
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E10B0/08DAA4F056A211F1B0440664AB833773/58F190B65BFC11F1B46C3FDBCB833773.roa
File: 58F190B65BFC11F1B46C3FDBCB833773.roa (raw, json)
Hash identifier: 2NiC9jYNXrk4f8ZttTw8jXVd3njJyFhYGP6I6uUK83A=
Subject key identifier: 64:E0:CF:BE:80:32:BB:59:07:08:7E:A5:7B:73:47:A2:76:57:9A:BF
Certificate issuer: /CN=A91E10B0/serialNumber=26F21295AF82D46657C1E529073FE17CFBAAFC80
Certificate serial: 09
Authority key identifier: 26:F2:12:95:AF:82:D4:66:57:C1:E5:29:07:3F:E1:7C:FB:AA:FC:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JvISla-C1GZXweUpBz_hfPuq_IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E10B0/08DAA4F056A211F1B0440664AB833773/58F190B65BFC11F1B46C3FDBCB833773.roa
Signing time: Sat 30 May 2026 07:51:21 +0000
ROA not before: Sat 30 May 2026 07:51:21 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 154692
IP address blocks: 2001:df7:1440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E10B0/08DAA4F056A211F1B0440664AB833773/JvISla-C1GZXweUpBz_hfPuq_IA.crl
rsync://rpki.apnic.net/member_repository/A91E10B0/08DAA4F056A211F1B0440664AB833773/JvISla-C1GZXweUpBz_hfPuq_IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JvISla-C1GZXweUpBz_hfPuq_IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 10:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E10B0, serialNumber=26F21295AF82D46657C1E529073FE17CFBAAFC80
Validity
Not Before: May 30 07:51:21 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a1a96f9-495b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:f1:9d:ce:77:35:ae:9c:e6:0f:92:fa:60:
38:e8:a2:b3:80:80:08:73:03:3f:9c:07:f1:a1:f4:
70:39:e1:6f:5d:d6:9d:b9:73:c3:6f:1f:cc:47:9c:
99:68:35:fe:95:3c:16:3e:3f:e8:65:1e:19:8d:d2:
56:d6:05:80:87:cd:1d:43:5d:5d:78:dc:05:f6:a1:
0b:9b:dd:4e:be:98:8f:48:66:5e:7a:1d:e8:56:8b:
0f:e3:fe:c6:42:cd:da:61:48:52:88:c5:58:89:36:
e2:bb:e9:c8:05:fc:a0:71:c7:d5:96:63:ba:88:42:
ce:0e:56:ad:87:f1:a7:f3:b6:94:bc:86:f2:5d:b2:
86:d4:74:b7:ca:c1:99:0a:53:43:58:a8:11:a3:f6:
0f:dc:07:bf:f6:cc:f2:86:0d:c2:f4:00:b6:bb:49:
fe:70:c5:fb:b2:67:a7:b7:5c:c6:7c:37:a0:fa:1e:
05:66:8c:38:38:5e:ef:d1:f4:3f:4d:f5:a7:80:ad:
95:8f:72:fe:6f:fb:d0:6c:62:23:77:04:d2:9a:96:
2a:58:58:d7:c8:0a:6d:c9:02:09:7d:56:7d:47:54:
28:78:ee:3e:fb:9f:e8:a8:f5:74:af:60:63:bf:0b:
c7:98:de:1f:21:c9:2e:a7:ff:f1:7a:18:cd:18:d5:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E0:CF:BE:80:32:BB:59:07:08:7E:A5:7B:73:47:A2:76:57:9A:BF
X509v3 Authority Key Identifier:
keyid:26:F2:12:95:AF:82:D4:66:57:C1:E5:29:07:3F:E1:7C:FB:AA:FC:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E10B0/08DAA4F056A211F1B0440664AB833773/JvISla-C1GZXweUpBz_hfPuq_IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JvISla-C1GZXweUpBz_hfPuq_IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E10B0/08DAA4F056A211F1B0440664AB833773/58F190B65BFC11F1B46C3FDBCB833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:1440::/48
Signature Algorithm: sha256WithRSAEncryption
53:a9:15:a6:f5:c6:cb:71:ae:01:0e:71:4c:c6:3c:ca:66:98:
8d:a1:a9:9f:fa:c6:73:92:9c:d0:34:26:e8:ee:f0:79:2c:ca:
e5:9b:e2:9c:81:77:0c:9d:8b:27:42:0e:f2:91:0d:09:d4:38:
aa:69:75:3c:43:49:cf:f6:8a:23:de:2d:4f:4c:5d:f7:a3:eb:
6d:ca:41:b9:f4:c6:a0:3a:1d:ad:76:8e:4c:21:52:af:e9:98:
63:81:41:3c:f4:78:39:c3:22:51:88:e2:c9:7e:e5:e2:21:5c:
8c:f1:5a:c4:6c:1b:e2:32:e0:e3:d8:82:92:cb:ec:4c:17:9c:
b1:c6:4e:e6:73:ae:d5:f5:91:09:81:bb:4c:a2:52:64:5c:6f:
dc:b2:5a:38:58:28:58:6f:73:46:11:db:f1:b0:3e:48:90:0e:
bd:8b:96:35:31:ad:a9:3c:04:9d:2e:00:2e:33:59:1f:99:d7:
09:fd:98:67:c2:8e:b2:27:50:14:fa:64:71:0b:9c:4c:b7:97:
2b:ed:6a:1d:38:8d:e4:c1:51:63:2d:21:87:51:29:a4:d1:f3:
3a:07:68:fa:b0:92:5d:0b:d4:69:d9:a7:36:5d:65:99:3a:ef:
ec:e2:fe:f7:72:2d:e8:32:b3:b5:01:c7:81:8d:50:2c:e8:15:
1f:5f:9d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:39:29 2026 by rpki-client