
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/EF536DB8F29811F08FD07DA76E6F56BC.roa
File: EF536DB8F29811F08FD07DA76E6F56BC.roa (raw, json)
Hash identifier: gh5NDMFItruLQMVLqU8Ao5yuLPHXhly+AThb9ED3ptI=
Subject key identifier: BD:18:AD:27:A3:66:D6:1B:29:C0:65:F5:C8:88:0D:B4:54:8D:27:1B
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 6150
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/EF536DB8F29811F08FD07DA76E6F56BC.roa
Signing time: Sun 01 Mar 2026 18:39:32 +0000
ROA not before: Fri 16 Jan 2026 05:05:11 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 133929
IP address blocks: 118.143.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24912 (0x6150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Validity
Not Before: Jan 16 05:05:11 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a487e4-27c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:63:c6:6b:90:44:87:33:96:0a:c8:37:c6:
75:49:c1:15:0b:56:8f:ab:a5:59:f1:cc:90:fe:b8:
b4:34:c6:e0:08:c6:ae:ba:22:75:1c:99:e2:62:9f:
68:c6:1c:fb:ad:72:f9:71:34:ac:6c:d6:ab:8e:a2:
c6:c2:d2:0a:a2:fd:cb:7a:18:17:8a:a7:77:a2:6f:
6e:cb:13:84:e0:3b:62:24:0e:15:1d:36:81:42:39:
a4:e8:98:96:ae:e6:58:9a:c4:1c:2f:39:78:7f:29:
e3:a3:f3:96:7a:76:af:ef:bf:74:99:43:49:9a:b5:
1d:6f:c3:08:9f:a4:4b:87:de:6d:a1:f7:a5:7b:2a:
89:17:39:3f:56:ae:41:07:32:c3:ee:97:d5:89:8e:
b8:78:d7:52:84:1e:7f:d7:35:23:3c:1c:f4:48:fa:
e0:de:9c:24:f5:58:fa:ac:ca:53:f8:7b:fa:87:38:
e3:1a:ed:7a:ad:ee:12:45:5e:7b:9a:c3:97:78:b2:
4b:64:7a:ea:0a:33:cb:60:e5:fd:d5:1b:7e:e5:30:
a6:a6:97:e9:71:da:f1:76:bf:e4:e1:ac:ec:40:56:
2d:d6:ad:ed:eb:a4:ba:60:87:2a:ef:0c:de:25:25:
73:67:41:b9:db:95:4e:44:7d:24:07:58:a2:b5:e3:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:18:AD:27:A3:66:D6:1B:29:C0:65:F5:C8:88:0D:B4:54:8D:27:1B
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/EF536DB8F29811F08FD07DA76E6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
118.143.36.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ad:6d:36:cc:8c:c6:ca:25:4d:77:65:ca:66:0a:c2:1e:ee:
e8:0b:7e:1c:a4:e0:48:0c:15:aa:8b:28:ff:43:96:8d:d9:17:
3e:0b:52:cf:12:b6:2e:1c:c6:62:9b:0b:26:ec:07:c7:6a:f1:
f4:35:0e:c6:31:a3:42:6c:a0:af:c9:fd:47:c3:f8:5b:4d:79:
d4:d5:65:5b:14:36:0b:c9:82:70:d6:1e:48:20:d3:c1:00:28:
35:ab:5d:3b:b1:76:36:20:2f:4e:ca:58:58:81:48:27:84:23:
5f:f2:85:9f:9e:e2:39:ac:ba:43:86:3d:60:28:aa:97:bb:cb:
1d:c1:4e:0f:cc:59:b3:8f:42:55:15:00:00:ce:b0:33:75:ba:
ef:66:24:14:d1:22:01:f0:2e:0a:49:ea:ba:9c:dc:58:f8:94:
d3:40:f7:90:d5:db:13:c8:2b:26:c2:f9:97:c3:7d:fd:ba:9c:
41:dd:11:4f:f2:84:49:e7:5d:f1:13:f5:51:9b:fc:87:ab:f2:
65:f5:13:6a:dc:9b:62:49:ec:96:1a:c9:e5:8e:8f:40:c4:e2:
1f:7d:ac:8a:4b:88:38:92:56:aa:53:99:07:f4:f2:d0:13:0a:
53:d8:22:79:7c:42:4b:9b:5b:06:5f:10:2c:30:ce:ee:37:cb:
ef:6a:c5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:05:23 2026 by rpki-client