
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/EF15AC2A9EB611F09A08B07EC4F9AE02.roa
File: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (raw, json)
Hash identifier: B+Dy/j+kXETnaKbJEOrkqHVWzH2J3+s0YW/BU2w7Gvo=
Subject key identifier: 2A:9E:4B:01:4C:AB:05:28:F5:58:10:A1:83:7B:50:72:C1:2D:C6:8A
Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial: 0267
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/EF15AC2A9EB611F09A08B07EC4F9AE02.roa
Signing time: Thu 01 Oct 2026 03:51:31 +0000
ROA not before: Thu 01 Oct 2026 03:51:31 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 133605
IP address blocks: 103.253.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Validity
Not Before: Oct 1 03:51:31 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abdd8c3-e1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:6e:55:c3:60:8d:cf:ae:db:e2:8b:d5:54:
59:ab:70:c9:e9:a0:1c:a1:dd:f3:c7:86:9a:18:f2:
80:bd:06:f3:77:4e:c6:2a:a0:d7:61:18:b4:8d:ce:
0c:0d:84:1f:4c:dd:06:90:59:d1:d5:52:66:46:bb:
e2:d3:77:6b:e2:ba:1d:d4:e8:5c:39:14:43:ff:93:
25:9f:28:77:6f:6a:49:23:82:bd:c3:8e:26:3e:09:
c9:84:3c:bd:0f:cc:5f:f7:98:d7:1f:c2:91:a3:07:
cf:71:1f:3d:f0:71:e9:5c:b1:b8:98:0c:d7:b4:e1:
6b:93:7b:00:75:ec:83:7c:d1:cc:43:e7:e6:2c:e8:
e2:79:96:54:af:f7:dd:c4:be:c0:c4:39:a3:31:57:
e4:ce:2a:4d:bd:59:2e:03:97:b2:a7:83:e8:0c:8a:
84:db:33:8a:b6:d9:42:2b:6f:2d:99:0b:e1:00:6b:
27:eb:3a:ec:96:99:67:66:49:6a:27:ad:4d:9c:98:
12:b5:17:85:f3:81:3a:aa:dd:ed:e9:c3:0e:fc:2b:
b1:eb:28:bf:9d:0e:be:f2:e1:66:11:3b:1d:cd:b9:
ff:93:66:4e:ce:d7:1a:36:67:da:a8:e3:d1:f7:ac:
ba:0f:12:54:39:62:ff:82:0a:4d:7e:12:81:d1:ab:
ef:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9E:4B:01:4C:AB:05:28:F5:58:10:A1:83:7B:50:72:C1:2D:C6:8A
X509v3 Authority Key Identifier:
keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/EF15AC2A9EB611F09A08B07EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.253.177.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f2:05:d4:62:4d:2f:66:93:b7:5f:50:95:c9:ba:88:28:52:
6e:83:56:01:0c:ee:72:09:72:f9:8c:46:68:a9:47:1d:89:75:
f8:61:96:80:ce:06:68:87:fd:7b:67:63:2e:1a:5b:3d:44:0e:
23:c4:3f:b8:cf:1b:dc:7b:bf:e7:d9:f9:c5:43:fb:fc:f5:08:
25:1d:94:43:cb:20:d4:34:ce:2c:e8:69:65:83:e2:34:1d:d0:
fb:c1:b9:11:01:ca:6a:37:37:d7:e3:62:87:2e:6d:30:95:1e:
66:45:63:6f:47:b5:6d:ec:61:86:8a:24:41:63:9f:16:da:65:
7a:00:07:cd:7d:9d:3c:0c:ce:76:38:4d:d5:8a:42:23:80:73:
11:9b:58:46:ac:37:81:42:ee:5b:5a:42:f8:19:05:21:93:2e:
78:67:36:80:bb:46:ce:67:67:39:18:8a:f8:62:2a:54:bf:d1:
0a:3c:44:99:2e:95:76:ee:4d:e1:ab:9b:d0:f4:d4:53:16:26:
5f:1a:00:9d:de:59:fd:8e:03:d1:b6:fd:ff:9e:b5:ea:1c:9b:
23:c5:0f:0b:f6:5a:a5:4c:63:be:1d:ec:09:92:d9:bc:f7:7d:
ce:54:a5:29:34:a0:d2:e4:7a:12:56:c6:f4:f4:e5:1b:70:7f:
04:b6:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:54:05 2026 by rpki-client