
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/EF57F4D0646611EFA25D167EC4F9AE02.roa
File: EF57F4D0646611EFA25D167EC4F9AE02.roa (raw, json)
Hash identifier: 22vQJHagX3n+99VJvP2o2EmdPEE2JE2MyiD/2N9CUmg=
Subject key identifier: 37:16:4E:60:A9:27:3C:FB:36:46:D1:3F:63:C1:31:18:6C:71:25:D4
Certificate issuer: /CN=A91D0C18/serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98
Certificate serial: 0124
Authority key identifier: 7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/EF57F4D0646611EFA25D167EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:17:25 +0000
ROA not before: Fri 27 Jun 2025 06:30:56 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 142159
IP address blocks: 103.167.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl
rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C18, serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98
Validity
Not Before: Jun 27 06:30:56 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a5aa05-7b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:de:2f:ac:8a:e2:e2:75:aa:2c:85:65:ae:
08:a7:0c:cd:56:09:af:9c:75:90:45:12:17:27:ae:
b7:94:90:eb:eb:b3:31:8e:a3:e2:ce:18:ef:48:75:
92:6c:7d:e5:85:27:12:7a:2c:78:5e:42:b1:0a:62:
48:87:64:89:ae:3d:ab:ef:4e:26:d7:a7:43:af:26:
1f:5f:1e:a9:f6:21:c9:c8:fd:77:69:e4:06:50:99:
11:fd:7c:1c:ef:4b:8a:7b:1f:b0:2f:6a:0c:dd:d9:
4c:d1:63:9f:58:b8:29:5f:e5:d9:06:4a:8c:0e:61:
be:39:8a:cb:c9:0d:69:78:cd:1e:1d:b1:e3:0f:bf:
4d:5c:8f:a2:72:fc:5d:57:72:43:cf:42:aa:a2:6f:
c3:5a:b0:25:a4:0b:cc:23:14:af:35:04:ad:d2:1a:
89:93:c7:9b:24:dd:68:63:b3:8d:dd:c9:83:76:f5:
ed:b7:2e:06:9b:e7:80:9c:f0:1a:3d:cc:49:a2:b7:
64:3b:84:74:0f:74:6e:88:a3:3e:e4:6c:2d:03:2a:
9f:e5:28:2c:4c:fd:e9:38:5d:a4:04:cc:fa:e0:4c:
8d:69:e8:9c:18:15:54:d4:b6:cb:c1:e8:ff:23:d9:
48:be:bf:45:8e:73:b1:7b:23:8e:f8:0d:0f:a7:c8:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:16:4E:60:A9:27:3C:FB:36:46:D1:3F:63:C1:31:18:6C:71:25:D4
X509v3 Authority Key Identifier:
keyid:7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/EF57F4D0646611EFA25D167EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.21.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:85:52:14:a1:81:1c:23:88:ab:38:74:75:e7:f0:30:72:e1:
f5:82:35:79:df:ed:68:82:cd:c1:98:a5:83:2a:47:11:52:b2:
f4:a9:73:39:c7:d6:a7:e0:52:4d:ae:28:b8:97:7c:e9:3e:19:
fa:4d:dd:89:80:db:e1:ab:cc:03:91:fa:5f:83:f1:39:32:a8:
a2:76:23:7d:5e:4d:f8:2b:3d:15:05:a4:45:e4:69:0a:ba:29:
89:43:c3:f0:aa:87:3e:28:e0:3a:67:dd:d3:e6:50:de:4c:82:
bf:32:e0:ef:ff:4c:93:eb:0e:a0:a0:ab:65:58:38:b1:51:b6:
24:84:7e:ce:27:99:c8:fd:a2:6f:e3:a5:91:9d:0f:1f:e3:6e:
76:a6:af:52:43:15:ab:79:de:3e:21:a0:4b:bd:ce:9d:a0:ab:
7b:1c:17:32:98:1b:7c:af:9a:8c:70:c2:ce:e8:d0:ef:b1:5a:
9f:fe:da:58:64:64:3b:5f:cb:36:eb:5b:a4:06:2c:a3:6e:d1:
ab:a8:3b:f2:2c:ca:47:24:7f:b6:4d:58:c2:1f:81:7b:c5:0d:
40:fb:d6:f2:6a:fd:d3:5a:52:5d:b8:16:0e:d5:16:59:e7:fc:
e3:c5:02:ee:67:20:73:4a:59:f4:c8:b8:00:40:36:29:08:74:
d2:46:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:00:18 2026 by rpki-client