
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/DA0D812299DD11F1A687E2994011F970.roa
File: DA0D812299DD11F1A687E2994011F970.roa (raw, json)
Hash identifier: cqbbpaaJnrNP22rsDFsjbMqGdC/b8rWtCraBg5tgIBM=
Subject key identifier: 1E:8C:68:5D:C7:19:82:C6:BD:10:F2:E1:E1:E9:82:A8:E3:59:EC:42
Certificate issuer: /CN=A91D1C2E/serialNumber=40C855900EBEB4DDEE119C808E459AAFDF75B584
Certificate serial: 67
Authority key identifier: 40:C8:55:90:0E:BE:B4:DD:EE:11:9C:80:8E:45:9A:AF:DF:75:B5:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/DA0D812299DD11F1A687E2994011F970.roa
Signing time: Mon 17 Aug 2026 01:49:16 +0000
ROA not before: Mon 17 Aug 2026 01:49:16 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 133139
IP address blocks: 58.97.148.0/24 maxlen: 24
58.97.150.0/24 maxlen: 24
58.97.151.0/24 maxlen: 24
58.97.152.0/24 maxlen: 24
58.97.153.0/24 maxlen: 24
58.97.154.0/24 maxlen: 24
202.86.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.crl
rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1C2E, serialNumber=40C855900EBEB4DDEE119C808E459AAFDF75B584
Validity
Not Before: Aug 17 01:49:16 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a82689c-fd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:71:33:c3:e6:d8:4b:33:4e:58:ba:1f:fe:
ad:77:cc:83:51:7e:a2:87:8d:82:5e:5a:86:43:19:
5d:f4:0c:23:1e:dd:f4:e1:6b:a3:ef:44:68:59:c7:
29:15:c9:bd:7d:36:c7:88:7e:ca:3a:b1:b5:f5:cf:
6d:8c:c2:57:6b:32:be:ad:e9:01:61:d7:da:3a:90:
47:7c:c5:56:91:86:c9:88:66:3d:09:4c:d2:a7:ad:
76:50:85:ae:f8:ea:25:9d:12:8c:d1:73:7f:c3:10:
c4:e3:a1:4d:ca:a8:ec:1e:86:5a:d1:b6:f2:f0:5d:
d0:6d:c2:c9:60:2e:ea:00:d1:9b:e8:20:24:f3:66:
54:d8:06:8d:96:ce:c9:70:48:04:bf:b8:0f:a7:9d:
95:79:d7:bd:70:e2:8f:c6:63:61:9c:14:17:42:2c:
af:cd:e3:61:cf:88:70:af:8e:33:cc:1f:83:be:79:
45:cf:6b:41:29:e3:8d:c6:8e:11:95:92:eb:15:f1:
f1:72:4f:37:1e:11:05:27:b2:fd:5e:69:a3:bb:88:
3f:e8:e9:81:b7:fd:25:84:bc:fe:ad:5c:e1:c6:2c:
f5:7b:c7:82:e3:8c:23:53:67:0f:8d:c0:89:c7:99:
80:1d:28:9a:29:2c:8f:ec:62:ee:15:b0:c7:77:49:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8C:68:5D:C7:19:82:C6:BD:10:F2:E1:E1:E9:82:A8:E3:59:EC:42
X509v3 Authority Key Identifier:
keyid:40:C8:55:90:0E:BE:B4:DD:EE:11:9C:80:8E:45:9A:AF:DF:75:B5:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/DA0D812299DD11F1A687E2994011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
58.97.148.0/24
58.97.150.0-58.97.154.255
202.86.24.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:7e:62:7d:22:b5:66:1d:e7:b0:5b:7a:77:cb:b5:66:24:5f:
db:16:9e:d5:05:d8:4d:9d:85:74:e0:b3:0b:a7:48:9b:d9:aa:
f9:5f:4b:33:b0:04:74:a8:23:0b:a1:80:f5:90:1a:c7:26:73:
74:96:05:ea:da:74:4f:c8:ee:52:65:2d:55:68:66:8a:3f:a3:
73:75:45:b5:fc:be:0a:b9:0d:9c:e3:43:37:41:34:f6:fe:30:
07:b1:0e:60:77:61:6d:97:67:b3:bb:d8:dc:58:7e:fb:3d:5f:
9c:00:c4:62:99:f6:13:2d:b6:29:b0:4b:57:2b:57:0a:4e:95:
c8:b0:15:b8:7a:4f:d8:27:bb:5f:d8:75:71:6c:27:7f:bb:97:
a9:be:d0:2b:be:20:25:4f:94:52:f3:af:f7:2c:fe:45:f6:0d:
ed:47:3d:30:21:be:55:7b:d7:94:35:50:61:a6:f9:4b:35:c5:
6a:bb:95:0a:d3:1d:06:f7:82:44:bc:7e:b0:89:40:0e:18:4f:
2a:f5:ca:30:32:9d:55:af:a6:49:ad:a7:a9:c7:42:31:a2:25:
63:9c:3d:63:12:e1:1f:da:c5:37:bc:0c:9a:d8:73:08:7f:ec:
7e:73:df:bb:7c:96:6d:6a:0a:79:46:9e:80:22:5f:3d:e0:45:
d7:a6:5e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:09:23 2026 by rpki-client