
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/58722CCE5B5011F1A484689580EE528E.roa
File: 58722CCE5B5011F1A484689580EE528E.roa (raw, json)
Hash identifier: ZlS+zcT5r0ms9dmqfLobs/BgiHTHyfZo/3BVynBGZjc=
Subject key identifier: 81:76:F5:BA:15:04:54:02:E5:B7:37:F3:35:C7:BF:E8:8B:74:81:09
Certificate issuer: /CN=A91C4FB5/serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Certificate serial: 02
Authority key identifier: 91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/58722CCE5B5011F1A484689580EE528E.roa
Signing time: Fri 29 May 2026 11:20:07 +0000
ROA not before: Fri 29 May 2026 11:20:06 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 13444
IP address blocks: 103.127.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 17:08:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4FB5, serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Validity
Not Before: May 29 11:20:06 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a197666-7238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:df:26:50:da:dc:fd:a5:ee:a7:2b:ce:fd:
6e:54:99:64:99:21:ff:90:5b:63:9a:de:77:9c:3b:
c2:a6:66:d9:df:3f:96:dd:fc:9a:6a:61:27:0b:2c:
68:9c:93:cc:aa:13:b8:88:92:26:f0:95:35:0a:70:
fd:ba:00:82:3e:7c:df:92:c6:f5:c9:c1:6b:51:8e:
8d:7c:01:71:98:da:37:24:bc:0c:b9:fc:89:0b:d5:
92:80:45:28:f2:39:16:75:5d:f4:42:a2:f6:5b:ac:
4e:db:e6:28:8c:ef:53:16:38:4a:1a:50:91:7c:65:
87:0f:85:0b:a8:e5:21:dd:0f:d2:47:6a:1c:b3:c7:
b1:fa:fd:9c:5d:08:02:90:33:04:79:e4:73:a7:b9:
c2:45:3d:a5:16:60:bd:28:44:d0:d3:fd:88:b9:42:
b7:f3:fc:71:80:e1:80:aa:bb:13:9e:d0:77:4c:ff:
dd:bc:1b:7b:d6:fa:99:7e:a4:08:c9:71:54:c4:b8:
d4:c6:13:89:c7:a9:a9:10:4a:c8:7c:21:b0:1b:5c:
33:20:b4:9a:d4:0a:92:86:b0:db:93:06:97:52:2c:
15:d4:5d:a0:2a:2c:e4:36:83:8f:d6:06:32:b7:a6:
cf:67:c0:b6:52:ec:a7:68:67:74:67:22:e0:44:7e:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:76:F5:BA:15:04:54:02:E5:B7:37:F3:35:C7:BF:E8:8B:74:81:09
X509v3 Authority Key Identifier:
keyid:91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/58722CCE5B5011F1A484689580EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.248.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:e6:a4:9b:64:87:c8:e1:8e:6c:8c:a0:a0:40:b8:4c:52:8f:
09:c1:2d:34:0f:a4:fa:97:3c:27:14:d2:b6:7e:3f:ca:c7:6a:
d8:0c:b5:2e:3a:bf:47:4a:74:e5:89:83:93:50:24:fb:36:c2:
d5:fc:fd:25:2a:7a:b5:9a:b0:fd:41:48:77:63:38:92:c8:e3:
4b:03:ed:a6:77:ac:6e:50:a2:a8:2f:a6:c5:8f:06:51:97:ca:
12:aa:55:ff:11:a4:6b:d8:33:7b:d9:f6:dc:42:f1:23:99:7d:
98:05:6e:1f:04:1a:37:5b:b1:2b:34:bb:dc:5f:c9:bb:79:6a:
10:ef:a4:48:c4:61:70:44:a9:3c:8c:18:92:18:77:23:d7:66:
3e:de:33:02:fc:aa:fd:3d:a2:9b:26:6b:ac:86:c9:45:b2:bd:
51:8b:10:3c:82:b4:19:da:c8:01:1b:ae:d6:aa:8b:7c:0c:17:
ea:a1:02:ab:6e:0e:0d:7c:84:04:d1:d8:bc:97:bf:55:c9:05:
b0:fb:2d:27:a6:5a:a0:a2:b9:6d:1b:7c:c2:68:a4:31:14:ad:
7e:33:71:36:a6:7a:1b:c5:48:ae:c5:c4:75:bf:2c:3c:96:c4:
13:5f:9c:a1:cd:e7:5e:bc:70:57:f1:6c:9e:2e:a4:99:0c:41:
ab:83:04:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:46 2026 by rpki-client