
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/21C5B04263A311F096468248C4F9AE02.roa
File: 21C5B04263A311F096468248C4F9AE02.roa (raw, json)
Hash identifier: EsPSnLTOkuXRSGQKefe1p2f6RMEUDwMDeK+ind9kj7c=
Subject key identifier: 08:27:73:50:97:E8:4B:A0:8C:25:19:09:E5:9A:D7:48:AD:FD:3C:C5
Certificate issuer: /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Certificate serial: 7A
Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/21C5B04263A311F096468248C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:12:34 +0000
ROA not before: Fri 18 Jul 2025 06:47:55 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 154019
IP address blocks: 165.101.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:08:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Validity
Not Before: Jul 18 06:47:55 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3f4f2-a795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:0c:aa:e6:8b:cc:b7:3c:53:1a:02:22:d0:
fa:ae:24:0a:15:97:2e:7c:d8:cd:8f:98:0d:b3:98:
8f:02:00:d4:f8:de:bb:f8:b0:76:0d:85:e5:ce:ce:
14:f5:6e:62:ec:99:3d:67:4e:1b:63:77:d4:2f:b4:
91:d9:66:af:14:cf:d0:1d:03:9d:eb:0e:1d:bf:80:
a1:71:83:06:9e:5a:e2:f7:4f:85:87:b8:4c:b9:64:
a0:25:e1:0e:3c:37:18:d3:15:ff:9e:b4:c0:19:c3:
2e:35:79:57:27:05:e5:7e:bc:6e:6d:3f:b6:aa:9e:
e8:da:97:64:f9:5a:22:8a:a6:68:a2:28:f4:26:70:
5a:30:fa:e3:ea:8b:49:df:b3:e0:06:e0:24:7c:5e:
22:4f:ad:f2:24:f0:b3:69:41:8b:f0:69:5c:2d:7f:
31:e4:66:88:20:90:22:1f:f9:1e:b9:19:fd:c0:86:
d9:c9:d0:e5:3c:6b:4c:b5:23:e0:fa:ca:9f:b9:7c:
23:62:97:a4:d6:8c:ff:94:52:0d:e0:09:e0:d9:ae:
78:75:8c:33:1b:1d:8e:68:7a:58:57:d4:e7:c5:c4:
e2:35:63:a5:01:6c:c5:9d:2a:7f:f7:e0:92:44:b5:
95:a6:0f:e1:fc:e2:3a:5e:88:84:c6:86:18:7a:b9:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:27:73:50:97:E8:4B:A0:8C:25:19:09:E5:9A:D7:48:AD:FD:3C:C5
X509v3 Authority Key Identifier:
keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/21C5B04263A311F096468248C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.107.0/24
Signature Algorithm: sha256WithRSAEncryption
74:db:60:51:43:74:6c:29:ec:da:74:f6:53:fe:4d:65:9c:31:
db:a4:50:71:60:39:a8:8e:56:66:7a:de:4d:e8:f6:cc:a3:10:
df:d1:b5:c1:26:74:a9:f9:4e:58:a2:40:10:5e:c4:d3:cd:82:
e0:38:63:39:80:b1:9f:ba:2f:81:6d:62:71:2f:f3:13:c4:c3:
a7:00:ce:e4:be:39:db:b8:51:c8:6a:1f:3b:3e:4d:06:b3:b4:
ca:34:dd:61:7c:e8:58:f7:df:32:67:1f:72:d9:3c:80:27:34:
fb:38:eb:c3:ed:72:fb:b6:ae:92:a1:d3:d0:70:e8:99:4d:11:
86:a9:2e:b2:f4:4b:66:53:8b:3a:65:67:47:a9:34:04:36:01:
21:64:65:8b:32:8d:ec:52:41:54:fb:f0:9c:47:54:b8:72:94:
d9:0e:d5:d5:eb:00:83:88:ec:08:f9:17:ad:3f:86:8a:59:28:
54:cb:a2:c7:45:35:1b:9c:94:d7:89:50:c7:21:a8:68:cf:9c:
0e:56:72:4f:68:0d:31:dc:e3:71:00:d6:4f:c9:93:7d:f6:cc:
2e:7d:97:56:ba:a5:0c:b3:07:f0:9d:a6:64:62:65:30:38:50:
59:4b:63:5d:7f:08:8e:28:18:78:f2:31:fe:dd:99:e2:69:6e:
52:29:1e:aa
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
OTMwOTExMC8GA1UEBRMoN0Q4RkEwQkVGNkFFRjcxQkRGODgzODU4RjczNjE5RDNC
NTlFMjc3NzAeFw0yNTA3MTgwNjQ3NTVaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNmNGYyLWE3OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDD8Ayq5ovMtzxTGgIi0PquJAoVly582M2PmA2zmI8CANT43rv4sHYNheXOzhT1
bmLsmT1nThtjd9QvtJHZZq8Uz9AdA53rDh2/gKFxgwaeWuL3T4WHuEy5ZKAl4Q48
NxjTFf+etMAZwy41eVcnBeV+vG5tP7aqnujal2T5WiKKpmiiKPQmcFow+uPqi0nf
s+AG4CR8XiJPrfIk8LNpQYvwaVwtfzHkZoggkCIf+R65Gf3AhtnJ0OU8a0y1I+D6
yp+5fCNil6TWjP+UUg3gCeDZrnh1jDMbHY5oelhX1OfFxOI1Y6UBbMWdKn/34JJE
tZWmD+H84jpeiITGhhh6ubFHAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUCCdzUJfo
S6CMJRkJ5ZrXSK39PMUwHwYDVR0jBBgwFoAUfY+gvvau9xvfiDhY9zYZ07WeJ3cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5MzA5Lzk4OTFFOTJFNjEz
RDExRjBCMDM2QjgzNkM0RjlBRTAyL2ZZLWd2dmF1OXh2ZmlEaFk5ellaMDdXZUoz
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZlktZ3Z2YXU5eHZmaURoWTl6WVowN1dlSjNjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTMwOS85ODkxRTkyRTYxM0QxMUYwQjAzNkI4MzZDNEY5QUUwMi8yMUM1QjA0MjYz
QTMxMUYwOTY0NjgyNDhDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAClZWswDQYJKoZIhvcNAQELBQADggEBAHTbYFFDdGwp7Np09lP+TWWc
MdukUHFgOaiOVmZ63k3o9syjEN/RtcEmdKn5TliiQBBexNPNguA4YzmAsZ+6L4Ft
YnEv8xPEw6cAzuS+Odu4UchqHzs+TQaztMo03WF86Fj33zJnH3LZPIAnNPs468Pt
cvu2rpKh09Bw6JlNEYapLrL0S2ZTizplZ0epNAQ2ASFkZYsyjexSQVT78JxHVLhy
lNkO1dXrAIOI7Aj5F60/hopZKFTLosdFNRuclNeJUMchqGjPnA5Wck9oDTHc43EA
1k/Jk332zC59l1a6pQyzB/CdpmRiZTA4UFlLY11/CI4oGHjyMf7dmeJpblIpHqo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:48:52 2026 by rpki-client