
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/EF6D9D70EBB511ECA410BF6DC4F9AE02.roa
File: EF6D9D70EBB511ECA410BF6DC4F9AE02.roa (raw, json)
Hash identifier: 8BhnI271pXtssKyoUU3+BWjfHdoZbJ1UUEIVs2VtNjY=
Subject key identifier: 6B:CD:E9:18:D0:75:0E:35:D5:A6:F8:60:B3:A2:3D:21:7E:5D:43:95
Certificate issuer: /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Certificate serial: 038C
Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/EF6D9D70EBB511ECA410BF6DC4F9AE02.roa
Signing time: Tue 21 Apr 2026 01:33:23 +0000
ROA not before: Tue 21 Apr 2026 01:33:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132554
IP address blocks: 103.113.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 908 (0x38c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Validity
Not Before: Apr 21 01:33:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e6d3e3-dfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4f:84:bf:65:69:2a:8c:2f:3c:96:e5:b1:65:
32:6e:39:42:a1:b0:01:68:01:57:5b:05:04:22:1e:
dd:eb:d4:6a:9b:1b:94:2a:c5:be:e5:4c:65:c5:70:
36:a6:34:6c:bd:4f:78:95:6b:3e:50:ac:47:9c:b7:
63:f6:e8:b7:fe:35:4f:c6:85:2a:18:07:47:e8:45:
69:f6:e3:50:2b:c2:da:29:98:f1:12:86:f2:ec:43:
e4:5e:ad:34:97:19:74:b6:86:1d:96:c2:bb:d0:ee:
ea:a3:f2:2a:d7:1a:13:d5:5d:18:1c:6f:33:98:d8:
a9:01:a6:1a:12:4c:17:3c:07:d2:d0:c3:23:3a:43:
89:8a:2a:65:0c:a0:73:aa:7a:d7:6c:37:2c:2e:f4:
d7:37:ba:da:f2:6c:8e:68:51:6a:1f:d6:d0:c2:a3:
58:64:aa:b6:8f:f4:ac:f0:e3:6a:de:02:86:61:f4:
84:66:f0:84:de:45:1c:25:84:99:b3:7d:05:9f:29:
27:88:d6:e2:a3:f7:c7:80:5a:a8:89:fb:ab:08:26:
0a:69:86:c2:da:75:24:a5:98:c9:89:2d:90:2d:30:
bc:85:ce:75:e8:8c:02:e2:f4:99:78:9c:7e:6c:10:
e7:b5:ba:e8:26:b6:e5:55:aa:0a:ee:e8:1c:15:7d:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CD:E9:18:D0:75:0E:35:D5:A6:F8:60:B3:A2:3D:21:7E:5D:43:95
X509v3 Authority Key Identifier:
keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/EF6D9D70EBB511ECA410BF6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.183.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:36:48:9c:3f:c6:3a:f8:1e:c2:72:8c:78:98:db:a8:9c:73:
77:d1:82:e4:3b:d0:54:f6:a9:37:a3:22:3e:a3:c8:26:0b:4f:
f5:2b:b7:a8:7b:ed:4c:77:35:57:f6:69:72:c7:33:eb:60:ba:
f3:45:e4:94:4c:8d:f8:e5:7b:73:56:6e:fc:bc:ed:be:dd:3b:
4c:91:ac:f7:1d:0f:f2:b4:25:b5:46:8d:83:5c:91:26:ec:67:
94:e2:58:22:c3:38:81:b3:8a:fa:8a:68:63:6d:ef:10:7b:f1:
d9:fa:8d:f4:9d:86:28:6f:55:05:5a:5a:a2:3f:b5:ff:88:50:
16:99:ca:38:84:d3:e2:8a:f6:2c:d5:af:8c:32:59:11:cf:89:
8c:92:ad:ce:69:30:3f:f5:35:88:2d:c0:66:e9:fc:d2:c0:bf:
ce:05:aa:5c:56:3e:5d:81:5b:15:be:9b:43:9a:52:07:1d:30:
aa:f9:f1:f7:11:4e:d3:6d:2e:63:44:da:cb:3b:55:af:86:d5:
5f:7f:5f:ad:90:29:ef:5c:b5:27:33:79:ed:55:8c:db:43:5a:
d5:f4:4d:33:37:7d:ba:3e:39:58:4b:89:08:56:e2:04:5a:56:
bf:a3:a2:58:d0:43:e6:a4:b6:f9:a1:08:80:96:28:ad:76:70:
7a:5b:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:04 2026 by rpki-client