
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/2EF9180CCBD211F0B173C128C4F9AE02.roa
File: 2EF9180CCBD211F0B173C128C4F9AE02.roa (raw, json)
Hash identifier: 2k7Wq4CHpU8Bw8EpqXkLKI+dAtlRsC/snU2j4T/Ufjk=
Subject key identifier: 51:54:D4:C2:C1:1F:BE:1B:ED:29:B8:BE:BC:92:92:0D:7E:85:E9:D8
Certificate issuer: /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Certificate serial: 94
Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/2EF9180CCBD211F0B173C128C4F9AE02.roa
Signing time: Fri 07 Aug 2026 23:54:43 +0000
ROA not before: Fri 07 Aug 2026 23:54:43 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 10131
IP address blocks: 202.65.32.0/19 maxlen: 19
202.65.32.0/20 maxlen: 20
202.65.32.0/21 maxlen: 21
202.65.32.0/24 maxlen: 24
202.65.33.0/24 maxlen: 24
202.65.34.0/24 maxlen: 24
202.65.40.0/21 maxlen: 21
202.65.40.0/24 maxlen: 24
202.65.41.0/24 maxlen: 24
202.65.42.0/24 maxlen: 24
202.65.43.0/24 maxlen: 24
202.65.46.0/24 maxlen: 24
202.65.48.0/20 maxlen: 20
202.65.48.0/21 maxlen: 21
202.65.48.0/24 maxlen: 24
202.65.52.0/24 maxlen: 24
202.65.56.0/21 maxlen: 21
202.65.57.0/24 maxlen: 24
202.65.58.0/24 maxlen: 24
202.65.59.0/24 maxlen: 24
202.65.60.0/24 maxlen: 24
202.65.61.0/24 maxlen: 24
202.65.62.0/24 maxlen: 24
202.65.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Validity
Not Before: Aug 7 23:54:43 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a767042-9e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:25:ae:2b:77:71:16:01:07:04:2f:14:1f:
a9:b6:11:cd:b5:76:e2:9e:8b:2f:1b:e6:a6:64:00:
14:69:08:47:55:28:6c:81:a7:68:e6:16:8d:8d:66:
91:0e:cf:55:78:2d:cd:1c:c5:13:ad:84:a7:aa:11:
9b:7f:c5:6c:df:c5:10:68:4d:6f:c5:3d:9d:37:b3:
28:c3:b4:f7:12:ae:72:89:59:46:d2:e3:da:ba:da:
34:c4:d9:50:9b:be:22:9e:97:9e:e8:99:d9:22:20:
52:17:2f:77:1c:cf:34:28:9e:aa:62:54:2f:0c:9d:
9e:ff:97:c3:ed:f4:dd:51:94:d1:ab:bf:5e:f2:f4:
d0:80:6c:aa:77:d3:73:45:2c:08:2f:04:a2:0e:dd:
92:df:22:de:ac:bc:6c:0d:73:f3:76:00:54:76:29:
0a:45:7c:e0:82:72:51:48:50:47:38:44:f3:1b:24:
5d:d6:52:ec:ec:9a:84:1a:44:bb:5f:e3:9b:1a:e1:
b0:1f:9e:7d:e4:b0:88:05:90:c8:11:87:d0:91:47:
3b:53:b7:4f:36:04:4c:a7:34:50:55:dc:f3:1c:2b:
7a:a4:8a:4f:28:3a:c1:8f:f3:b6:79:45:47:ef:33:
d9:9f:65:ed:99:df:1e:11:b3:53:3c:10:25:9d:3f:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:54:D4:C2:C1:1F:BE:1B:ED:29:B8:BE:BC:92:92:0D:7E:85:E9:D8
X509v3 Authority Key Identifier:
keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/2EF9180CCBD211F0B173C128C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.65.32.0/19
Signature Algorithm: sha256WithRSAEncryption
05:f4:93:56:ff:7f:43:92:ae:56:4d:5b:dc:d7:68:09:f8:2a:
aa:3e:94:ff:8c:52:a2:c7:88:12:04:27:fb:94:bb:34:40:ec:
b0:8d:ac:37:aa:61:95:b8:9d:ac:e0:5c:d0:8a:bc:ba:25:f9:
37:2a:02:64:ad:be:49:21:1e:24:9e:64:36:dd:43:93:81:80:
05:95:6e:f3:a7:3f:2f:0f:d3:1a:f6:aa:5c:2a:e1:7d:24:88:
0f:81:73:bc:19:57:79:89:72:57:6b:44:4b:2a:9b:96:30:1a:
d8:b3:e9:74:7e:97:22:0f:78:1f:b7:13:f1:a6:79:53:2c:5a:
39:c7:53:0a:32:8e:8e:c6:d3:83:b6:b0:42:a3:f7:81:5e:c6:
75:e4:1c:72:48:69:60:e3:1e:97:90:dd:be:23:2c:e5:47:70:
a7:5c:d7:f5:7d:66:a0:1a:f3:46:b3:b6:8f:ed:2d:07:a9:6d:
42:77:e3:69:11:64:56:1f:b7:ea:4a:d0:af:6b:63:6f:b0:99:
13:c8:fc:ed:a1:b9:3f:7e:97:45:49:86:24:03:4f:1b:63:f1:
22:5d:d4:0f:ad:b4:19:2e:0a:01:fb:8e:ce:c5:a4:1d:94:5c:
7a:50:61:5d:92:99:25:85:ca:3d:7e:d0:e9:c9:c8:78:5e:f1:
f7:97:76:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:42:12 2026 by rpki-client