
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/EF65F3A8B62311F1A9DCAC3C5E11F970.roa
File: EF65F3A8B62311F1A9DCAC3C5E11F970.roa (raw, json)
Hash identifier: nSzU8Vv3wztSYNeyqnflstfGD/R1ZaNKAcQMOFMjR5w=
Subject key identifier: 73:4C:1B:F4:D5:0C:86:14:C8:3C:4A:61:EC:3B:2F:56:F6:16:0F:85
Certificate issuer: /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Certificate serial: 0138
Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/EF65F3A8B62311F1A9DCAC3C5E11F970.roa
Signing time: Tue 22 Sep 2026 01:21:28 +0000
ROA not before: Tue 22 Sep 2026 01:21:28 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 23470
IP address blocks: 163.61.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Validity
Not Before: Sep 22 01:21:28 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ab1d818-ddde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:dc:5a:59:dc:5d:71:13:06:a6:2e:35:f3:
73:f9:99:b7:bb:b2:b5:78:c5:d9:10:ed:30:a4:22:
18:69:c2:2b:bf:eb:4b:0f:35:e5:5f:65:ca:9f:6d:
b3:71:95:38:93:c1:93:03:16:fe:d2:a8:94:0c:c2:
59:4a:2b:b7:95:a1:db:98:37:97:e1:8b:f6:62:1d:
8e:72:85:29:dd:db:fd:02:68:5e:27:13:0d:c6:2a:
67:56:a9:6b:22:45:93:7b:50:57:58:62:a5:b1:9d:
99:2a:11:20:ec:ed:d8:1f:62:20:5c:2b:5d:cd:6c:
ca:11:f9:45:b7:a9:01:d3:a3:3a:5b:c5:f0:5a:fa:
7c:8f:84:91:65:ba:22:72:20:b9:7a:5a:f2:c4:5e:
cc:07:2b:49:fc:97:c5:f2:0c:8c:9a:29:83:8f:a3:
1e:ce:a5:54:f4:3f:e7:36:3b:7d:28:2f:6b:8a:fa:
fe:37:bb:ca:bc:98:74:55:68:8e:34:01:ea:c5:15:
58:1c:81:9a:11:b2:b6:dc:0a:3f:ef:d4:e6:16:19:
06:ea:b5:ea:f0:07:2e:36:be:47:40:8d:1b:dc:93:
31:87:33:73:18:f1:e3:a0:30:1c:a0:7b:43:6c:cb:
f2:b4:81:76:49:8b:34:bb:68:ae:86:00:03:18:5d:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4C:1B:F4:D5:0C:86:14:C8:3C:4A:61:EC:3B:2F:56:F6:16:0F:85
X509v3 Authority Key Identifier:
keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/EF65F3A8B62311F1A9DCAC3C5E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.237.0/24
Signature Algorithm: sha256WithRSAEncryption
10:6e:c2:0e:78:b2:f9:12:ca:b3:07:99:e6:4d:e7:4a:f2:1e:
9d:51:81:0c:1f:c0:c5:05:5f:68:a6:47:fd:12:ab:31:1e:62:
08:9c:45:20:15:fc:de:f8:57:f4:21:7f:f7:b3:3f:e6:22:ca:
3c:91:d0:25:55:f7:51:a9:15:48:bf:c2:2a:30:41:f9:b2:6f:
81:76:27:c4:e2:4e:6a:85:b8:ba:a3:9b:57:e2:44:f7:19:46:
53:18:4d:c3:b1:ae:e8:58:1c:b3:88:38:91:10:55:f0:95:c7:
4f:f5:33:6b:11:23:6f:0b:8e:17:23:73:79:49:1b:db:08:d1:
14:cf:08:3d:cb:cb:94:6f:11:7e:55:bd:41:24:b6:90:87:95:
4b:e8:c8:01:17:fc:27:35:ee:98:1f:14:c8:68:5e:3a:a9:b6:
0b:e4:4c:d4:6b:18:9a:13:8a:d2:d6:84:86:8b:2b:3e:7e:8e:
cd:d5:87:57:f4:de:62:6a:c2:05:40:f5:a7:f3:ff:fa:9d:5a:
42:c7:8e:a8:f4:0f:ce:f7:28:2e:a0:40:7e:49:67:6c:5d:8b:
39:85:83:87:e6:6e:bd:4b:c8:a0:af:2a:d9:e4:bd:d8:21:71:
ae:0a:d7:0a:90:a7:8d:b3:f7:67:bb:63:a1:4a:10:3c:dc:d8:
f1:94:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:12 2026 by rpki-client