
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/A21F0938C44B11EB8CF88F1EC4F9AE02.roa
File: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (raw, json)
Hash identifier: NAdkxGEriD41T4r2Hs9G1ZaoxJyebhWdoS8t42aFjpU=
Subject key identifier: 59:2D:74:13:F9:F3:23:F7:E9:B4:49:D1:35:CB:08:60:6E:10:1A:B1
Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Certificate serial: 0983
Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/A21F0938C44B11EB8CF88F1EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:03:17 +0000
ROA not before: Wed 30 Jul 2025 21:01:19 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 142294
IP address blocks: 103.151.184.0/24 maxlen: 24
103.151.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2435 (0x983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Validity
Not Before: Jul 30 21:01:19 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a44725-c6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:b6:8e:30:0a:99:9a:92:59:26:d0:8a:ae:
af:45:62:a0:67:39:96:b0:c2:74:3b:82:b6:fd:6e:
3d:da:fb:2d:95:e8:9d:02:20:19:44:09:72:75:9a:
cc:73:31:00:5c:54:f0:a4:df:f7:2a:96:3b:2d:e8:
44:b4:97:c7:07:ac:1e:9d:69:59:1d:19:3f:7a:cd:
1d:45:54:df:b9:e6:fc:ba:6d:ac:f0:bc:ee:61:8c:
28:94:a5:f7:ce:04:03:df:33:32:b7:8a:0b:8f:47:
18:be:a7:82:f8:dc:cf:93:ee:79:f5:b4:f7:e9:31:
b5:6e:d9:ec:1a:9d:7b:04:dc:8c:b4:51:f8:eb:ee:
83:b9:91:72:76:da:53:7e:93:36:8d:a6:9c:70:51:
7f:9c:30:6a:85:35:84:1b:b1:d6:18:cb:19:ef:8c:
ab:da:16:bf:33:11:f4:00:0f:58:22:74:3e:03:63:
79:5a:15:cc:86:c4:02:d4:39:e5:9a:72:83:bd:30:
cf:d5:2d:47:77:47:5e:c0:ed:3a:2a:3f:38:e7:a3:
ff:4d:69:54:50:da:c1:82:4f:d0:82:ab:cb:b7:76:
ec:9c:a6:0a:cd:f6:f2:c3:3b:08:96:ff:1a:5f:79:
e3:21:d5:a7:15:74:b1:5d:64:fe:1e:32:a9:e3:f8:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2D:74:13:F9:F3:23:F7:E9:B4:49:D1:35:CB:08:60:6E:10:1A:B1
X509v3 Authority Key Identifier:
keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/A21F0938C44B11EB8CF88F1EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.184.0/23
Signature Algorithm: sha256WithRSAEncryption
36:bd:a6:ab:18:70:ec:20:a6:58:3f:ff:1e:85:8d:8f:ff:4f:
ca:8a:b9:4e:c3:89:17:f9:8b:23:81:30:a2:d9:f8:af:06:91:
d8:d7:eb:e5:51:a8:68:a8:86:0c:f2:8b:d6:bd:ee:3e:c9:4e:
6d:88:24:32:95:9f:ac:24:9c:69:f3:c5:29:5f:d2:b8:a1:5c:
02:ee:b2:df:b5:59:fc:d7:a3:a8:5f:c9:d2:ec:44:13:dd:d2:
c7:ac:66:ce:aa:f1:95:44:4b:cd:03:b5:85:6b:d0:47:76:cb:
32:43:cb:6f:c2:25:22:cf:42:d9:38:73:02:f9:db:c4:cd:d2:
a1:eb:3f:aa:67:9f:93:bf:b0:af:bb:56:6b:d5:3f:c9:6e:72:
a2:4a:08:27:c5:78:75:c3:9f:8b:0c:0c:0d:b6:d9:b2:c9:1e:
b1:0c:7f:2a:22:62:b4:9e:08:89:89:f6:14:40:da:52:1e:9a:
6b:4a:f4:cc:8f:88:d5:53:53:df:23:c1:df:37:55:dd:03:31:
11:3f:3f:4d:38:aa:f9:f9:cb:7d:25:89:c6:d6:d8:ce:cc:29:
63:84:c6:ac:4d:90:bb:61:42:f3:97:9f:7f:8f:ea:ff:aa:7a:
22:99:e2:af:2c:e0:63:6a:2c:3e:7f:b5:a2:a4:ba:3f:6e:5e:
d7:7c:72:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:31 2026 by rpki-client