:4d:d2:71:b5:db:3f:0c:79:d9:e3:f3:
f0:93:d0:5c:5e:3a:c3:b8:66:e9:ff:f0:34:de:ce:
ef:51:b7:ba:43:ab:cb:1b:59:a1:65:99:f1:8e:e0:
5f:6b:81:20:19:5f:89:69:53:94:17:76:b2:6e:a4:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CA:31:15:C3:44:29:02:F5:57:42:10:FC:FA:FA:2A:3B:84:9C:CE
X509v3 Authority Key Identifier:
keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/CBBF13566EA911F1979A4FB45FA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.255.58.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:13:30:b1:09:d9:93:ba:ef:37:fa:11:9d:b9:ee:0c:ad:6c:
9f:10:6d:b6:1d:73:ae:af:40:53:cc:c1:0d:35:48:58:8f:88:
31:6e:5d:e8:2f:18:a5:7e:43:da:6e:64:da:02:28:03:2f:24:
4b:1b:ef:08:5e:c2:3a:63:f3:6f:a5:5f:94:e1:43:2f:7a:4b:
9e:5a:8c:7f:bc:95:7c:b0:5a:c4:29:08:6f:13:6c:f3:96:f7:
92:9d:7e:8f:df:12:3d:e9:33:a0:9e:8b:a8:f8:46:38:6e:9f:
a5:f3:64:59:9a:25:9f:f8:f1:83:ec:17:e2:25:7d:2d:21:c5:
9b:65:d7:87:eb:8e:d9:9c:52:0a:cb:72:7a:a3:56:16:96:66:
7e:85:fe:0d:d6:fb:3e:eb:0c:3f:3b:38:2e:0e:79:c7:77:b3:
12:6f:b7:ff:8b:ef:3d:93:6e:14:d8:98:96:47:e3:ad:0f:2b:
14:fe:3d:0d:95:43:f8:e0:8d:d6:73:f8:37:07:c5:e3:23:34:
07:5d:94:3f:fc:90:27:09:a7:5d:95:a6:c2:57:d1:90:7d:02:
29:7b:8c:5a:aa:74:9a:d8:d6:63:f9:e3:d0:6f:df:46:27:94:
22:4e:62:de:88:c2:af:10:7c:56:f5:e7:ca:f8:7e:8f:3c:54:
03:20:1f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:07 2026 by rpki-client