
$ rpki-client -vvf rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/EFED2132264C11F1BA49400EA1833773.roa
File: EFED2132264C11F1BA49400EA1833773.roa (raw, json)
Hash identifier: IHm6ka0JJFCAmNqKc7swMLutMt30cesKv/ExBV+fuNs=
Subject key identifier: BD:86:65:20:B5:4E:C7:36:4E:F5:C3:EF:71:24:05:E4:66:9F:21:51
Certificate issuer: /CN=A91812BE/serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Certificate serial: 02
Authority key identifier: 71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/EFED2132264C11F1BA49400EA1833773.roa
Signing time: Mon 23 Mar 2026 00:12:11 +0000
ROA not before: Mon 23 Mar 2026 00:12:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153640
IP address blocks: 163.128.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91812BE, serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Validity
Not Before: Mar 23 00:12:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69c0855b-0d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:90:5c:79:b3:c0:dc:0c:f0:6d:43:75:55:24:
40:2c:65:74:3a:26:0c:81:d5:c1:22:32:01:6c:cd:
cd:14:96:32:39:76:30:29:1d:ae:4e:1c:88:09:f8:
9d:5a:45:c8:df:0a:3e:7f:b7:dd:00:23:43:e4:8e:
66:50:0e:0c:d7:c1:41:e2:1b:81:98:03:e3:52:92:
c9:f9:80:b1:3d:86:71:d9:ba:72:f2:bf:46:78:1f:
92:46:c5:c8:0c:f1:24:e3:f9:03:63:5e:62:71:99:
ac:5d:e1:48:38:24:2b:ed:ad:a6:4e:88:5d:77:20:
d3:62:d0:70:b2:c9:f9:b4:80:38:8a:24:ec:e9:56:
e3:cb:36:4f:92:16:be:78:c9:4c:2d:19:e4:b4:71:
65:a2:7a:d3:af:68:52:d6:41:38:27:2c:ba:48:2c:
d6:cd:18:d0:43:66:ae:c9:1f:6b:aa:d7:03:45:f2:
6b:9f:44:bc:32:61:97:ad:63:82:1d:2f:c2:cd:2d:
3a:25:f6:91:3e:99:18:82:c0:8a:c6:82:5d:a8:f1:
2c:c4:84:46:6c:e5:c8:0f:0d:ec:df:4c:57:0d:09:
1a:1c:18:c8:45:54:e5:bf:35:84:67:36:60:ea:04:
de:a9:ab:f5:34:22:55:a1:df:0c:67:36:46:dd:20:
a5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:86:65:20:B5:4E:C7:36:4E:F5:C3:EF:71:24:05:E4:66:9F:21:51
X509v3 Authority Key Identifier:
keyid:71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/EFED2132264C11F1BA49400EA1833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.69.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b9:80:32:3a:9b:ae:0e:67:3e:c8:b9:9d:a5:90:48:8d:76:
28:0e:db:72:5a:56:d2:57:2c:ef:33:2c:8b:b3:22:46:a8:6f:
d2:71:70:4d:5d:ce:3b:c5:83:28:b3:40:35:8e:58:cc:4d:c6:
97:29:6a:a5:f2:41:40:7d:55:82:1d:12:2f:1a:72:32:c7:02:
52:e3:b7:df:a4:58:c2:3e:47:dc:66:af:2b:97:d6:17:22:db:
97:d8:58:e8:17:a6:78:0f:3f:db:bb:c0:58:56:2c:eb:e4:4d:
f9:76:eb:33:b0:27:45:71:f4:cf:74:f5:43:79:4a:ef:cd:27:
4a:a0:fc:3d:fe:fb:07:fe:8a:85:7b:4e:5b:f9:c5:79:1b:34:
8f:14:ad:0c:e4:e2:16:79:7c:bb:db:5f:95:e0:aa:25:88:7a:
74:54:8f:e8:9d:62:7b:51:67:81:09:8c:e6:ca:a3:de:66:ef:
c6:bb:1a:d1:47:ad:69:e3:93:c8:72:a1:24:0c:91:fc:c7:eb:
3d:bc:65:df:e3:20:18:9e:36:8f:f7:0f:3c:ef:16:e8:63:7a:
ec:33:73:7d:a8:60:f4:af:b3:6b:e9:3a:e3:ba:5a:79:78:19:
ce:0a:59:f9:ac:bc:9d:a4:01:c3:17:0c:d6:22:1c:bb:78:f5:
1d:24:75:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:39:41 2026 by rpki-client