
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F688FE388C5611E792848B4AC4F9AE02.roa
File: F688FE388C5611E792848B4AC4F9AE02.roa (raw, json)
Hash identifier: JLpjFQM8x6HCIL2rwRfohxKcFe1oyJ992vBWZ+ItaHQ=
Subject key identifier: CD:E9:8F:BF:97:F1:5D:9B:B9:34:68:B1:AE:97:E0:81:4F:B4:0D:81
Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial: 2870
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F688FE388C5611E792848B4AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:39:09 +0000
ROA not before: Tue 08 Apr 2025 15:53:50 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 46071
IP address blocks: 58.69.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10352 (0x2870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Validity
Not Before: Apr 8 15:53:50 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a487cd-a3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:25:34:66:1b:85:15:6e:13:b4:7b:a8:bd:
bc:c5:d4:9d:e4:5d:d6:de:35:95:9b:0e:f8:03:70:
85:41:8e:23:a6:53:3c:6f:3f:a4:37:c5:75:ff:4c:
0e:5a:52:ed:6d:c3:7d:a9:18:87:a6:1c:1d:2c:d4:
b7:cb:99:ba:bc:32:fb:22:b4:07:0b:70:ef:b9:ad:
11:90:73:b7:e0:97:9f:0f:01:d7:0f:96:90:ca:31:
da:d9:c8:8e:2f:ae:59:53:9c:26:ed:01:83:5f:a2:
98:a1:b8:b4:cb:cf:79:47:fa:95:fa:c3:0b:9b:89:
7c:94:07:9f:72:98:33:d8:8c:51:af:a9:42:fb:6e:
6e:fc:92:08:2b:9e:07:6c:a0:85:ab:ca:75:68:fe:
9b:1b:78:39:9e:df:f9:5f:df:42:b8:29:b9:33:6c:
0b:0e:1a:f6:c1:13:f4:77:88:79:c3:28:6e:5c:df:
b5:0e:71:1e:02:56:7f:1b:0a:9a:46:f9:27:51:60:
f1:8f:f8:e8:7e:de:9e:4b:ef:49:1c:8e:b1:34:bd:
8c:f6:e2:38:98:01:1c:00:6b:be:6e:8a:49:b7:5a:
ea:cb:2e:e5:6d:13:19:ef:aa:7b:61:29:af:6e:a4:
a8:f4:b9:28:e8:75:de:0f:56:c5:fa:25:d7:61:2b:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E9:8F:BF:97:F1:5D:9B:B9:34:68:B1:AE:97:E0:81:4F:B4:0D:81
X509v3 Authority Key Identifier:
keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F688FE388C5611E792848B4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.69.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e9:35:9f:da:2d:65:08:be:cf:7e:1f:66:7e:0b:f5:59:0b:
72:f3:58:2b:30:27:16:61:55:ae:6d:92:fb:5d:a5:e9:1f:4d:
97:63:4a:e3:6c:1c:49:e0:78:da:e6:40:0a:5b:d8:41:a9:1f:
1f:00:e7:4d:cd:cd:8a:8a:ed:77:66:b5:2c:82:86:12:c8:5c:
1a:47:8f:3f:27:c5:0b:5c:2c:34:9e:e4:7a:3f:f1:fd:05:b5:
a9:97:10:d5:9e:33:58:93:e4:8d:51:cd:8a:88:dd:ca:a4:24:
af:71:b2:4b:aa:68:e9:cb:a8:0a:43:a6:6e:0a:fb:43:b6:11:
31:a9:16:38:81:05:71:4f:0f:96:86:59:fb:d7:df:2c:df:e9:
be:c0:ee:04:9a:d2:f8:be:0a:cd:b9:1c:7c:1f:f1:1c:53:e1:
06:57:5d:f0:dd:62:b1:40:e8:fd:5f:c0:e9:97:77:a3:41:4a:
79:fb:3f:e6:e5:c1:a1:ad:c7:13:01:0d:a2:96:7c:a3:30:37:
3e:4d:61:fc:f0:94:16:f8:25:0a:93:38:bf:0f:d5:be:fd:d3:
e1:ec:9a:0e:5d:4a:26:d6:16:12:9c:99:bd:4d:d0:e2:99:13:
0f:aa:6f:f6:f3:ee:a6:de:ae:71:c8:fd:9a:ab:76:c7:80:4a:
d5:5b:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:24:20 2026 by rpki-client