
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa
File: 21151EF0A8C411EC8F560C42C4F9AE02.roa (raw, json)
Hash identifier: kbmYrfPVQZ55x1vp2bi+3Rgp3sQUvBWkWBU9ViJuE/k=
Subject key identifier: DF:61:D0:F8:47:8A:E4:AD:3A:40:AD:D3:55:82:71:97:73:40:5E:2D
Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F
Certificate serial: 112B
Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:16:29 +0000
ROA not before: Fri 28 Feb 2025 18:27:14 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 137385
IP address blocks: 103.132.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl
rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4395 (0x112b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AF0B, serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F
Validity
Not Before: Feb 28 18:27:14 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=69a42e1d-39da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:97:17:43:b9:fc:7d:f2:d5:ed:4d:3d:06:
fd:5d:98:66:ac:c6:15:f5:29:32:5a:b9:bd:6d:33:
fb:5a:74:15:ba:37:13:b2:d3:6a:23:a0:9a:18:d2:
0d:4e:65:58:63:f5:e9:52:c3:d8:48:f5:d2:3d:5a:
40:f4:71:6a:42:7b:20:b2:13:8f:3f:ab:da:91:e4:
a7:ab:a2:92:56:35:dc:9d:bf:ca:1b:76:2b:0a:4a:
bf:6f:1f:ed:80:8c:fd:a6:af:63:ff:cb:b8:32:e9:
55:e5:1b:36:bc:06:cd:87:34:d7:28:7b:2f:6c:91:
32:e5:f3:a7:1e:77:16:2b:86:00:36:47:19:dd:b8:
ec:ac:a8:b1:70:c6:96:b2:33:f5:e8:18:53:af:25:
94:f3:97:b0:69:eb:23:7f:b5:4f:08:3f:cf:a6:65:
53:6a:3d:a0:dc:5f:14:e5:3f:c2:ea:47:90:a6:70:
86:02:d2:86:65:8c:00:ad:91:87:ae:49:5b:97:5e:
8c:d7:ce:af:42:80:c2:08:a1:0e:10:09:01:e2:1c:
0e:37:79:27:9a:26:23:24:b8:d7:cd:3e:be:5e:b2:
37:90:77:ee:bd:b4:98:7f:01:9f:42:2b:ac:5a:0c:
0a:ac:96:63:de:47:bf:b0:e8:3b:0b:5c:d0:7d:db:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:61:D0:F8:47:8A:E4:AD:3A:40:AD:D3:55:82:71:97:73:40:5E:2D
X509v3 Authority Key Identifier:
keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.132.183.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0c:7a:31:c3:8c:be:ef:22:70:9f:c9:bd:61:d7:f9:05:1f:
df:88:39:c2:87:01:07:fa:88:a2:81:7f:72:39:fa:de:47:cd:
8b:3a:a7:93:22:19:38:b9:ec:cc:65:f0:c1:ff:4a:aa:6d:68:
f2:df:ca:bd:10:2a:be:26:e9:d8:78:39:b6:92:69:32:0b:dd:
83:68:82:de:30:75:e3:0b:87:43:ff:dc:92:99:1c:58:24:af:
ea:c2:a1:77:94:4d:50:81:b8:36:a7:b5:ab:03:5c:34:7b:ad:
34:e3:74:db:82:4e:07:1d:e7:04:e0:51:9d:e6:9d:71:f4:12:
4e:af:21:19:28:f0:02:5d:64:a7:77:36:dc:57:44:29:00:a0:
43:c1:3e:8e:a6:5c:c4:d5:2b:05:f0:bf:9e:f2:82:42:ec:69:
64:52:90:b4:31:b3:e2:c0:56:f4:60:c0:c2:83:c6:ef:5c:b2:
07:98:32:5a:55:26:f6:50:b0:d3:b0:25:b5:51:88:53:86:a2:
4c:c0:da:8b:24:14:33:15:74:72:72:b0:62:6a:4b:91:43:11:
21:71:20:13:95:5c:c8:e7:02:e3:24:1c:e9:36:f1:c6:96:78:
05:30:ea:5d:c6:97:a1:07:85:67:42:5a:4f:f0:2e:76:c2:98:
89:d9:88:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:18 2026 by rpki-client