
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa
File: EF2F0372C9F211E986C3B486C4F9AE02.roa (raw, json)
Hash identifier: OwaX0UG7/hJcFPCKxkwtoBgH6ACvrE1k7J8ZbYuydvo=
Subject key identifier: BD:0D:5B:E8:9F:25:F5:B5:23:8C:7C:07:56:6C:FE:AB:CF:30:36:CD
Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial: 1EDA
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa
Signing time: Mon 27 Jul 2026 22:46:16 +0000
ROA not before: Mon 27 Jul 2026 22:46:16 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 63989
IP address blocks: 103.58.148.0/24 maxlen: 24
103.58.149.0/24 maxlen: 24
103.58.150.0/24 maxlen: 24
103.58.151.0/24 maxlen: 24
202.9.89.0/24 maxlen: 24
202.9.90.0/24 maxlen: 24
202.94.166.0/24 maxlen: 24
2402:6880:1000::/48 maxlen: 48
2402:6880:2000::/48 maxlen: 48
2402:6880:3000::/48 maxlen: 48
2402:6880:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7898 (0x1eda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Validity
Not Before: Jul 27 22:46:16 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a67dfb8-769e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:49:6c:d1:42:55:4f:cf:50:a0:2b:4c:61:
ef:8a:b3:29:1c:91:d1:34:a8:c2:ca:66:3f:b3:d8:
14:f4:2f:95:2f:e5:72:ec:d0:e6:75:c0:41:fe:5d:
aa:1d:75:fa:9c:47:4b:c6:f8:8e:fe:d6:7c:f4:2d:
60:1e:ec:bd:1f:17:4e:11:12:66:a4:1e:eb:cb:26:
51:e9:6c:77:84:9c:32:a7:df:fa:0c:29:8f:24:fc:
cf:b6:95:a6:6c:21:34:b2:a1:4e:45:e5:50:21:5a:
b3:e6:0c:39:5a:dc:3d:82:c6:5e:51:89:e5:d9:f0:
c8:35:e5:a2:70:68:06:1e:97:bf:2b:0c:7e:7d:ad:
5e:cc:f1:61:e6:5a:e7:50:6a:25:e8:8b:6e:2f:3d:
72:dd:a7:95:36:e1:2a:61:2e:41:1e:b3:70:5c:b6:
b9:40:4b:a0:33:59:23:9d:b6:59:05:22:5f:60:61:
5c:17:9c:b3:dd:ba:e0:b5:9f:05:35:19:1d:a2:ca:
24:8d:d6:ae:0f:5f:09:3b:a6:fe:b5:bc:d9:23:7b:
4c:a2:bf:31:c3:7a:ff:a4:c1:7a:4d:c1:f0:79:50:
e5:21:cb:2a:60:b0:5c:a5:2b:a7:b2:97:e2:42:c4:
5e:6b:86:64:f9:22:6f:95:61:00:37:62:bf:c9:ea:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0D:5B:E8:9F:25:F5:B5:23:8C:7C:07:56:6C:FE:AB:CF:30:36:CD
X509v3 Authority Key Identifier:
keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.58.148.0/22
202.9.89.0-202.9.90.255
202.94.166.0/24
IPv6:
2402:6880:1000::/48
2402:6880:2000::/48
2402:6880:3000::/48
2402:6880:4000::/48
Signature Algorithm: sha256WithRSAEncryption
76:61:f6:8c:75:57:af:01:77:06:93:aa:a4:b2:c6:31:06:45:
aa:28:be:79:46:5f:2c:0b:6f:8e:9d:6a:b4:bb:d9:9f:45:b9:
77:2a:66:5b:82:35:b2:e4:c5:62:e3:f2:c1:4e:0e:d9:40:ff:
e2:1d:61:b8:f9:c6:43:ed:ff:ee:11:b6:59:bf:ed:5a:76:34:
a8:bd:16:37:73:7e:f4:65:be:3e:b2:64:f4:aa:0a:30:9c:f4:
33:ca:ae:02:ca:89:71:13:a5:2b:05:d3:23:33:3d:46:3c:1c:
94:09:26:05:e1:5d:ef:49:15:b0:a5:e9:fa:8a:78:35:36:b7:
2a:c5:b2:b3:a3:28:82:42:6e:22:07:7f:57:19:62:2c:d8:5e:
58:8d:9f:57:d4:70:70:95:1e:d3:e9:b8:f7:3f:29:0a:04:ae:
31:45:cf:83:95:1d:2a:12:33:a2:8c:79:7d:fb:cd:54:bd:5c:
1a:76:a7:48:ee:05:5c:32:7a:21:fd:61:05:f3:da:2d:2b:94:
a9:0d:fd:17:18:66:45:e4:e5:f7:e4:70:9a:e5:9b:e1:d6:6d:
20:cb:33:46:82:bb:f9:a3:8e:fa:c8:80:62:79:8a:90:23:f4:
e0:88:62:3e:6c:1a:11:e3:f4:fa:ac:02:f4:cc:c4:1e:4c:b2:
1e:32:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:24:10 2026 by rpki-client