
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/B21979EE9CAF11ECBFF4AF64C4F9AE02.roa
File: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (raw, json)
Hash identifier: WVWNzExGWbC/850iQ3V7WKxm3eZchCkhjUcLXVIVAMw=
Subject key identifier: E1:9A:02:AE:CE:40:89:BD:38:51:31:1C:61:E7:05:D8:F4:14:1F:33
Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
Certificate serial: 06C5
Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/B21979EE9CAF11ECBFF4AF64C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:47:04 +0000
ROA not before: Thu 10 Apr 2025 23:03:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136275
IP address blocks: 103.165.162.0/23 maxlen: 24
2001:df6:6980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl
rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:58:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1733 (0x6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FEF3, serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
Validity
Not Before: Apr 10 23:03:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a40b18-668e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:f9:3e:a4:96:24:59:4c:4c:62:db:60:ad:
da:1e:df:05:de:f8:53:49:ce:aa:e6:8b:e8:72:20:
cc:36:78:26:ed:45:95:27:20:70:7d:8d:f7:d8:a6:
a1:da:4c:87:a6:ca:4c:bf:03:66:d3:93:8d:bc:7e:
90:80:70:a8:c3:0a:e3:cb:cd:cf:9c:79:49:69:eb:
41:39:35:70:85:22:82:38:e0:ff:4d:e1:80:0f:03:
8f:65:b7:ef:01:c0:1c:aa:56:54:1b:6e:e4:2c:3e:
49:38:9d:3c:2e:6d:aa:d1:38:ce:95:07:6a:ee:05:
f1:dc:ad:49:bd:eb:d1:99:02:2a:3f:98:54:ad:de:
eb:cc:d3:2f:50:2e:9c:27:46:57:da:42:57:ca:e2:
e7:88:2b:a6:37:e1:77:63:fa:28:c2:07:7c:0b:a9:
84:9a:6e:87:7f:c3:86:14:38:e5:cf:2a:1d:a9:b1:
46:88:34:99:3f:9d:9c:15:eb:74:20:a0:bd:71:a5:
42:a3:15:6e:6b:b8:56:0c:18:f0:f5:e8:b8:1b:1b:
54:22:56:a0:11:fc:35:e5:76:24:2a:8d:65:34:c0:
45:cf:5b:04:98:a6:e8:bc:b3:ef:bf:d2:31:3c:7f:
45:c7:d1:d2:83:59:e8:5b:0d:e9:5d:43:92:0f:fc:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9A:02:AE:CE:40:89:BD:38:51:31:1C:61:E7:05:D8:F4:14:1F:33
X509v3 Authority Key Identifier:
keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/B21979EE9CAF11ECBFF4AF64C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.165.162.0/23
IPv6:
2001:df6:6980::/48
Signature Algorithm: sha256WithRSAEncryption
48:8f:63:81:e4:2f:56:5c:a6:fe:bc:7b:5c:fd:e0:da:28:0f:
0a:df:22:0e:ec:6a:ea:4d:2c:d9:25:ac:4a:28:9b:50:5d:ee:
2c:fc:d0:6e:76:6c:d7:af:6b:0e:a2:eb:a8:f4:b0:11:f7:f3:
7b:01:c4:e4:3a:b6:1d:54:7f:48:07:2a:63:ff:78:2b:25:da:
2f:47:1b:b7:73:7f:c8:03:6e:13:7b:1d:d2:ef:76:cc:60:2c:
11:43:64:a6:43:59:93:ff:6a:57:89:c9:3f:d5:47:32:b9:72:
4e:58:3c:f3:45:5c:3e:01:dd:a2:4a:03:b3:61:60:47:45:34:
83:bd:61:04:f1:90:65:46:bc:91:b9:5c:40:b9:8b:ad:0b:86:
94:e5:00:9b:02:d2:08:62:c3:e4:c9:b2:89:e7:34:b1:c3:8f:
bd:1e:aa:5f:43:4a:cc:08:2a:0a:4f:93:6d:77:55:6c:4a:23:
5d:c3:bb:a1:73:a7:8b:20:f2:36:4d:9d:19:e1:75:cc:de:ba:
00:6e:1e:ab:c8:40:b2:e1:bb:3f:6e:28:0e:a7:19:52:87:bd:
70:ee:35:bd:44:c9:90:7b:68:6a:82:f2:ea:13:7a:de:8a:1e:
f1:87:1e:77:16:83:4d:81:8d:b7:4b:5c:d5:a3:0f:8c:8c:93:
df:d4:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:05 2026 by rpki-client