
$ rpki-client -vvf rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/21884064C42111ED91F8CA85C4F9AE02.roa
File: 21884064C42111ED91F8CA85C4F9AE02.roa (raw, json)
Hash identifier: AxnVqCp/RhPTMLm2lR4QXo6EIhkF5hyiAtcRBsKCDM4=
Subject key identifier: AE:9E:67:42:E4:A8:DF:61:DC:2E:5F:74:80:67:D0:F4:06:6C:A4:13
Certificate issuer: /CN=A91975B6/serialNumber=E95FA0EDF1112E320C225E7B8D50418667A30ACF
Certificate serial: 0242
Authority key identifier: E9:5F:A0:ED:F1:11:2E:32:0C:22:5E:7B:8D:50:41:86:67:A3:0A:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V-g7fERLjIMIl57jVBBhmejCs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/21884064C42111ED91F8CA85C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:37:52 +0000
ROA not before: Fri 19 Sep 2025 03:40:21 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138914
IP address blocks: 103.236.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/6V-g7fERLjIMIl57jVBBhmejCs8.crl
rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/6V-g7fERLjIMIl57jVBBhmejCs8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V-g7fERLjIMIl57jVBBhmejCs8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975B6, serialNumber=E95FA0EDF1112E320C225E7B8D50418667A30ACF
Validity
Not Before: Sep 19 03:40:21 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a592b0-77e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:34:1c:f9:d8:f5:9a:fc:06:02:3c:51:da:7e:
33:74:a8:88:f5:80:02:b8:83:c9:2b:5b:21:89:bc:
f6:49:6f:56:4f:ba:a0:c2:5a:97:48:55:15:98:75:
6a:7b:80:ab:8d:42:f4:45:95:09:f4:1a:7c:d2:aa:
f1:13:c0:c4:ac:17:78:f9:76:28:63:50:9e:f5:05:
10:96:65:e6:72:e8:f4:71:39:63:bc:51:a5:ec:f0:
22:a6:90:0d:05:31:a6:bc:75:b1:67:6a:23:00:1b:
d1:d0:f4:f0:63:4e:30:31:14:dc:c8:db:92:13:df:
e9:de:43:91:91:c2:55:40:f8:4b:4d:69:ff:32:d1:
6a:ff:6d:3b:5a:52:ca:0e:e9:8b:5d:3a:08:57:50:
ce:6f:8c:28:f6:28:a3:6f:92:cb:8f:26:8d:cf:83:
57:39:68:69:30:32:28:a9:f7:ad:89:1e:66:4e:45:
2f:51:55:ca:14:ae:36:39:f5:9b:19:fd:de:a2:53:
c1:45:bd:72:fc:9b:ec:51:a4:00:a5:6f:1f:00:7d:
90:b4:54:f2:1f:ca:ef:de:52:d7:b9:0c:48:22:49:
4b:8e:f5:9b:89:6f:f8:3a:c1:06:95:b5:b7:26:4b:
e5:62:83:b6:38:8c:35:e1:55:34:ac:0d:b7:8f:45:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9E:67:42:E4:A8:DF:61:DC:2E:5F:74:80:67:D0:F4:06:6C:A4:13
X509v3 Authority Key Identifier:
keyid:E9:5F:A0:ED:F1:11:2E:32:0C:22:5E:7B:8D:50:41:86:67:A3:0A:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/6V-g7fERLjIMIl57jVBBhmejCs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V-g7fERLjIMIl57jVBBhmejCs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/21884064C42111ED91F8CA85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.236.132.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:ef:f6:93:84:e7:56:84:fd:51:52:66:5e:29:8d:0a:14:7d:
0f:29:43:c4:07:55:3f:cb:77:8d:6d:27:d5:a7:48:53:0f:79:
dc:d4:e0:d6:2c:83:dc:ca:15:60:84:38:e8:3e:f7:0a:c1:64:
0e:ee:13:7d:ff:d0:0e:4b:50:ff:82:8d:42:8c:5c:2d:10:10:
fb:31:11:6d:e6:bd:45:8a:11:bd:1e:92:89:5a:01:b3:3b:ef:
53:cf:70:12:9c:b8:2b:a2:64:f5:95:87:b5:1b:43:f7:a2:28:
51:da:bb:c0:df:e6:75:5e:55:0e:58:55:c1:71:5d:c6:19:67:
8a:db:d9:2e:3c:3d:9f:2c:7a:7c:7d:cf:6a:54:14:9a:8d:f3:
4b:c4:21:8b:9f:e1:4b:fe:f2:fa:2d:e4:cc:35:92:72:16:8e:
fc:a2:8d:11:29:1a:3e:f2:03:6c:99:85:4e:d8:db:38:26:22:
4b:0e:fd:e7:7d:c5:7c:76:19:50:1c:0f:7d:48:97:fc:08:33:
62:a0:11:80:8b:3e:49:4c:42:08:5d:e2:bb:98:b0:8b:82:11:
30:d9:22:8c:1a:c7:33:e0:cd:d6:14:d6:52:ab:71:53:78:51:
ea:8c:b0:46:45:69:d9:3f:fb:f9:99:c3:28:8e:28:44:3e:32:
77:25:ef:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:53 2026 by rpki-client