
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EFBF37208C5611E792848B4AC4F9AE02.roa
File: EFBF37208C5611E792848B4AC4F9AE02.roa (raw, json)
Hash identifier: QMEMNFl/Jl1WfdjUzvj9WgadU2H5AGalIKmrTUa6R+g=
Subject key identifier: BD:4E:62:9B:66:34:3D:6A:E1:7D:92:6B:6D:44:1C:AA:83:95:BD:79
Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial: 2893
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EFBF37208C5611E792848B4AC4F9AE02.roa
Signing time: Tue 31 Mar 2026 16:19:33 +0000
ROA not before: Tue 31 Mar 2026 16:19:33 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 132803
IP address blocks: 122.55.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10387 (0x2893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Validity
Not Before: Mar 31 16:19:33 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cbf415-c3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:a8:43:70:db:fa:79:6f:45:ff:f0:75:18:
69:e6:c8:5e:ef:52:61:72:43:c0:44:f3:76:b2:5b:
52:0c:ab:7f:0b:26:01:3e:66:8b:33:63:eb:ce:e1:
9c:8c:03:c3:25:31:6a:1c:fa:6f:25:93:6c:75:d8:
6e:05:dd:4e:9c:ce:50:d4:50:f1:43:dc:84:f8:25:
02:05:f6:3f:d1:1b:9e:af:37:01:a5:6b:f3:3c:ba:
98:0c:03:cc:db:2e:95:5a:c7:2f:80:ee:ea:b8:e2:
c5:d3:3d:71:a9:f8:84:2f:f8:85:fb:9c:a9:91:24:
5e:c1:0f:b8:7c:da:1f:76:86:73:2f:13:a2:ce:a3:
ff:c7:37:ea:27:f2:22:fc:6d:d8:ba:fc:b2:9d:1a:
e6:75:f4:f9:dd:1c:1b:c6:28:6a:7d:f5:1c:9c:c8:
da:b6:1a:6e:9f:ee:ad:d0:94:e7:49:9c:d4:ed:5a:
91:1e:64:ca:33:24:e2:bb:1a:b4:ff:b4:03:77:c5:
6f:dc:7f:4e:3a:5a:ca:44:aa:50:2f:45:f5:f2:bd:
f9:0d:42:82:c1:47:2d:f8:4d:f8:0e:c1:af:bd:2d:
49:33:9b:04:07:ea:5e:43:ee:48:f1:87:c9:07:e5:
fd:fe:20:d6:b6:b2:c4:6e:5d:28:54:19:e1:7b:5e:
20:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4E:62:9B:66:34:3D:6A:E1:7D:92:6B:6D:44:1C:AA:83:95:BD:79
X509v3 Authority Key Identifier:
keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EFBF37208C5611E792848B4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.55.9.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:77:b4:91:eb:3f:1d:39:28:e8:98:3a:7c:07:58:9c:10:7e:
fb:53:dc:7c:bf:34:d7:f5:15:2e:1f:78:84:bf:86:17:ec:76:
74:6a:c6:db:da:19:e3:e0:31:0f:c0:ef:75:86:aa:51:b6:83:
45:90:fb:59:f0:80:fe:4e:df:58:d2:bf:c6:c7:6b:26:28:1d:
da:94:d0:b1:b4:45:62:ee:2b:4c:1c:21:cb:30:7e:73:91:ab:
9a:3f:04:99:41:92:3f:1e:ee:b7:20:e6:bb:16:97:a0:06:65:
98:cb:c6:45:15:74:4e:a3:1b:86:d7:44:29:62:fc:22:dd:5e:
77:82:ca:c4:55:27:9b:f4:44:4c:0b:3d:4d:1e:94:59:ed:bd:
72:d9:b9:37:aa:ce:9f:46:17:be:f3:7d:1c:02:49:ae:a7:20:
a9:52:43:7e:fd:a0:54:23:8f:f7:12:e9:41:cb:91:6a:ca:cb:
22:d0:b2:f8:b6:ac:d1:08:3e:f0:22:14:fb:89:3b:bc:4b:10:
78:ac:3c:95:7e:90:db:95:bd:2e:8e:24:2a:73:3e:c1:20:b6:
8b:8c:85:8e:83:36:07:b8:a9:90:44:a5:8a:e0:07:97:ee:dd:
da:3f:52:7a:70:c8:3d:9b:09:79:52:1f:1a:92:3e:c4:ac:fd:
1f:3c:54:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:56:43 2026 by rpki-client