
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/EF31C4CC87CE11EBAA016A4BC4F9AE02.roa
File: EF31C4CC87CE11EBAA016A4BC4F9AE02.roa (raw, json)
Hash identifier: zt/RIp/b9+LxmdX1XGsxRRSQ6QT8fvitn1XIZ8bsrjU=
Subject key identifier: 21:A7:7D:07:CC:EA:D3:4D:7F:51:DA:42:F0:33:24:9F:90:89:F3:D5
Certificate issuer: /CN=A91FCF7C/serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08
Certificate serial: 0704
Authority key identifier: EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/EF31C4CC87CE11EBAA016A4BC4F9AE02.roa
Signing time: Fri 24 Apr 2026 22:29:29 +0000
ROA not before: Fri 24 Apr 2026 22:29:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142003
IP address blocks: 103.164.92.0/23 maxlen: 23
103.164.92.0/24 maxlen: 24
103.164.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl
rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1796 (0x704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCF7C, serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08
Validity
Not Before: Apr 24 22:29:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ebeec9-2900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:ed:e5:78:8f:4c:44:49:2c:67:69:f8:5d:
3a:9a:fc:f9:0b:64:dd:73:16:44:39:23:34:3e:d3:
de:8e:41:cf:d3:a1:32:c8:9d:be:e0:8a:95:29:4c:
50:5d:65:f6:fb:7b:ef:30:b0:a3:93:00:f1:38:a5:
7a:0c:9b:b8:75:f5:dc:13:26:b6:69:dd:33:e0:e9:
2f:76:1c:38:80:c8:6f:ce:ce:99:4f:07:58:d8:9c:
92:bb:7d:07:a7:ef:b0:9a:9b:bc:69:19:0e:65:8d:
3a:a9:2a:84:e4:8e:34:62:50:a4:19:86:42:08:a7:
55:4f:48:61:16:1e:e4:5c:5e:85:dd:ec:40:d0:61:
f2:ea:d9:1f:39:7b:d8:bc:b4:65:1f:c9:f8:c4:09:
49:26:6d:98:0f:60:d7:e2:ba:23:16:ff:8d:e2:ea:
b4:82:9e:3c:2a:5b:c7:24:68:28:b7:79:96:ec:2a:
90:76:19:d5:45:02:37:0e:b4:58:5f:7d:14:13:44:
94:15:b8:f2:0f:7c:19:92:c6:68:ea:2a:7b:9a:2d:
be:f0:1d:65:48:3c:6e:40:97:61:bf:20:81:7c:1c:
be:6e:54:2a:ca:d4:89:f8:8e:63:94:92:81:52:97:
cb:d2:51:bd:cc:f9:79:ab:c3:11:8b:0b:38:ac:de:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A7:7D:07:CC:EA:D3:4D:7F:51:DA:42:F0:33:24:9F:90:89:F3:D5
X509v3 Authority Key Identifier:
keyid:EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/EF31C4CC87CE11EBAA016A4BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.164.92.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:78:28:14:49:75:dc:38:a6:8b:14:be:2c:81:10:65:da:86:
d5:28:6c:f6:b5:a3:0c:b1:dd:13:1a:2b:68:47:13:dc:93:68:
4c:66:1f:60:2f:44:4e:c2:0d:53:82:91:76:77:8f:9b:bf:13:
a5:41:cf:c5:13:6e:f9:43:02:68:db:e9:bc:96:66:30:29:cb:
32:a4:16:c6:07:c1:06:b1:7b:20:fd:66:c0:e6:3e:67:e2:21:
59:0f:a2:34:13:b1:99:e1:72:34:dd:d6:f8:84:57:49:b2:d2:
0c:88:56:b0:36:76:c6:0e:7f:ca:54:b6:59:2d:bf:ad:1a:f7:
c9:eb:81:57:9b:a0:9b:e7:4b:dd:6b:03:1f:3f:dc:fd:48:0f:
a7:83:e8:8d:5e:62:56:c5:62:f3:1d:df:bf:2f:1c:73:09:e3:
94:a8:fe:7e:63:a8:1b:5b:bf:a8:63:70:9f:d9:74:29:93:51:
b2:f0:90:c5:2e:0c:cd:f6:a8:41:c5:0d:6e:cd:08:bd:75:12:
69:99:4f:2d:30:ed:3c:44:91:74:33:45:38:7e:c2:88:b5:f4:
39:52:d6:6c:e4:7a:65:bc:c8:6b:42:a4:b2:e8:d1:25:c4:91:
02:dc:df:d8:54:ed:a9:47:5a:48:5f:41:f2:1e:3c:be:5a:9a:
8b:9c:5f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:03:46 2026 by rpki-client