
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/EF4B2E301CE411EB95E5A216C4F9AE02.roa
File: EF4B2E301CE411EB95E5A216C4F9AE02.roa (raw, json)
Hash identifier: 26lgAN5q1jBbqIZ//Uh2LoUZjyzoYehnxO9iBj1I6uw=
Subject key identifier: EB:7D:28:5B:E3:C9:14:58:1D:74:13:08:54:FE:49:4B:1B:A5:6A:72
Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Certificate serial: 0BA8
Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/EF4B2E301CE411EB95E5A216C4F9AE02.roa
Signing time: Wed 22 Jul 2026 20:20:10 +0000
ROA not before: Wed 22 Jul 2026 20:20:10 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 134974
IP address blocks: 110.92.25.0/24 maxlen: 24
110.92.26.0/24 maxlen: 24
110.92.27.0/24 maxlen: 24
110.92.31.0/24 maxlen: 24
202.61.64.0/24 maxlen: 24
202.61.65.0/24 maxlen: 24
202.61.66.0/24 maxlen: 24
202.61.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl
rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2984 (0xba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Validity
Not Before: Jul 22 20:20:10 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6125fa-538e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:2a:09:fb:66:a6:29:e3:27:6b:6c:13:92:
80:42:e9:65:f0:84:7d:c5:68:af:cf:d4:95:47:f4:
58:09:ff:c5:d1:8a:b2:28:fd:fe:58:06:ec:20:b8:
60:8b:d6:a9:4e:56:81:a4:0e:6e:07:30:0b:51:ed:
06:1d:e5:7e:9a:a3:23:72:6c:e5:cd:9b:20:59:39:
89:d7:f3:46:e0:ad:82:4c:66:46:52:01:8e:06:a4:
a3:94:8a:fc:f1:94:f6:1d:59:4e:9a:4e:f5:4b:ee:
98:85:20:07:37:11:27:6a:19:35:59:71:6a:ac:1c:
73:08:0c:7e:af:dd:16:95:c8:a9:d7:a9:ff:3b:1f:
e8:96:c6:11:51:f2:27:c5:0e:d8:4c:20:55:6d:a6:
e6:cf:43:a4:d0:2f:d8:33:47:62:52:7b:e7:bd:b1:
7f:32:78:47:48:e0:51:23:f1:67:61:82:8b:f1:93:
dd:1e:4e:17:af:a8:59:ef:08:fb:51:e9:a9:e5:1b:
73:b6:47:12:10:62:76:22:82:9d:67:ed:17:18:ed:
2a:d7:06:16:05:02:3e:2b:b7:86:f2:34:53:4b:49:
ed:c3:3d:ab:63:ec:65:22:3c:f3:ce:c6:db:81:28:
eb:50:98:3f:8b:5d:70:9e:b3:cc:86:6e:1e:d6:3b:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7D:28:5B:E3:C9:14:58:1D:74:13:08:54:FE:49:4B:1B:A5:6A:72
X509v3 Authority Key Identifier:
keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/EF4B2E301CE411EB95E5A216C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.92.25.0-110.92.27.255
110.92.31.0/24
202.61.64.0/22
Signature Algorithm: sha256WithRSAEncryption
18:bb:3b:95:c4:fa:de:4a:17:2f:8b:8b:91:91:99:45:cc:5a:
53:51:7b:bc:f2:ec:80:5f:f7:4d:0e:c9:ce:b6:e4:ab:51:64:
f7:5d:aa:5d:a7:78:cf:cb:37:97:bf:34:c1:6c:cf:6e:03:f7:
0a:86:83:e1:69:9f:29:72:3c:48:b4:86:e5:9f:b6:87:49:73:
6a:17:0c:d9:0b:7b:7b:86:57:68:7a:eb:06:96:d7:65:91:dc:
48:55:09:82:d7:14:31:2b:f0:f8:47:ba:ca:9a:06:a6:f3:ba:
50:40:63:34:05:03:90:69:71:4c:64:8f:db:bd:70:82:60:8a:
ec:42:a2:a5:bf:0f:ed:df:57:22:e8:d0:20:0b:b7:8b:56:5e:
c0:c7:8b:7a:44:c3:7a:2c:d2:fb:20:0c:12:a2:52:fd:a8:d2:
35:8c:21:18:17:9a:91:ca:f4:35:35:89:ec:0f:ff:40:6f:8c:
c4:95:ab:7d:81:92:14:26:48:4a:21:fe:00:91:cb:23:bb:bc:
c4:9e:66:4b:9b:df:f5:43:2e:c1:34:34:72:31:05:9b:68:76:
a2:a5:fc:30:c9:20:af:fb:47:9e:07:af:87:6c:f8:2f:68:24:
0d:aa:64:b8:bc:01:67:f7:9a:cc:15:05:37:6e:a3:58:04:c5:
0b:e4:2f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:44:24 2026 by rpki-client