
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/EFD1F6445A6511F19C1DB69EB9833773.roa
File: EFD1F6445A6511F19C1DB69EB9833773.roa (raw, json)
Hash identifier: yYRrKeGHXQaQXZq0ZL84xFLEn1aUvp959mM/ggtnwuo=
Subject key identifier: 85:F9:54:C0:82:3C:4B:EF:E3:52:A0:58:F8:94:59:4A:29:00:AB:48
Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Certificate serial: 0156
Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/EFD1F6445A6511F19C1DB69EB9833773.roa
Signing time: Thu 28 May 2026 07:22:09 +0000
ROA not before: Thu 28 May 2026 07:22:09 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 134196
IP address blocks: 103.135.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:59:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Validity
Not Before: May 28 07:22:09 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a17ed21-4ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:08:fc:68:30:bb:c8:a7:0d:82:d4:dd:f1:55:
20:4c:21:3f:41:86:bf:e9:67:0f:1f:5a:56:d2:c0:
c0:bf:cc:7c:ec:ea:37:7f:79:63:cd:89:bd:19:f3:
53:9d:34:06:23:1a:c5:67:08:55:4e:88:7c:09:1d:
42:c0:73:a2:e1:c4:71:7b:c3:6a:e1:5a:1f:96:36:
d5:5f:34:95:43:8d:42:ec:a9:1a:5b:4b:07:c8:74:
14:ec:21:6b:bf:e6:ba:42:6a:3a:01:91:0c:e4:20:
be:d8:46:c0:fe:e3:a6:20:71:bb:02:30:ed:55:36:
3c:98:a0:be:9b:2a:d8:1c:26:d0:8e:8b:8d:26:7d:
65:23:3c:f1:71:3c:ff:f5:11:ef:2d:bb:b9:6c:df:
16:6e:d0:06:6c:cb:1a:f6:04:79:1e:9d:c5:61:d8:
a1:be:82:20:a0:3b:97:ff:2c:44:be:b4:61:9e:83:
cf:11:37:36:10:9c:11:f7:1a:52:9b:fd:36:18:93:
53:97:38:9d:37:61:2a:2f:bc:69:69:ef:b7:21:34:
df:36:5e:d4:ca:c3:51:0c:77:db:ef:61:d6:f1:f5:
32:e0:cd:ec:49:8b:da:f7:9f:3c:ff:79:f2:65:0c:
60:52:1f:5c:07:c0:be:db:13:72:d9:bb:1a:63:e8:
a7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F9:54:C0:82:3C:4B:EF:E3:52:A0:58:F8:94:59:4A:29:00:AB:48
X509v3 Authority Key Identifier:
keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/EFD1F6445A6511F19C1DB69EB9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:40:45:aa:e0:21:22:3d:2c:71:74:7a:13:1b:9b:fd:bf:e2:
b7:4f:fd:29:3d:93:ae:b4:ad:c5:fb:39:e9:07:13:ab:54:ff:
d7:75:b0:42:b5:b5:9f:a4:9f:c0:72:ff:ee:03:ec:b3:c9:21:
68:88:1f:15:1c:5e:d5:d5:c8:b7:f9:72:67:a3:dd:c3:5c:c6:
ce:1a:f5:da:c0:5e:a9:27:9b:63:e1:de:e0:8e:8d:97:08:48:
f1:3d:ba:0f:82:51:04:b7:dd:98:11:67:35:fe:2f:9a:d1:6a:
a4:b1:1f:7a:30:f6:6e:d0:61:f9:39:ad:f8:a3:a9:75:52:1f:
48:5d:ac:57:ad:4c:51:ee:bb:ab:b8:81:a3:ac:9f:98:f8:c0:
73:21:2f:65:8a:3b:28:60:d6:86:95:58:f4:de:7f:38:e9:f7:
f3:78:13:a2:44:03:ff:09:ce:96:20:28:b0:bf:9a:6e:5e:ae:
dd:a7:4c:a4:20:29:ad:aa:b4:71:75:d4:28:91:3b:5a:9a:ce:
6f:6c:6f:a2:02:d4:3a:4e:f2:9a:96:8c:b2:f0:0c:e4:3d:33:
70:ba:f1:77:46:46:21:3c:12:58:b5:6d:c6:4c:a2:68:51:89:
1f:d9:35:87:9f:1b:71:4a:a4:3e:14:d1:b1:48:6f:90:3a:35:
1c:d5:97:94
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU2QkExMTAvBgNVBAUTKEFFQ0ZBNDgyNTJEQ0I1NUM1RjFFQjM4MTI4OENFREMz
RTZGODYyNzQwHhcNMjYwNTI4MDcyMjA5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE3ZWQyMS00Y2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlAj8aDC7yKcNgtTd8VUgTCE/QYa/6WcPH1pW0sDAv8x87Oo3f3ljzYm9GfNT
nTQGIxrFZwhVToh8CR1CwHOi4cRxe8Nq4VofljbVXzSVQ41C7KkaW0sHyHQU7CFr
v+a6Qmo6AZEM5CC+2EbA/uOmIHG7AjDtVTY8mKC+myrYHCbQjouNJn1lIzzxcTz/
9RHvLbu5bN8WbtAGbMsa9gR5Hp3FYdihvoIgoDuX/yxEvrRhnoPPETc2EJwR9xpS
m/02GJNTlzidN2EqL7xpae+3ITTfNl7UysNRDHfb72HW8fUy4M3sSYva9588/3ny
ZQxgUh9cB8C+2xNy2bsaY+inLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIX5VMCC
PEvv41KgWPiUWUopAKtIMB8GA1UdIwQYMBaAFK7PpIJS3LVcXx6zgSiM7cPm+GJ0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQS8yNjQ1MjFEMjY5
MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RWeGZIck9CS0l6dHctYjRZ
blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JzLWtnbExjdFZ4ZkhyT0JLSXp0dy1iNFluUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzU2QkEvMjY0NTIxRDI2OTA1MTFFRkFEMjMwNDY0QzRGOUFFMDIvRUZEMUY2NDQ1
QTY1MTFGMTlDMURCNjlFQjk4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ4dwMA0GCSqGSIb3DQEBCwUAA4IBAQCPQEWq4CEiPSxxdHoTG5v9
v+K3T/0pPZOutK3F+znpBxOrVP/XdbBCtbWfpJ/Acv/uA+yzySFoiB8VHF7V1ci3
+XJno93DXMbOGvXawF6pJ5tj4d7gjo2XCEjxPboPglEEt92YEWc1/i+a0WqksR96
MPZu0GH5Oa34o6l1Uh9IXaxXrUxR7ruruIGjrJ+Y+MBzIS9lijsoYNaGlVj03n84
6ffzeBOiRAP/Cc6WICiwv5puXq7dp0ykICmtqrRxddQokTtams5vbG+iAtQ6TvKa
loyy8AzkPTNwuvF3RkYhPBJYtW3GTKJoUYkf2TWHnxtxSqQ+FNGxSG+QOjUc1ZeU
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:18:40 2026 by rpki-client